last executing test programs: 50.899226089s ago: executing program 4 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="1c39d7d3ea5297334264aa0d3d932c2fdb6ab40e818fc143f4de3836180a56e1454db68ad87e14c1b2443c17bdb9b67e4beb3db295376b3ad53984b51919aadd9cf9029fe342d088fa6a045e37994c4c166f8a55f7d7e094efc96a38a258e9267aa39d9ab06a9b9a972e80192a05ec8883c7e0007485b7a878ef81b325ca5bd7cd644188ffc33ee6a95873a10f196d4f1d2664aee8a1cbd23949ea5201faf1fc2edd04fbbd26500653044588b5b442b7e58e24d7960c8d55fb4ecf966c52b6230a81d3da707b3d1293", @ANYRES16, @ANYBLOB="41e18e0f5a0802e96fdf8d48fd1546a10c03a4ac87495cdc8f6eb8bf00b1d8115adfe7a21fe33733e6546b4d48211212cb4b5b0830f07f143b07afed39715269caa72ed1aca89152429c34991799f29a8b97a8715a1807c46288089afbadf71891b7db17a38fc9a282f07950c19cfb8ba983a8a78c0cc6fa4dc29995f6f8532c00d3ea7344a99ba12ca99fa2a5e896fc66719f2da8185f3b84a84ca532395323bb28857888bac11c3aed605a28d30dd3dfbd77999fea71120e1b39c9a61ea2e64e28053f4d8233b6292d7a16c31a1617ceeff3fa", @ANYBLOB="84dd15114b1bc7d830365bc0b673790ce4f181b2a8323fa16da4c780f04abb0ef6dd10dc6b7e42be7f4ebf1b3e7e78bc812c238dddea7fe65246", @ANYRES64=r0], 0x0) syz_open_dev$midi(0x0, 0x3, 0x129002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xfffe, 0x0, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x1354f7750cba2a7d}, "62c79e04303f3c62", "246d3096c4a904357146eaced3f2cbbc", "e73f8c0c", "656301e577cc21b8"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x0, 0xa0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'gre0\x00', 'team_slave_1\x00'}, 0x287, 0x110, 0x170, 0x0, {}, [@common=@unspec=@quota={{0x38}}, @common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'pimreg1\x00', {}, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a020400) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24008801}, 0x24040080) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f00000000c0)={0x2, 0x3, 0x0, {0x80, 0x0, 0x6}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) 49.89514639s ago: executing program 4 (id=184): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000017c0)=[{&(0x7f0000000200)="9b5b48f40dbf64367ebf500e2a510a8dc3b7a7751377c6e2ed23dc31d5d9dc19f4815a6293ae5127817e", 0x2a}, {&(0x7f0000001840)="74ddb1b96b7d68423eaf0bde3e5eb14cbeb85f1f879d448e8c254b431f6da8a0c4df21bd8c1f730a27c15e02def12845df4cbdf3075a0e293040550ccd7e1fbd3c6e4a4c112d8507387c1a856011b00aaf47022793e9d59893ebc20738deaa7de1ef6da2cc88a95a6c688bed398e74216129f0e6a42abb6796f851228f3e91ced81ee90f8992770f2b61b3c1a1952fd61c69939203fa2dc3de36000100000000000000ffffff2adc4aa200000000", 0xae}, {&(0x7f0000000740)="8a70796ac691b6a2e527f0505295f47ec2ffb38b3a990c843ad83c1f1c93cb1190dae02eb663aa2c533147cda7035542546fa40b11e114dd2c077846a93b411196d72b41b89f7257a26c231456fb53f0f2d0155ae21313040878fa800fa6edcd6c13dedffa88ccad2a84909d22b3b9975cc5e6e1d61d9f725d72bc17187fdca8e59342bd788e5b3a528936000000009b1f73ec05358414cdc17e7c91aec2e43d9907cfbfb57f00", 0xa7}, {&(0x7f0000000400)="e54119592d464a3982b5b12c5a3972fc5d28df7603d9413a616c2a7b7b301d3651b696fa24ae41ea3880000000000000004ffe51ab4f2d5fcd97eef5422fbb2a86cbdfed4059fda73f6c265d3289975ae03e9f0ba519cee67dced37de49c8dfd37c51d7c2a6d7a0c709c20ebedc00080ffffffffffff61f21dee89dc72200605f04d062b0d322b14b93117f1", 0x8c}, {&(0x7f0000000a40)="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", 0x22d}], 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) recvmsg$qrtr(r4, 0x0, 0x0, 0x40000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket(0x1, 0x2, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x7ffff004) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x0) dup2(r7, r2) splice(r0, 0x0, r2, 0x0, 0xcc4, 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x623}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0x5c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x38, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000140)=0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 48.663748898s ago: executing program 4 (id=193): syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x4003, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3, 0xa53) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x2) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000740)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000001c0)=0x20000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5d549a}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000000)={{0x80, 0x40}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x1}) get_mempolicy(&(0x7f0000000240), &(0x7f00000002c0), 0x4, &(0x7f000052f000/0x2000)=nil, 0x0) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000100)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="dbb5682e071712c8"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xff}, 0x0}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 46.722990582s ago: executing program 4 (id=201): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x8, 0x0, 0x100000}, 0x20) unshare(0x2a020400) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80000, 0x0) lstat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a8435001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780300"], 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x0, {{0xf}}}, 0x28) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)=0x60) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) fsopen(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000200b06010000000000000109022400010000000009040000010300000009210000000122050009058103a00000000efb78bc108f02"], 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000680)=0x37) 43.447796946s ago: executing program 4 (id=209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa1000000000000070100879f01bf6b4fd369000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='btrfs_cow_block\x00', r0, 0x0, 0x8}, 0x18) 42.665438437s ago: executing program 4 (id=210): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000010c0), 0x7e08243c108c57db) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) futex(0xfffffffffffffffc, 0xa, 0xffffffff, 0x0, 0x0, 0x29) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000205804165000000000000109022400010000000009040000010300000009210000000122020009058103000000000032a21e099d8b3beeb1ca3b84926313079b714ad58f2749e14c9e0c93368962e2bfb10983a9262e8be81acd0f6a3c39c0c6e6f060c7fe461cc41c3f01d6e4e09d5ee54d02dfb84f44a3233225ee6d81a5c5"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac=@link_local, @loopback}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="492f869a9354"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000000000003a73ce701f6d2b000215afefba898895010962ee311e476cf077c967ee85dbac24b7af024e41d81818c519df2738ee72ba0a618add59107716579b4fc957c4c2026ba361d6019fd960b56252058ff0356e5db8a94cdb25cd06cb94d4bd38e4d6531dc543caeb6284206d7c0b77fc0d7a719ad511601bb8207ae93550ae9fd0d16fc37edbbc1698df4539b4081d47c19d91a71f9ce05efde55a8128c002ab920020e7c240cd00a6b8622e788d85a5610d1c5ab7ce55fd34071e21f7ce765bffedb0bc03d3a00822a02b730a86bdaba2689ffca434"], 0x0}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001180), 0x3, 0x50f802) write$snddsp(r5, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x6, 0x21}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000780)) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x72, &(0x7f00000008c0)=r6, 0x4) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x8010, r9, 0xc9dc8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001280)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) close_range(r9, 0xffffffffffffffff, 0x0) 38.355064543s ago: executing program 0 (id=220): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1, r2, 0x5}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x185382) (async) r4 = syz_io_uring_setup(0x2a5a, &(0x7f0000000a40)={0x0, 0x5863, 0x2, 0x2, 0x12e}, &(0x7f0000000ac0), &(0x7f0000000b00)) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0xdcce, 0x100, 0x4000, 0xfffffffc, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000000)=0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000c80)={0x14, &(0x7f0000000b40)={0x0, 0x21, 0xc9, {0xc9, 0xc, "780f8909b7fc0d1fb2275536693356aeaccb53539f5d865d965ca4d499db5ca21f183f2304b3a3dde8a43bb430698d0090234ee58f12feec7074233b97a73cf8615458dbe1eefbda5a361ddd71629d48572fb29c20f6f712720919176acf60e930b99d16a2ebdf24ff1d029a00c883d79e2cf1b91d8b45f4973e6e624f854e1a4b220ea868ed731859a7c702189ba3c9e19cb05faf6fbe29e8520e7b2e57918334a144d9c718f5596b76ebd2a93d6d232c11f4f8a4915211e49ff5109ab0b388e663c9c8f43d4e"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000cc0)={0x0, 0x14, 0xfe, "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"}, &(0x7f0000000e00)={0x0, 0xa, 0x1}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e80)={0x20, 0x80, 0x1c, {0x128, 0xd, 0x7bf6, 0x7, 0x1, 0x8, 0x6, 0x101, 0x6, 0x9067, 0x5e0, 0x7}}, &(0x7f0000000ec0)={0x20, 0x85, 0x4, 0x6381}, &(0x7f0000000f00)={0x20, 0x83, 0x2}, &(0x7f0000000f40)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000000f80)={0x20, 0x89, 0x2}}) (async) r8 = socket(0x18, 0x0, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r8, r7, 0x0, 0x80006) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_usb_connect$cdc_ncm(0x1, 0x148, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x210, 0x5, 0x7, 0xc, 0x8, 0x9}, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="050f1700021001080300fa05cd00270000000000000000"], 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xc6, &(0x7f0000000500)=ANY=[@ANYBLOB="c603e7e447fe00a8703fa90bfe7cd3fc3293e2748a00ce871b00fe4758c40e4c633af49dbfb8f1569312764bb2ff83c997ab30bfb69e9177d94634556f85b472717b997172393f5607f818913eadabce6477a770d35e132d70d2437d568ec85a0ac2d6673256ac3aba08c10bf11cecc886146ba0d64d403bd2af2de15a1ad5c53b132e3506f44e8c7f707e729c33190515195357c66f24be1ca00fecf179437652d16f9ac7c748f8cb4a8c46e96516b58a1f03d0becba5f9e9e7abdbbe203dec908250bc7777"]}, {0x79, &(0x7f0000001080)=ANY=[@ANYBLOB="790389f2ff09d22d493fb952f0c6348c1ea735762b57f520bd606d4e7dbbb7804465a9af0bca4e0a39cda0037ec111024eea4911454bf7da6b9028bcc368bf6df10fdc1665471558847b47d4170105e3a573dec42b5b1dbfd95595ef24f3b96a73655c579bd5f9b1f1c8b9eed6eaf46e1828e0da6f4a305ac75cda"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc09}}]}) (async) syz_io_uring_submit(r10, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) (async) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) mknodat$null(r11, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002d00)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001208000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) (async) ioctl$TUNGETFILTER(r11, 0x801054db, &(0x7f0000000940)=""/212) (async) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r13, 0x80015b12, 0x0) 36.725726298s ago: executing program 0 (id=225): syz_clone(0x6860000, &(0x7f0000000000)="7b9fdf4852faea48bf3aec58f99c2850b1c2f08c6e91ca0fe65a6c0cd90e6d2124a768ca57a7478b02d847d081abf6b062c307202e5532bf0dd3cafe15de82c1fccc7fabb2b5a505149649771c8fe09760d00de48aaff4030c3c39e7f0fdcd65047226a5ae11d01c0f7946a316e6c2e94ff0e0d96b974f92f862e0ec2374e51239aa47e7ce81cc964da78dd4644c22f5509add581ec41ffa309bbf71a43cf5acd564e754853cb3dd4cbedfcedc48044844b30eec12f3fe135f2901584890da1a8d6c4cd52f4690a9cf9ef2c5cc8fed8df9af68975deaf811a4636a1018999e823e89649278fc0620464b21cec7efd6", 0xef, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="9b12e6d9476d3bc34243a4dc2334be75c9193f800b419c2d376723f3039d0b9b1b1dec2b7b8637910d971c394a5fdca2604a58b15491c771d4ee83f7f67abab6773f5aa6") (async) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000002c0), 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000300)="9660a611ff63b7c6133feaccad933e1e910676f52d63ae222a8c5f287465ade57ad1a254d9f3bb5126fbdfbea0b1652be58b2cb80ca70ef15cca4505920a8d15a761cbb2ca84c1705f5a64214ff6da7837265e3cd3c6117b75b300d69aed83e48e65f18a020246f8eb9ef9e34137b4872104047729e5fdf045f0013c10011d712055140e527076d8b3e0a54062b61defb8b6f97ca6f4694b1b018eac020b8471e6600740a2b4893f144763c6cc2bfe7618a578b8cf275595c240a3d5c7b63cd5568e079761bd12589a5524fcde4e1b8f90199eb9a9e141a462f82a1ab3757cbc204be377", 0xe4, 0x8080, &(0x7f0000000400)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) (async, rerun: 32) bind(r0, &(0x7f0000000480)=@generic={0x33, "1d6263aa7005f27121e5be24d2ec4d58edd13aa6e9e9aebd80303cf5f3ab3856d8d728b405a827d413e6c6854f3bd962809c7de5d79841d1be203d57687959269df2db9afa3210c0b5d7c1fa58505831865369001ee5382e59e23f581f8b99c2bfe9dd64bef9fc401cfb6526e40e12dff57ae2fc6fef85d10e778c8bc5a9"}, 0x80) (rerun: 32) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000500)={0xab, 0x4, 0x0, 0x1, "f546be925ef854065401dd8a975cd73de15a974b4c47eb09629fc5485b8fcf9062c166a46cb478ffa906217c68b2efc37e1dd780220816a4d9ef2c637329e700ead4c67a00bc5dc9514902fdf56e8609341ee6578c4ab1189346ac83780d8d69ffc7892e06d5ec8e780e7ca8179b46524368c2404cd14f4a2375768595a6dad04fe44cf55d61280864d0dcc2f1f7033e27fcb9"}) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000005c0)={0xc, 0x0}) (rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r2}) (async, rerun: 32) r3 = openat$audio(0xffffff9c, &(0x7f0000000680), 0x30001, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f00000006c0)) r4 = socket$kcm(0x29, 0xc, 0x0) fadvise64(r4, 0x3, 0xffffffffffffffff, 0x4) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000700)={{0xa, 0x4e23, 0x6ef, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x37ce1aee}, {0xa, 0x4e24, 0xfffffffd, @private2, 0x10000}, 0x0, {[0xb, 0x0, 0x4, 0x6, 0x3, 0x6, 0xe8f, 0x9]}}, 0x5c) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'batadv_slave_0\x00', 0x1}) (async, rerun: 64) r6 = dup2(r1, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r6, &(0x7f00000007c0)="350a77cac82d86766e78dee3a02553646c2c014777ed1264f6e29170c1869b09d7ff6b5be4b4525c97cefdf8151dd68ce45021d4015d3561bcfa5d9dc7fb264d4f0e407d60c86d66b2b674d163ae324cc10a5a70756d55a7bd7ac44dbce8e000c0fac6cf3864d0d4a8b3c38eb495dc8dcd5edeea47f4909f536ec0ded83a703593579151a9d522cd8c7bea55b47581fd402d7afcc414b6cb4f7c55292d79a8df8994a04fce29c8deb04c8b5541ae95cc30cb01a4a62f0e50025b6520721c9516adcd7ee247e80e661f043137fd93ac451786e00a"}, 0x20) (async, rerun: 64) r7 = memfd_secret(0x0) (rerun: 64) r8 = pidfd_getfd(r6, r7, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000900)) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000940)={0x0, 0x7, 0x30, 0x4b, 0x4}, &(0x7f0000000980)=0x18) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SUBVOL_CREATE(r9, 0x5000940e, &(0x7f00000009c0)={{r10}, "595e08ccb6424175be07a8641aa9b9faa3997c5611b87d79145a4efd90d8eda5c532f5cd6313ca62dcad1da90e68a304fa9cb6144b95cac477a0f9e3a3a6ed0090391f19ee51669aeaf56440616444b0bdb770d791b6fa6f9544e8e5d7a7e639a63ae7ccf049ef3c491f7487700f9316455c18f9f4298717ebfc258db2b2350aab9087ce3306fdfcc5af0f6a95c9733ec5490cda8b58017d36334364ddbd3e78b24e091635e02d28a724a12c90d950cc1aa8ba22a9259e8805fdb5684fabdf96b8b2d614a5887f465109a514446c78c219399ef68b0e020888eb021e30170c18f5c481c639a3c0649af446e7e6d82a9db68e90360996385bdd2e7b964640174cbe9dd852266c9307e875dcfe884dac7b17d029d0fa3cb8b0ee9ceb49896d0e2626a5e1f343241d735ca6cb0f842ce2c4a4318ed982b66f6130d9a633c6e4f588541c71b77180f786bed53dc1decaf33c0ed1b77fe25bb819505ec6c8ee93b006ba1727e544e75db7e95992a4cdb7a7a6336c091f30c11d98ef0dae281d4c9d607423465fee84c8da85acdbfec823e7c9623de230a356d48978b005c4df16c6b46c4046d1ef412451f98b5d71de859dc80d539dd73ffebedd74337ae2db26a581971c4c6051b876a0e36b1e2785e5c18c6437951dfcb3ef9f4b8341a3a8f0b18f48fa43332c992557768fbbcd0b2f2d4e90d4dedd36c806a9bc6182494ea6848cabfd30b9d413c0acfa0125f221a7c53423d63e5d512ed4c13e399d65202a2a4839504ec985b63b3d9b0f916a300104da5592f4faba7b59f7e1c5cde2abdc17d0e899fa4be6406d9bd4c1c7964c23e27f265a540864ee9cbde72825ac9824d74d9b179d6dc223d17620f9c2e171a88d549f376d399ec26171123857237cbb5c6dd9283a6d32fa23f9460cb6bc91c05198fd2a3891f5b848407a7f8f7ea4b62378038156d08209f1be7eddf0662824c7846bdc18d887e9b1b995e1713419c4be4302f41f8e212f3a07fde9baeaf26e3cebddaf154189d9cf619d09f8d1d9bbef6d1deb05c824f9b0b54e5beed66c1c2f77d955d5cf8b2e165b8bbaf4988a4aa7e09c9aea14bd64f1aecd5e8e12229e729e35651fdadf739bc6aaaf6a749d003e7ee6faeae4e6d17526cbe44ee1d198ed4481d746dad788bec4299e2ec2813c19f99fd7582d9d7be0f4ec27adb4bbd57acd5f78cf03e11e9b4bc950570dd7636fa11dfead7b74f8f58533c326adf9459fef1ec4e797aa7bd3c0120c424c4f7fceb3f9802bb15dbb36be18dd47dc4f5e7f019e6801bc23a15c54d2ed3f7da18648a5b56ee2a912ed3f0716b8406e4998f23249ba01382c3a23421c45a5dffad92a829b93c25cbfe4a19a1327853eecc16bf2b00c134f4f3fc82914ab11d73790cfb00f240f04c552b3550d7807c1f4c18451aaff1ca81ff9832865541fcded33d09bb82027c411af7f10e6e92bd21e2713b43439722a127b4165e148406a38c7200abb82c6719255147f31c8d7f05a5f8da2b57b17e698d570c0aa0d87f6d28328363ec50b7373fce03554e56b3af2af8aaacd7db48ff6a4249c556e70fb5b3f6225cb8f31a417a2ca954def4279b59c9793775c5cfea948b934bfd02946d8248dd9406c8d6c4de5b96fd0a477734e535a2346ed7ae52db7b31784e5c0f3b8662f679a98b4e7fd913d31159a838ca084066eff09764698afaa262f3c65d99221e58d49e728c35cfdb0433bdf261788882dcab909cc611f2156b3d36b4a02f9492e451aea79454a73380f36cb68a3988828ccda47b604bc0e932ed49df6ac77183988d301cf9eb210b7010556bb48f2b5b73c78d0f8aeaec26815f1581d4496dd6a15a853c8935a4c833f4e9b3233d975b3feb9d1c3504a62b7b1882a99b1ab49ccab8ebb443cdf488abf1b98e3f41201fb028b139496a189586cef487ef68599902644b89271f3e752f2fbe4819299cede978bea691117b2697545b863e07af31b7e8d624042cf1e6f84180db2fadfc5680fb0874665f50caae20efe66f9af674cf9fa9f1b18610dab9f3e31997bc933348ee06a9c960698dc07816da85aef1026236dac85ea3e8d34deea56ea5f1e32100351317ed23f30bec3507d2c7597563b274be4bb291c55df6e901a479a61794accad1ca79ce7a6c70bfc76480a29e12edd3bbdf1c8f1fb15aae6150b40446a4a8342d43afcd8d552d447aa36b5221d3753cf3a2db8934f5d7c3d7796090502cf1a21bca317d2227697eb60736ac3a925c222c8d588a2feb8c52990ec8d73309b77aaab6364356270f0133b66d128e39db422b2d8a545209a3e551b1a9c1d984ec460b6e2a5ed354d333a3c4fba5abad89919515cfc662b329a3d1da8be3f0896d0faa548d81840df19919f04847e08fba7d4bbfaba62d542fec77a3958a93a121a77ae2e12bc85aa010eae2cf5ba2b58001d120eb439d12d29f6c4e65ef786a39e7fc9ab2f33f8c1f4af139dc283ab0b5070df9eccb8f8a08e67c8f17ac9f1798215c6cae8e1d06c6354500e000190e1e5656204a42d25d7dda67f02e88f304f2de7b10489779c2245e64cee9e6129f8946a6a9897fa89198db46ec1be3d4fe7f15d9c9b4cd9ea0230e7877990523447ea059b02ed8a0b31ad6253030cf2ec75000ad8cc9197362c8c621f3c64a5acb86f797a491674ec647647cf845886df2015851a618667ae358c977260b17a88aef71828493df270749cce6d6f292f0eb8916adca1a65e1edcbbc5d7ce53070cb3258b3fe12820a3fffbb1759317867a0a87bb69529b44ba4131464570bef2396156d3092022fa0e77a5e58f41c6c399c3e3ea87232666a24673e15aa4615112053100c00c7b4ea27cd901610e7d88ecbbbcd7b74493d962dbae8dcec1a0e116eb742131de2bf58c6faa95eeccd733351fc14f02f80a3c0a2c594a4fdaf2f8b553bdda6c9c4317ac7a0c9cd0ab0cd0722d4ac6e93dd7c7b84c6a0be0e45815797733d518c6b8a2b958934b2f22db0a9d00f506ac38e99452162d24ab5e2ded20c9b1bdfba0be8dade013a26d6081cef030fb43b37722ecc7c1ac217e85a675be33ef50b3d2f5d6c52b72032d7c66b349a3d0b3bb401c5f68085ffd42d732d254d0da5a3f6544a517e3054cb1654184a3845ed0efa3168b919413361747bbfb242e2c3a930e98bcdef9964d61e28e5741fec20db5af0d584741b2e1354a9c809b32dc3547838a51993d84908918e469e8e3ffd7499825bb2dbc0e7906e68c8584948f78d271a6681b60a329c6276adbf330622250439ab19f8d7e59c1e386038c353dd35eb631db6a33221d31add2799c53d387859ccf3bd9a0291f39932fb8dcc29d2964b6f5d06747b332fc5aad4a8efc8cf9a001a7890e1dade45930236beb8266570a50650e6c2fbdad2693ed5d3d4eb162c185185aaff2c65f900bc1abc7859a66dc4a71ac0554751ae33dc2f55daf918cec00ace0d9f512fa7dbecf9afa34a96bb6a9cb2791166bb3014fca1e4855dbb326d1fc7ad1a4452588150bee3c12fdd91a051803ef08dce2bb70ce9b1b3ab3469c1a7646f26a9009ad125c17053816eb57f2a17ecde4101f515e7aaa382d9db9d6eee2a82d54025b5edd20f11c0d6e3fb871b9c9ba296e840d1e6d078f0b4ff8cb6db561aa4da7e99a8519a43c4a036c43733da82945730d9b88a620c67020c4f6841dd422dd157cc292ffe47ece54939400ea72b8b2a28a2db61b1c73999a556ef78f58ab16d482f39d3cc335021dbed8ccf633f8b9b29bb03164598badd26950158d703ac57a0c87188ca3b1fa281dfe049cc4d4bb8e960a9cdc33d8114b84a3b31229f96f6056fe3c523c6d9185aa53a4a265396c40421d58c96c9bef3a55a39f3d1e3ebf3a16112e3ceae8f912d653e55ea95be546b3850ae4fc1e3756b1503df1dfc59b295a6761e68ccf0b8a661991f03b71646ebe8613c5a6bbd5ecd22b73520a862de153f68330ce7b1387dc1f1b93f98b33a0b4c0a061c3757bde5ee2cffc4b5dcd5f86cbc8199135bc46e207632a945a419b08cb29dc5ba2fe57b91b51cb85e9db27a85837094252a3a5684880d6b611a66e9e94a6fce7c77ea59d2bb9bb172ec62ca871ba3ba0b002126cc61560abb94f3f9ba95e7830f498256e01727d96c17612747e3734f08fc880301f82f1f7a35de3acba5a9229f68481adb9cd407565fedac82a3a55b9f6763bb03a99837a70aca25db0ab86e038fa8a25abfa2eb082e6509a7240c4b4ef024745a609aeaa4efc6c61aaff8c7939995bd45b6c3f0d9c2144d6bf46b5ab81b99e32fcc1eaf7343ab60d982a57433b60977766c571ca30845feb7c55aebfdb6441a37cf79be320f1e0e3a2c0a2792356c6aead1c96649dd15829cacc8f9ed67354f864fad3ec533aaf1af6996435cbe903e2fd7daa1cfeea4a481a2840e294b9e9aeacbccf9869fafa7807d2e2426ff05d7c562a29040b1401cd7cb49719f536bd5e0ee58276419c4b39c7dec1cbab00fbddda7c760bf86038da21c302b57af70468e13e1ba6dc3484aefc2557fb61b08d77b53d5613d5b8d9a63fb93e10f84b1815aea440f8280788087e4556c85390cba9a7c9f22f90452f96fbec6ebce356b863f1a12e2669358101cbd79a4f61c16b975b3379e96fc809f47a37a23e7461b75ad8f73114c82bb84f739b7a8dbdcd3d42e60feae3679490b449ea67c4d4c00bea1c092bab3671c77c4445c249af16bae442ba15d9a35a07f212deab8b72362c1a930cc6f14ae384de33afc8add62d25a43656d998887d94177cdc25344056501d74edb91c806ca8d15ce0cffcb7818c1522ffc655c54b4df1fc38a15d55f6cd7c97e924b437abc9c26dde780d94d3959f2e0b30e043a0221602e16ff788f1e303410410d04c93690403fd1ea5b3d2b120b9acc4058203dddce50667aa9e0618d5f88cf368b943576e4c3ba1068e9ee843cf69bc6ebf54b0fac2bae507cb65fd92bf0874ab7ed0e0d8f4741c635409c5b9d56f38f09d7ca9003800c82a18e2f28a194c2b1d475375c34e0c6199c3f60f7128196d9612a3f3e289c8557004f87d77db6a895b900af2415fd0cb9fbe5fe6b6e54ab9ad91870b3abd09fab24bf75b60eef16464d50fbbb2f19e58e425ce0a8887d21962128eba4325e85b4a6774602266204e0dd23e8b2c41d3206195d8cdb7e2e6b8eaa0e05825270b9faa60f924080dbde3e747a62eefb29eb1c5b31ca47b992d4ec28690d4938efc7c4f81e9ccf99a01f7841af3bb18b067163be18bd4e081eb200fbb97dc842c44dfb25f9d815edd88452eff7d7be4afc848d69afc826e002190fe7cbb10d323e455963d4bfcf72952e0fd0a0a8e77d884859107c743d70f36146d0cb7ab019bf729975a5971a6f8f0161524222aa62590fb29daa559a8c7705f00d520f9b47d8d1c59e4db0cbd156811959e9bab7128e090a801d0a22541ce9a1aa0bfa0ed2ece8caff676c2d858147123e31289d71158595c73b78eb69367dbd42dde0435e994ddcc45dd28e380b8e7e28ecbde2edf9f761817a5b646315103b5a263f2d417a897f522a0c3e9c00e91ee5c685d9d6bea544fc01bdd67c2239786414f9840ce5d2a24fbe03638875f1f98a60b6f084257aa527da78e035073997f02af0a38f5d59b569232a848ce3a07a17c63683964fb409733ebb3a35da4de0a7a4c6e771c50259ecd67781a5725d6c8aa457e7eb29cf2ea6ad2eb2a025a33239e2d219058487b0e83eaca84dc1f07600175bbaeffba9ddd690c7a2b53bdf5991801ff"}) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x800c5012, &(0x7f00000019c0)) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001a80)={'tunl0\x00', &(0x7f0000001a00)={'tunl0\x00', 0x0, 0x1, 0x8, 0x400, 0xfffe0, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x67, 0x0, 0xa1, 0x29, 0x0, @multicast1, @private=0xa010102, {[@rr={0x7, 0x7, 0x6a, [@multicast2]}, @lsrr={0x83, 0x1b, 0x47, [@remote, @empty, @remote, @broadcast, @empty, @private=0xa010102]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r11, r6, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000002d00)={{0x1, 0x1, 0x18, r10, {0x8}}, './file0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002d40)={&(0x7f0000001b40)="cb4b6ffd2fc2f8defae7f2df6cfc7beb6a57b498ebf51693e6aed8f464d595b2617b74c4ba55d45501b22b45b5d1f7f4c4482e07cee1db78c66df2b1a0ef2351d67298422486d09682338c8be28c3a296329895ea52931c9", &(0x7f0000001bc0)=""/82, &(0x7f0000001c40)="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", &(0x7f0000002c40)="516cc0a5a1ca57e48bb25f364453594918f98fcb17291d4d0c57800422a1eae0dc4cc2cc2182a3478b468eab569ab41afb0e08b426425d69b39ef7cef2174a53bf03ab2a4d6b00765253b28db52c7f47643dc5450fb8201ed4060f0b1c68473105c734713d7faa6e487fbe7a0971672ae227a3eaff24edf32fe888a0609231762766eb72d39b226f371c3e13a86ef4a0e478de1ffd14877fee262fa174176a35580b6ca9a08b6047064a", 0x200, r12, 0x4}, 0x38) 36.210313182s ago: executing program 0 (id=228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000b40)=@newtaction={0xfe0, 0x30, 0x800, 0x70bd25, 0x0, {}, [{0xfcc, 0x1, [@m_ipt={0x238, 0x1f, 0x0, 0x0, {{0x8}, {0x180, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffff8d}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0xd1, 0x6, {0x6, 'mangle\x00', 0x54, 0x7, "ac3a5d93706384fda8adb19dafc4fef0791635ea1eda32a727229f099f768fc230a20c162ad72f213b2f6649f2c4305a284d75bbb1b2d30fb6edb82da20b59a9c3590a2aa8a960223efc6b4bbbdc7daef03d2bb4e12305b86967cd0b3e99545040ca3f59b99f7121828f0da808d952b5bd807762282d7bc06a4c4ea34ec0057797a8291acd58342cfc7e01fd381ab757e55f39a02d517bc64b9e42b1214ead7a548d0546273acf"}}, @TCA_IPT_TARG={0x75, 0x6, {0x5, 'mangle\x00', 0x0, 0x10, "f578c5974bf0682c86dc2028a44159d24246e658b5079ed7d8a63b3f66e76c23d27989f68a0b2572e6c6b45e7b4c48b30eec860f80266781385d692ee2deb736191928a7c0478859f8f7a7"}}]}, {0x91, 0x6, "f66f9429eea2e1b6ded1b7fcd62b9b4dac78c315d6c22b8fe895435e07ebaebfb0f52174ce47551c5a39ac25e30a0c5087d397fcff9ae3354e1c83b28d102f926ac4ea172107ff9437b00caaa0e4f196557812992e608a276f15c2790a6add776c00a976cd91df097c85557fd713ccf9dc1e322c057c707b56051e99607356be7d0b3296f81c3f8e2fcb4fc705"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x118, 0x13, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x69, 0x6, "e63b72a3e06acd43ef43b855244c194afd3c88398aece6c918081d00f5c043519229cfa53ecb2c200afd7dd580aa4c9dcffb944d08cc48395c01b8e95ab6c6b0fea760e2249723032301f19b012c3791e14dc659394b8c26db286e14cab4b132e6750a9a19"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0xc78, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0xc4d, 0x6, "b83718abd9eba8cd75f52e45d746ecb56548f99e2f6af33b4c4e02e6daf449c70f75a35938afa32aeefa3ab606e354df654f67fa6e12d7ac94bbc5348227bbcb2735f44e6b28f672420f28fe66dbf7e4b8f06f6e846adf8cd55f3c3dfac4d4215e4554d7993b68673e51f4d291686ac4ad623c645a5a5e000aeed0d3f9c9cc63e1fa65a5ec8c4423e0ef918abda2be435d67dc2c66240cb3c6304af09f07d1b1dc50ccf300acbb82a4ce2f34c971b96ae6cb386dfdc917cf07a26b207cfc1ba985eb49987d41467a6803c842fbbb041611f6819383e9e34c353667a89f448929086be46bc0736d933deafabddeb00ba621ed251a7ffe942d90e550e9154c8ad0a01ff2b8462cab9e8971b63825d33dd69ab8cc505ce69548b2678c84bdeadf1a15f06f69b4f1e3fda62ac66ee6846b1658ee7e1fde8e2e7b3ebbf416d53810595bd5cbbeff8dac3720eb7a4340b4beb3e866c32419bbeffb635c328dc71788d67589149bc86a66edc37cdf77e64fb2c635aad5fba17175a5207df5b0f9f50c4fdf592d007a0177831d15562a3690c405da2e685681a7776deba5b53f3025946414893925bd457f1862fee4e78af1bf4bbeec15e538a6fdf658f32be3861612ea29ddd89e53383cbbaf726fae10bfb570cdd2059396bac9800454e9915a03d9040bd139d226acb9898a006388b29cc15fa9b2b8823abb08bb9c0932341ae068f400d7b4d518265f76512709540d173e26d2cc56839994f205d7d5fedc134d4152a14f69fe37d1f03062ae8f0df8102f1f6f981aa07840432039b3145404be5e031f1933d08e2813087b9ffda9a4a63d4b16c5fe74b71005ee5bee4b6269f54876eb01119d10c18965f192a209d3b4ccee1f6e284305bba6b23cc563b96c3016c13cd9040eab459c63a05b33fb934dd4719f46539b1351ae0c3ee349d952f15ceb3acf7dd47e7819b97c13a41c1a28094c5483f8bd8f9cd255779e3bdfab5e121e9012c4af20a10e3c474dc5bd4bf0dbc04d654132f9b23846aa80456978dc23966a3377f11fdaddaa6f96dfa7341947366ce8fea0f6325f7fb9d4f1028f844e9daf76a6b92ff63eac8acb3efca5d34b4fbf3944b19f30f66618bd48855028c0c4111b65d4c5e00e5a08a017f9981863524822e3ece81a1d2667c9562e518239388b5404da13e6d3800a3470f30410657ff04534b2cf2356a4edcc8813f62e77de6b087d45a163af8e6012267035a6cce32fb7516e83a5093ccd7d165ff3b3cee2de8fd7dd35e9b94cdd0234493dd8466fafbaf9e39cdac0db1f94710833a3a72f476b045328bf89cff7b827898d10a54452fdf3968f6e737d16afa16c34a3fe7fd5681fc028f58a95d15716222e5d2547c9660e652195472fba3cfdbeb25840ba197a66bc347135565b01aa7bfa3de2fec5d389f9989648c95025d610ccc87d5bc0a50ebbe6754ac27e9ebc7bf44fcf0c8ac55bdf602dec969fb6afc413b8bd742c97d798e9dceca6d9886b584505998e9616aefb8f8f6012aff23272fd711d6f2482f50999a2a3a827ca5109cb13e1e3eb44d73e951ca1708a3d688ad36d046556a41b4dd92e99a7cbf620952a345549aac28c17d9936887635eef39be77f86d3298b6883f74d66cea5c8b0f7023d33e7bf82f501d7909f2fff15739089bdb6689e38b880cb0e23c7a1c3e16af71efbdf546e0bb642eade5bd431b907fd6879046649b035819d4650fb9b8742000911dedfeac257bcfa8c75b34118252451f6121cd74b9abbdf9e78aed38910b87cae0006d16790ee37d7439a5dafc6c57281ccd42a70871b250c5ddf442f038d614d2dfb8639d58b8cac260b97d68d9066d5f1f4e747b806e6a33e46573fbb5ef780ada6ecad14a212396261ef2e435699c03c10e08ced66c39d0a98f9a668b44a789582222eb3bf9215c7c18cde18d19b1915991fd0735d4c92c3cc93a0e5e1ebcc49f9a55bb7ed095b264147c71beebf966640f9752f8e7ee71277a57875121ca419016859fa25c9a3e35418bdc91aa5c5f937fd34336f1fa142670e55b496e1bccabbd955aab6254d008032f3445264f5bc6728b811e13bc0df7e3b451374bb9b64897d21fa96255a1e22618ac28efe370acc5dbe10e341b86c9907e4f5a99b5ce1c1ab111936b98187cfcf66b35b2b7124c05c03f3997b2752d602e680c119c7a1ac1d93776e53067747e6176943755ea3bfe798c93e34e9c1976dcacc6fe4e36c62db49611c79d2470e1232653f5a99185412aff4280777e98d199ed21176762d74a08a0641f3689f57f9f662e09a0682f66de096186bba0fb3994c1305c263b56b5705d34216a69e2eb8d4ec61c93e95b76333f976a776e3bd06cc27757798f7d130b26e158fa9e6359ec55f86f91efc3851f1f414604c208874a56f0738d47a36abe695fd86184528efbb8c84dd37170c60b6f89440a20c629995a699a70fa1d538a6515879a206ce61d72c930b8ec4fff20119380ce3ffe6e3589d0fb2d5e69dc15f85b18271a7820c987eb36ff3fb1a7a2bdc276a71335bb12a6dd2470ac582cc1256de77c70b949f1ae3e94a2e2dfb5c431504b4b3f202df38177255543e8e724f55b3caaaad12af92ff2e5606f043be75f530aaf2712a8722fad1ed6aaff9bba38e2c0f4b12372cd06454a3334a47e527953b5e4137e3870d83d42db7f20920437c12c491c5978a16ec79ebc4589cb31f1cb9e554fce56e6423d3e266e5726477d61ba019e8c2eb5a12b145b3a9d85e1e2931b29a32dfebf789aa0f8ea11e6715b1963a281dbd568d870a104e6d9a071f33d29049d4d8d9c59d78511720cc68189401ef76e34439b57456201d40ab4a5824c04f8c19bc46d6f9493714902d59ec26e2ebe0481894ac7332c5ac0dd3c1f4bea552d4d8b5d7c12f50602abfd47024d1f1646b01764ef57cc2d80371ee4aee0382af573546e9a29f9f84aeb7ab1d46e94a6ed2d6639d91b705a960208c4c9332a76c2743a507953c8a7b37c8ab54c7bcbec232c240814a7e1643022afc0daf3d09535221252dada18e2c54ef57eb6c95f831c5991dfae040f932c167e9a1f971b10c862923625676c15d582733d6142b969c2c530f17c3a38e6d0acaf82258afed939996f261cd7b893763284a5264601c9a51f22cd65ed813a082750f0efd2e1d5039dbb6f96993596dc5b9c4afea614a892e788dbdb62756b6e6de93f0619f3b78c333fa00512afbff17ee815da87da46a35c1a881966de268235ce21f4e00972f0c78cccdf3b3ac074fe2b9ba57f234bda80dc86154560c977727208b68b922a370dd9b0bf59f23d279d8aa849c367d24a615a71e16459b2e499eb9ac368ef62e6eb9b9cc2a9179eb8ffde1ebd244b51913a9503d7648ac8e765242c730ef172ff58e737aef1cc5210884f71e548db4d06ef6b0400196ebbc4a404bab00714aac33d868561252a64d615fea2907bd3c6ba9a8d8c65174ccd85d9be5b9cb54d6991d56ea3212a580e91cf476abb084af38a5d0b3c2c6221ecc71bb0d71f79fbe5dc245793a6a2305cba28ba5428b1fe2af15d165cdd5e38f2dc6527cd3bca4469f7603e6f1e18a19cdac69331bd67d3f4551961f44231260af98f04c9f76da204ead15ada00b406d610941b407c0d43abf4cb9cf5a450dc3fa74d9f9d8ee2a828e8280d79e0edca713b8439f391f7a98a986b50740804bbf3123152302a96c85f94e525c8e075f8cbfbe76e895d3196ae676775e663f6d6725f953bfd69a779799f1c971115cd6b8c74e4ac267a9325372316bdd78f7b1e4c892f6dfd511d72d0c15a5d062dfa11b8a63e55d92944ad02d829765fa0d280c067dfd9c7d5baf2963af4ea07e02ebf00490f8f0ad767a27096b5dd824b028e8831418f225e8b9e80159db0e6174544e63abd9967a07ffd183f6e030697b5355c7339c3daec43c1c78d84933bc44a730d7450a3890ff533072f2852bbaa56ff71498949b9bbbb400c8dc4407ecbfac49c3c7e352a0ff93748230d9ebfc882ef0efe60850b125ee34649af3b338edae6b99b43979d43a38b3a107103e9dc565839df25c33f0c85ae36bdd80c5687b7c3ad72fa472db705dc6bbbaf6e3e2ebe9c7b01ca09636a66a48775f33355229eb64a708a31e17c8df254f97ca3ad577696e2ffe6ec63b10dbd5c45fcc77c3181b846ea13d7b7c0b8f0bd311bcb3e6a87acf65292d8184119a693ee74c53909b87138bf45fd96ec210c83d0d0f7c16c6af7a6656e3c0219c8daa2c97eec8c7418559f1180b2746a39d9a46f80a1b1ff8500088a3e77496eb52ac055c5f3652cc11a0c7171dc5355c00a7c611b10f8521117f9e732ac403f5d5fc5dc9dcc73e50265914190f404c105aecb6a99016de0ece68cb7ed5555a40adf136c7aa04462f8dea937b9b5aebc1189d4a3600c1891c6ccc31fc310d368880d829b4ee0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xfe0}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0xaf}, &(0x7f0000000180)=0x8) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000b40)=@newtaction={0xfe0, 0x30, 0x800, 0x70bd25, 0x0, {}, [{0xfcc, 0x1, [@m_ipt={0x238, 0x1f, 0x0, 0x0, {{0x8}, {0x180, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffff8d}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0xd1, 0x6, {0x6, 'mangle\x00', 0x54, 0x7, "ac3a5d93706384fda8adb19dafc4fef0791635ea1eda32a727229f099f768fc230a20c162ad72f213b2f6649f2c4305a284d75bbb1b2d30fb6edb82da20b59a9c3590a2aa8a960223efc6b4bbbdc7daef03d2bb4e12305b86967cd0b3e99545040ca3f59b99f7121828f0da808d952b5bd807762282d7bc06a4c4ea34ec0057797a8291acd58342cfc7e01fd381ab757e55f39a02d517bc64b9e42b1214ead7a548d0546273acf"}}, @TCA_IPT_TARG={0x75, 0x6, {0x5, 'mangle\x00', 0x0, 0x10, "f578c5974bf0682c86dc2028a44159d24246e658b5079ed7d8a63b3f66e76c23d27989f68a0b2572e6c6b45e7b4c48b30eec860f80266781385d692ee2deb736191928a7c0478859f8f7a7"}}]}, {0x91, 0x6, "f66f9429eea2e1b6ded1b7fcd62b9b4dac78c315d6c22b8fe895435e07ebaebfb0f52174ce47551c5a39ac25e30a0c5087d397fcff9ae3354e1c83b28d102f926ac4ea172107ff9437b00caaa0e4f196557812992e608a276f15c2790a6add776c00a976cd91df097c85557fd713ccf9dc1e322c057c707b56051e99607356be7d0b3296f81c3f8e2fcb4fc705"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x118, 0x13, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x69, 0x6, "e63b72a3e06acd43ef43b855244c194afd3c88398aece6c918081d00f5c043519229cfa53ecb2c200afd7dd580aa4c9dcffb944d08cc48395c01b8e95ab6c6b0fea760e2249723032301f19b012c3791e14dc659394b8c26db286e14cab4b132e6750a9a19"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0xc78, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0xc4d, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xfe0}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0xaf}, &(0x7f0000000180)=0x8) (async) 35.921230855s ago: executing program 0 (id=229): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r4, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8802) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 34.551678681s ago: executing program 0 (id=230): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000540)={0x2, 0x0, 0x7, {0x0, 0x900, 0x4, 0x3}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x16, 0x1, 0x0, 0x0, {[@generic={0x8, 0x2}, @mptcp=@remove_addr={0x1e, 0x11, 0x9, 0x0, "1ad97d5086ff932c1b088bf9f650"}, @exp_fastopen={0xfe, 0x9, 0xf989, "a2f19f22f5"}]}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "c82655ed20a8dfea"}}}}, &(0x7f00000001c0)={0x0, 0x4, [0x8e3, 0x3, 0x4b, 0x135]}) 33.943815287s ago: executing program 0 (id=231): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) keyctl$join(0x1, &(0x7f000001a400)={'syz', 0x3}) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000300001007000000030000ca"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x324d, &(0x7f00000002c0)={0x0, 0xb01f, 0x80, 0x1, 0x204}, &(0x7f0000000340), &(0x7f00000003c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1, {0x0, r5}}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000240), 0x400, 0x40000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000004c9002000000000003000100"/101]) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000001c0)={0x0, "0092938eda08a5513db99d08fdae429e4ae4c5bac9dd8259be4ee64b32c65e0a", 0xffffffffffffffff}) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x3f]}, 0x400}}, 0x4c}}, 0x0) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000280)={"334f00d6daf062d63d5e4449e903f93e48fe794d00c0adb017e82000008982ac", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0383e04, &(0x7f0000000140)={"e3fe98873d275ac4650da6ff0d7ee4c0cda5a703827becb26eba2497c5271959", 0xffffffffffffffff, 0xffffffffffffffff, 0x2}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000f000000050033000100000008000300", @ANYRES32=r14], 0x24}}, 0x0) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xc00, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x24}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) 30.798628984s ago: executing program 3 (id=236): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x20, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @exit], &(0x7f0000000140)='GPL\x00', 0x6, 0x3b, &(0x7f0000000300)=""/59, 0x40f00, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xf, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r5, r6, r7], &(0x7f0000000a80)=[{0x1, 0x2, 0xc, 0xb}, {0x0, 0x3, 0xc}], 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000006"], 0xb8}}, 0x0) getdents(r0, &(0x7f0000000000)=""/32, 0x20) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x108, 0x1a0, 0xffffffff, 0x108, 0x108, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x318}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x4800}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1c2, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x34, r9, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a001000"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd1}, 0x0) getdents(r0, 0x0, 0x58) 23.620359976s ago: executing program 3 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fallocate(r0, 0x6d, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8) (async) fcntl$notify(r2, 0x402, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1a9000) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x6a2) (async) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x6a2) ioctl$SG_GET_LOW_DMA(r3, 0x227a, 0x0) (async) ioctl$SG_GET_LOW_DMA(r3, 0x227a, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x91a, 0x60, 0xdd91, 0x2, 0x7}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb) unshare(0x2a020400) (async) unshare(0x2a020400) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x19, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000400)=@llc={0x1a, 0x100, 0x6, 0x8, 0x80, 0x0, @multicast}}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r8, 0x80885659, 0x0) (async) ioctl$VIDIOC_DQEVENT(r8, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000005000100ff070000000000000a008c004ad782630b7014a6cd36a571223c154449be01eb09be74d8cf4fba36bf"], 0x38}}, 0x0) 16.002244816s ago: executing program 2 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 14.542438656s ago: executing program 1 (id=242): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) 14.452918948s ago: executing program 3 (id=243): bind$inet(0xffffffffffffffff, 0x0, 0x0) 12.792958307s ago: executing program 1 (id=244): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40589}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 12.789341567s ago: executing program 3 (id=245): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x0, 0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000090a805406708129885400000000109022c00"], 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x6}) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/217, 0xd9}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 12.505472268s ago: executing program 2 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/174, 0xae}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4c142, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x4000000}], 0x1, 0x0, 0x0, 0xffffffffffffefff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x1, 0x0, 0xfffffffe}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11.141291806s ago: executing program 3 (id=247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) mmap(&(0x7f00004a8000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0xfc27c000) r1 = syz_clone(0x1000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x5) connect$inet(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e1d, @broadcast}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000380)={0x9, @raw_data="f4e230caaafb5a64b8b226f37c659a5a0193674e5962be6189dc0834d147c234c92c35dc39779831a5f2dc3b7751bca98ea841fbccb3fbb3dcf5c486e8f88e12e42ffdec0340912b1c43626d41d539ca61e32014ac99bb784dae8185777d92b9d75d8b9cd4f4a480d8d79a3c0f4a2181ef9cd4dc20a3629b6379d2be213f46c39c57bb5ec6ec9158c6aa1a656b26aac71937d0abdbfa3e3c70553aaafe7be91c97576ffcbcd4f787cf323064b7065b9e98d2a3f90bd22da2dfa95e008204d3954ad5ac534b55de47"}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x210011, &(0x7f0000000700)=ANY=[@ANYBLOB="66643dbbc6c2e70905ee599de9b68aaef848822dd8c19aa422c060c9a592bd263e2aab4e023bfd5f85bbb256932c1178552188944a965e2b0ccfb34936b75a6819f0cbebd94b6b632914cda31faabcf62081716919a8f6d0379db0327e164eaaa328f18f4245370df645a08ca7d76600694ad2", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67725d6425d632224cccf78c4710646f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1a94861, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140), 0x2) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x0, 0xfffe}, @mss, @mss={0x2, 0x6}, @window, @sack_perm, @window={0x3, 0x0, 0x200}, @mss={0x2, 0xffffffff}, @sack_perm], 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES8=r5, @ANYRES8, @ANYBLOB="ee8517ef432ba7d95e28af947ccb800de58c4f5709d86e88e72fcc3d9f99e2821b818592f7568d76ee5cc4271fee491e43866ef275f29b04a206faada59fac9bd3147a1041087bf2ccefca072c115fb5101164d6fe4df710ef6ac75cd6542c9040208f2f9ec6e9e67132058895c14fcbe9e57ab7eb8e6cf629", @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=r1], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c902, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000200)={0x1, 0x0, 0x12}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 10.590991365s ago: executing program 2 (id=248): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "da537644"}]}}, 0x0}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r4 = socket(0x2a, 0x1, 0x0) connect$tipc(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 10.464702825s ago: executing program 1 (id=249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9001) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r2, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xda}}, './file0\x00'}) r5 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r5) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 5.406468239s ago: executing program 1 (id=250): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000540)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000001240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001280)={0x98, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001300)={@ptr={0x70742a85, 0x0, &(0x7f00000012c0)=""/29, 0x1d, 0x0, 0x3b}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fda={0x66646185, 0x0, 0x1, 0x4}}, &(0x7f0000001380)={0x0, 0x28, 0x40}}, 0x1000}], 0x4c, 0xfffffffffffffffc, &(0x7f0000000600)="fd026d6e8c7d4b8232398b64d8ab1fb3f7357c1094506013470098448866805968ba338775782010171d4f65cc2298be76206550a19ad6d473b591672b6e4b4c6745eb951dd39051188f50e6"}) write$binfmt_script(r2, &(0x7f0000001540)={'#! ', './file0', [{0x20, '^^@$&$::'}, {0x20, 'blkio.throttle.io_serviced_recursive\x00'}, {0x20, 'G.\\\xbc\xa6Zy\xed\xb6\x10(\xb0w\xfd\'\xe49r\xe1a\x04\xc3\xd8A\xac=\xc2\n\xcc\xe8c\xfb\xd0S\xec\xafF(\r\xcc\";\xfd\'\x1c\xf3\x82|\xfd\x89\xf8\x00\x00\x00\x00\x00\x00\x00'}, {0x20, 'E\xa6*\nr[\xc9\xf7n\x82\x03*\xc4'}, {0x20, '-)'}, {0x20, '\xe2\x0f$\xaf,\xdf\x12<\x01\xd33\xef\xe7\x9a\xdd%<\n]V=\x15\n\x95e\x14x\xd3\xa8\xab\xfe)i\x15\xf8:)\xee\xb9\x0eD\xa1\xf0\xce\xc8\xb5\x1b\xd3\x18t\xb7aP.\xda\xe7\x1bB\xaa\xffz\\B\x17\x9c \xc5}\xfd\x13\'\"\xee\x92\x86\xc9,\xab\xe7CC\xba\aF\xf9\xef\x8a\b\xfaD_\xe5\xb5\n@I\r\xc7\xd8\xfcF\x98\xb4\xad\x97\xf2\x98XO\xe68lNG\x1f\'\x00\x00\x00\x00\x00\x01)'}], 0xa, "13be691f65de2bd57003953d1b4fb486811039e9e56136493dff3841c73c8c71d94346af5b6493d41e553bd19f3639648484342720810a46ac05eff7b9d31041b997e3fd549a0bbadb7c1a71aa95c4c90e86f3fdb6037cc933b96cdcf379e41a6b0e2ba9b9a569310e36fba3949fd4d492b21211c7e34088b5ad1895fc44cf3cb9a64a61f45f0c090a53fed167b3c322d60046842f4e7a69fd44118b770f85bffb7da9e8842897176a7ecef4e56b19977dd6307f4b9f2a328791f8653eb1ab37d1f2e19600"/207}, 0x1d1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) munmap(&(0x7f00008bb000/0x2000)=nil, 0x2000) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000140)=0x4, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000100), 0x0}, 0x20) munmap(&(0x7f000061d000/0x3000)=nil, 0x3000) munmap(&(0x7f00006fc000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') unshare(0x2a020400) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1, 0x0, 0x1) ioctl$AUTOFS_IOC_READY(r1, 0xc1086201, 0x20002000) syz_usb_control_io(r0, &(0x7f0000001480)={0x2c, &(0x7f0000001280)=ANY=[], &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x7d, 0xf9, &(0x7f0000000040)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5.404244579s ago: executing program 2 (id=251): request_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000940)={0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3) (async) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0xe970, 0x7f, 0xf9, 0x3, 0x400, 0x4}) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_generic(r2, 0x0, 0x4044880) (async, rerun: 32) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x3, 0x0) (async, rerun: 32) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f007, 0x105}) (async) bind$unix(r4, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r6 = socket$unix(0x1, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') unshare(0x20000600) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000e1402002bbd7000fbdbdf2508004861d283000008003c0003000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) shutdown(r4, 0x0) (async) fstat(r7, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x301200, 0x0) sendmsg$unix(r6, &(0x7f0000000680)={&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES32=r8, @ANYRES8=r2], 0x30}, 0x0) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 64) 5.35272191s ago: executing program 3 (id=252): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x21) unshare(0x22020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESHEX=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x48) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x17) openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x2}, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) write$binfmt_misc(r4, &(0x7f00000002c0), 0x4) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@host}) socket$vsock_stream(0x28, 0x1, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000100)=0x10) 5.029329075s ago: executing program 2 (id=253): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fcd846404c05c3060000000003010902240008000000000904"], 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x8000000000000001, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x1, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) close(r2) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_usb_connect(0x3, 0x148, &(0x7f0000000080)={{0x12, 0x1, 0x128, 0xd3, 0x30, 0x96, 0x10, 0x1410, 0x2400, 0xad63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x136, 0x1, 0x6, 0x4, 0x40, 0x5, [{{0x9, 0x4, 0xb4, 0x7, 0x5, 0xe9, 0x50, 0xa9, 0x0, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0x0, "14d14d"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x4, "688c"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x81, 0x6, "22ab2100cb96"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0xf6, 0x80, 'BS'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0x32, 0x6, "a8f8"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x93, 0x40, 0x2d, [@generic={0x84, 0x23, "39636a1529c5fb23f68b98695f8672e2148bf6c367063b09a044abb6c03e5733d7f70e3e9657a6ef61e5ed278f94f67d1f600ece3260d1d54782c606e7de284460188221290a3810765d96e54513e6ee2a318216c785e22923c793c00243585caf825b935973603d329bbae8ead2690f2475fed989057f239713058348c638a5a17a"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x3, 0x10, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xb}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x4, 0x9d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x79, 0x3}]}}, {{0x9, 0x5, 0x10e, 0x1, 0x40, 0x8, 0x7, 0xbc}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe3, 0xf1, 0x8, [@generic={0x20, 0xa, "4ff9f833f06c9ae5aecf090ccc4d82bd57ac81793bb5016a7772274c3d82"}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0x81, 0x5, 0x10, 0x9}, 0xe3, &(0x7f0000000200)={0x5, 0xf, 0xe3, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "6d03ad5534640beca9c3bdd224678362"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x4, 0xff00, 0xb6c}, @generic={0xbe, 0x10, 0x1, "0d54342e4079dad1c9c81739ab2af82a521fd31163f52b59b605669ff0f5e1002a4c6535bd3698c320952af0c2e5c020ff0aa645f3f8783765e730df5462a8138a37c4a0addc61ac8bda05b189b065f573ff6cbf42cd6028cf0450817248e36a9584830469826a304cde540024f2eac0dcd19765eb63d9a9a7f5da44d51a8227458f53e5ba8f991260ff6ef90dde9164904764ff247acc9643d81f2b16e7579f02bc42bba205e1ffc94a217ffbe6189182110bc4a6a7e050c602a3"}]}, 0x1, [{0x5a, &(0x7f0000000300)=@string={0x5a, 0x3, "e28f050d51369e784f21098d1873dc635099f11d8509e98dd76c29db5f77bb0f39ec7123d11c8ef8813277975ba5282b3e161cd42eac540c69ad7581a321daab642fc9782bca91003920194b064851f1872b8540146bc918"}}]}) 3.360701172s ago: executing program 1 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="1c39d7d3ea5297334264aa0d3d932c2fdb6ab40e818fc143f4de3836180a56e1454db68ad87e14c1b2443c17bdb9b67e4beb3db295376b3ad53984b51919aadd9cf9029fe342d088fa6a045e37994c4c166f8a55f7d7e094efc96a38a258e9267aa39d9ab06a9b9a972e80192a05ec8883c7e0007485b7a878ef81b325ca5bd7cd644188ffc33ee6a95873a10f196d4f1d2664aee8a1cbd23949ea5201faf1fc2edd04fbbd26500653044588b5b442b7e58e24d7960c8d55fb4ecf966c52b6230a81d3da707b3d1293", @ANYRES16, @ANYBLOB="41e18e0f5a0802e96fdf8d48fd1546a10c03a4ac87495cdc8f6eb8bf00b1d8115adfe7a21fe33733e6546b4d48211212cb4b5b0830f07f143b07afed39715269caa72ed1aca89152429c34991799f29a8b97a8715a1807c46288089afbadf71891b7db17a38fc9a282f07950c19cfb8ba983a8a78c0cc6fa4dc29995f6f8532c00d3ea7344a99ba12ca99fa2a5e896fc66719f2da8185f3b84a84ca532395323bb28857888bac11c3aed605a28d30dd3dfbd77999fea71120e1b39c9a61ea2e64e28053f4d8233b6292d7a16c31a1617ceeff3fa", @ANYBLOB="84dd15114b1bc7d830365bc0b673790ce4f181b2a8323fa16da4c780f04abb0ef6dd10dc6b7e42be7f4ebf1b3e7e78bc812c238dddea7fe65246", @ANYRES64=r0], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x129002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xfffe, 0x0, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x0, 0xa0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'gre0\x00', 'team_slave_1\x00'}, 0x287, 0x110, 0x170, 0x0, {}, [@common=@unspec=@quota={{0x38}}, @common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'pimreg1\x00', {}, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a020400) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24008801}, 0x24040080) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f00000000c0)={0x2, 0x3, 0x0, {0x80, 0x0, 0x6}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) 2.66242646s ago: executing program 2 (id=255): socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x80, 0x4800003e, r1, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7, 0x6, {0xffffffffffffffff}, {0xee00}, 0x10000}) symlinkat(&(0x7f0000000200)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00') copy_file_range(r2, &(0x7f0000000140)=0x5, r3, &(0x7f0000000280), 0x0, 0x0) write$FUSE_ENTRY(r3, &(0x7f0000002380)={0x90, 0x0, r4, {0x0, 0x1, 0xb5c4, 0x21e, 0x4, 0xfffffeff, {0x6, 0x1f, 0x3, 0xc6b, 0x0, 0x8, 0x20, 0x0, 0x9, 0x4000, 0x3fe9, r5, 0xffffffffffffffff, 0x401}}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='nilfs2_segment_usage_allocated\x00', r3}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000ffff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000002000001800128008000100707070000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0xa0a00, 0x0) r9 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4, 0x10100, 0x0, 0x1e}, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000600)=""/67, 0x43}], 0x2}) io_uring_enter(r9, 0x567, 0x0, 0x0, 0x0, 0x59) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7f36d088d0e0020c621000000010902290001000000000904000000db02ef00052406000d"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 0s ago: executing program 1 (id=256): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, 0x0) readlinkat(r3, 0x0, 0x0, 0x0) close(r0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x22, &(0x7f0000001180)=""/4141, &(0x7f0000000080)=0x102d) kernel console output (not intermixed with test programs): 1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.638679][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.650550][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.659618][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.671203][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.689151][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.698213][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.709294][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.731533][ T46] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 77.746453][ T46] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 77.756102][ T46] usb 5-1: Product: syz [ 77.772388][ T46] usb 5-1: Manufacturer: syz [ 77.777094][ T46] usb 5-1: SerialNumber: syz [ 77.805846][ T46] usb 5-1: config 0 descriptor?? [ 77.834549][ T46] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 77.857781][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.007697][ T25] usb 1-1: device descriptor read/64, error -71 [ 78.037878][ T9] usb 5-1: USB disconnect, device number 3 [ 78.058285][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 78.117882][ T25] usb usb1-port1: attempt power cycle [ 78.337724][ T5235] Bluetooth: hci1: command tx timeout [ 78.338317][ T5236] Bluetooth: hci0: command tx timeout [ 78.343231][ T5242] Bluetooth: hci3: command tx timeout [ 78.348593][ T5236] Bluetooth: hci2: command tx timeout [ 78.377774][ T5294] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.417972][ T5242] Bluetooth: hci4: command tx timeout [ 78.457666][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.478589][ T25] usb 1-1: device descriptor read/8, error -71 [ 78.530365][ T5294] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.541741][ T5294] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.552100][ T5294] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.561321][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.578974][ T5322] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 78.603523][ T5294] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.718087][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.748453][ T25] usb 1-1: device descriptor read/8, error -71 [ 78.836532][ T5322] process 'syz.3.9' launched './file0' with NULL argv: empty string added [ 78.857929][ T25] usb usb1-port1: unable to enumerate USB device [ 78.887917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.077501][ T9] usb 4-1: USB disconnect, device number 2 [ 79.179618][ T5340] netlink: 199356 bytes leftover after parsing attributes in process `syz.3.11'. [ 79.194051][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 79.896918][ T72] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.995676][ T72] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.077034][ T72] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.154974][ T72] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.316415][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.345898][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.355964][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.376228][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.381222][ T72] bridge_slave_1: left allmulticast mode [ 80.397648][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.401322][ T72] bridge_slave_1: left promiscuous mode [ 80.419719][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.454306][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.472405][ T5347] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.488517][ T72] bridge_slave_0: left allmulticast mode [ 80.494209][ T72] bridge_slave_0: left promiscuous mode [ 80.509036][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.537186][ T5345] fuse: Unknown parameter 'fdX*+÷0z´' [ 80.897674][ T5282] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.965166][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.983001][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.997955][ T72] bond0 (unregistering): Released all slaves [ 81.087581][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 81.094563][ T5282] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 81.106550][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.156727][ T5282] usb 1-1: config 0 descriptor?? [ 81.428867][ T72] hsr_slave_0: left promiscuous mode [ 81.449866][ T72] hsr_slave_1: left promiscuous mode [ 81.466237][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.484257][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.503388][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.512417][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.557101][ T72] veth1_macvtap: left promiscuous mode [ 81.564469][ T72] veth0_macvtap: left promiscuous mode [ 81.570954][ T72] veth1_vlan: left promiscuous mode [ 81.576701][ T72] veth0_vlan: left promiscuous mode [ 81.782517][ T8] cfg80211: failed to load regulatory.db [ 82.165225][ T72] team0 (unregistering): Port device team_slave_1 removed [ 82.301511][ T72] team0 (unregistering): Port device team_slave_0 removed [ 82.325139][ T5371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.342153][ T1851] usbhid 2-1:0.0: can't add hid device: -32 [ 82.352947][ T5371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.361244][ T1851] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 82.497977][ T5242] Bluetooth: hci4: command tx timeout [ 82.892592][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 82.922640][ T5282] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 82.945780][ T5282] asix 1-1:0.0: probe with driver asix failed with error -71 [ 82.975047][ T5282] usb 1-1: USB disconnect, device number 6 [ 83.113129][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.139301][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.146552][ T5348] bridge_slave_0: entered allmulticast mode [ 83.154987][ T5348] bridge_slave_0: entered promiscuous mode [ 83.163451][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.171503][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.178896][ T5348] bridge_slave_1: entered allmulticast mode [ 83.186168][ T5348] bridge_slave_1: entered promiscuous mode [ 83.217604][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.254118][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.302750][ T5348] team0: Port device team_slave_0 added [ 83.324192][ T5348] team0: Port device team_slave_1 added [ 83.364731][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.379328][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.407725][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.423929][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.432578][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.459068][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.565643][ T5348] hsr_slave_0: entered promiscuous mode [ 83.584509][ T5348] hsr_slave_1: entered promiscuous mode [ 83.595323][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.605631][ T5348] Cannot create hsr debugfs directory [ 83.839223][ T5230] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 84.017943][ T5230] usb 1-1: Using ep0 maxpacket: 16 [ 84.031513][ T5230] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 84.053766][ T5230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.080640][ T5230] usb 1-1: config 0 descriptor?? [ 84.100614][ T5230] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 84.111373][ T5348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.127065][ T5348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.141558][ T5348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.151900][ T5348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.262864][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.294983][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.309433][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.316634][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.336571][ T643] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.343779][ T643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.413241][ T5348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.466923][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.543389][ T5348] veth0_vlan: entered promiscuous mode [ 84.577213][ T5348] veth1_vlan: entered promiscuous mode [ 84.577760][ T5242] Bluetooth: hci4: command tx timeout [ 84.644026][ T5348] veth0_macvtap: entered promiscuous mode [ 84.665412][ T5348] veth1_macvtap: entered promiscuous mode [ 84.705464][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.726401][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.741034][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.759702][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.774666][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.790994][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.805603][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.819575][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.839312][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.865586][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.880604][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.896359][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.909387][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.919505][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.930307][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.941337][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.952971][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.964629][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.978534][ T5348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.997892][ T5348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.006710][ T5348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.027529][ T5348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.154824][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.175251][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.217018][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.236776][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.707935][ T5286] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.879116][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 85.888954][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.903977][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 85.923460][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 85.935402][ T5286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 85.949347][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 85.959546][ T5286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 85.971297][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.986713][ T5286] usb 3-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 85.996320][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.004783][ T5286] usb 3-1: Product: syz [ 86.011011][ T5286] usb 3-1: Manufacturer: syz [ 86.015703][ T5286] usb 3-1: SerialNumber: syz [ 86.038453][ T5286] usb 3-1: config 0 descriptor?? [ 86.054816][ T5431] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.088809][ T5286] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 86.123163][ T5286] vmk80xx 3-1:0.0: probe with driver vmk80xx failed with error -22 [ 86.335093][ T5286] usb 3-1: USB disconnect, device number 2 [ 86.557826][ T5389] trusted_key: syz.0.18 sent an empty control message without MSG_MORE. [ 86.657720][ T5242] Bluetooth: hci4: command tx timeout [ 86.996493][ T5470] netlink: 'syz.2.23': attribute type 3 has an invalid length. [ 87.004958][ T5470] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.23'. [ 87.189959][ T5230] gspca_sonixj: reg_w1 err -71 [ 87.190979][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.197160][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.212028][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.220886][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.222052][ T5230] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 87.235294][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.238913][ T5230] usb 1-1: USB disconnect, device number 7 [ 87.244893][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.407671][ T1851] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.416001][ T5474] chnl_net:caif_netlink_parms(): no params data found [ 87.482148][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.489900][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.497080][ T5474] bridge_slave_0: entered allmulticast mode [ 87.506253][ T5474] bridge_slave_0: entered promiscuous mode [ 87.514722][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.521960][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.529499][ T5474] bridge_slave_1: entered allmulticast mode [ 87.536288][ T5474] bridge_slave_1: entered promiscuous mode [ 87.570580][ T1851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.578388][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.581635][ T1851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.601409][ T1851] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 87.611605][ T1851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.614214][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.630796][ T1851] usb 3-1: config 0 descriptor?? [ 87.668276][ T5474] team0: Port device team_slave_0 added [ 87.676682][ T5474] team0: Port device team_slave_1 added [ 87.708824][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.715852][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.744379][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.757808][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.764877][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.794444][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.845812][ T5474] hsr_slave_0: entered promiscuous mode [ 87.859293][ T5472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.873656][ T5474] hsr_slave_1: entered promiscuous mode [ 87.884472][ T5472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.895165][ T5474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.908973][ T5474] Cannot create hsr debugfs directory [ 88.015452][ T5486] dummy0: entered promiscuous mode [ 88.015601][ T5486] vlan2: entered promiscuous mode [ 88.015808][ T5486] vlan2: entered allmulticast mode [ 88.015825][ T5486] dummy0: entered allmulticast mode [ 88.021365][ T5486] dummy0: left allmulticast mode [ 88.021527][ T5486] dummy0: left promiscuous mode [ 88.146801][ T5474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.231135][ T5474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.283088][ T1851] usbhid 3-1:0.0: can't add hid device: -71 [ 88.289376][ T1851] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 88.302500][ T1851] usb 3-1: USB disconnect, device number 3 [ 88.330473][ T5474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.406516][ T5474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.447582][ T5230] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.508669][ T5474] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.518430][ T5474] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.531417][ T5474] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.542507][ T5474] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.612090][ T5230] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 88.628981][ T5474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.636443][ T5230] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 88.656741][ T5230] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.672197][ T5474] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.679241][ T5230] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 88.692456][ T5230] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 88.703580][ T5230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.705260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.718845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.735251][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.742417][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.750774][ T5242] Bluetooth: hci4: command tx timeout [ 88.870749][ T5474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.934049][ T5230] ath6kl: Failed to submit usb control message: -71 [ 88.941077][ T5230] ath6kl: unable to send the bmi data to the device: -71 [ 88.949973][ T5230] ath6kl: Unable to send get target info: -71 [ 88.976884][ T5230] ath6kl: Failed to init ath6kl core: -71 [ 89.000103][ T5230] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 89.037031][ T5474] veth0_vlan: entered promiscuous mode [ 89.040056][ T5230] usb 1-1: USB disconnect, device number 8 [ 89.074478][ T5495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28'. [ 89.104206][ T5495] unsupported nlmsg_type 40 [ 89.111731][ T5474] veth1_vlan: entered promiscuous mode [ 89.194462][ T5474] veth0_macvtap: entered promiscuous mode [ 89.268470][ T5474] veth1_macvtap: entered promiscuous mode [ 89.297929][ T5242] Bluetooth: hci5: command tx timeout [ 89.337886][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.357868][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.378180][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.389414][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.399602][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.411097][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.421040][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.431705][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.442513][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.453767][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.464883][ T5324] sound midiC3D0: rawmidi drain error (avail = 4080, buffer_size = 4096) [ 89.477204][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.485947][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.494142][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.502861][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.506370][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.517593][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.524954][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.576942][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.603556][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.614286][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.637132][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.647064][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.666860][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.676886][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.695621][ T5506] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 89.695640][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.713416][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.715502][ T5506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.31'. [ 89.724692][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.766756][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.815157][ T5474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.824873][ T5474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.835294][ T5474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.850570][ T5474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.066342][ T5515] netlink: 'syz.0.34': attribute type 10 has an invalid length. [ 90.074542][ T5515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.091181][ T5515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.120895][ T5515] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 90.150149][ T643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.177715][ T643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.239382][ T643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.275617][ T643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.312554][ T5504] chnl_net:caif_netlink_parms(): no params data found [ 90.471281][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.497129][ T5504] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.522897][ T5504] bridge_slave_0: entered allmulticast mode [ 90.529960][ T5504] bridge_slave_0: entered promiscuous mode [ 90.537985][ T5285] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 90.548315][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.555907][ T5504] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.564313][ T5504] bridge_slave_1: entered allmulticast mode [ 90.598428][ T5504] bridge_slave_1: entered promiscuous mode [ 90.675616][ T5504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.707709][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 90.725134][ T5504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.742139][ T5285] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 90.768035][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.781407][ T5285] usb 1-1: Product: syz [ 90.785661][ T5285] usb 1-1: Manufacturer: syz [ 90.799033][ T5285] usb 1-1: SerialNumber: syz [ 90.808868][ T5285] usb 1-1: config 0 descriptor?? [ 90.812086][ T5504] team0: Port device team_slave_0 added [ 90.822337][ T5285] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 90.865798][ T5504] team0: Port device team_slave_1 added [ 90.959333][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.966329][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.998725][ T5504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.012530][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.019958][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.047148][ T5504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.123527][ T5504] hsr_slave_0: entered promiscuous mode [ 91.130224][ T5504] hsr_slave_1: entered promiscuous mode [ 91.136304][ T5504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.144578][ T5504] Cannot create hsr debugfs directory [ 91.356183][ T5504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.389307][ T5231] Bluetooth: hci5: command tx timeout [ 91.510756][ T5504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.584395][ T5504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.618019][ T5231] Bluetooth: hci6: command tx timeout [ 91.624649][ T1851] usb 1-1: USB disconnect, device number 9 [ 91.699535][ T5230] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.790568][ T5504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.812523][ T29] audit: type=1326 audit(1727832250.881:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.1.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x0 [ 91.898174][ T5230] usb 3-1: Using ep0 maxpacket: 8 [ 91.903909][ T5230] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 91.903943][ T5230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 91.903967][ T5230] usb 3-1: Product: syz [ 91.903985][ T5230] usb 3-1: Manufacturer: syz [ 91.904003][ T5230] usb 3-1: SerialNumber: syz [ 91.906910][ T5230] usb 3-1: config 0 descriptor?? [ 91.910184][ T5230] usbtest 3-1:0.0: FX2 device [ 91.992494][ T5230] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 92.157911][ T5538] Zero length message leads to an empty skb [ 92.168212][ T5504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.193958][ T5504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.215045][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.246662][ T5504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.292578][ T5504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.343100][ T5538] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.374823][ T5538] xt_NFQUEUE: number of total queues is 0 [ 92.410157][ T5282] usb 3-1: USB disconnect, device number 4 [ 92.550774][ T5504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.606495][ T5504] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.686514][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.693746][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.753482][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.760673][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.994467][ T5504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.029956][ T5561] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.059287][ T5562] netlink: 104 bytes leftover after parsing attributes in process `syz.0.43'. [ 93.151840][ T5504] veth0_vlan: entered promiscuous mode [ 93.180279][ T5504] veth1_vlan: entered promiscuous mode [ 93.309725][ T5504] veth0_macvtap: entered promiscuous mode [ 93.345736][ T5504] veth1_macvtap: entered promiscuous mode [ 93.403783][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.427902][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.447575][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.458447][ T5231] Bluetooth: hci5: command tx timeout [ 93.466503][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.476901][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.496996][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.507123][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.521128][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.531102][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.545777][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.565677][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.588613][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.601656][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.611907][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.623033][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.635249][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.647307][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.658420][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.675277][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.685259][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.695810][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.713767][ T5231] Bluetooth: hci6: command tx timeout [ 93.719646][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.730593][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.737160][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.762515][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.805135][ T5504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.824274][ T5504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.837105][ T5504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860144][ T5504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.897744][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 93.913073][ T8] usb 3-1: config 0 has an invalid interface number: 228 but max is 0 [ 93.925125][ T8] usb 3-1: config 0 has no interface number 0 [ 93.944371][ T8] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 93.958885][ T8] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 93.987917][ T8] usb 3-1: Product: syz [ 93.992143][ T8] usb 3-1: Manufacturer: syz [ 93.996785][ T8] usb 3-1: SerialNumber: syz [ 94.021279][ T8] usb 3-1: config 0 descriptor?? [ 94.113031][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.157090][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.205995][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.214936][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.240216][ T5575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.277331][ T29] audit: type=1326 audit(1727832253.341:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.3.51" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63c2b7dff9 code=0x0 [ 94.287825][ T5575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.360132][ T5286] usb 3-1: USB disconnect, device number 5 [ 94.370231][ T5582] delete_channel: no stack [ 94.735448][ T5604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.746676][ T5604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.757999][ T5285] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.790696][ T5598] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.908056][ T5285] usb 5-1: device descriptor read/64, error -71 [ 95.012919][ T5610] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.56'. [ 95.027592][ T5610] netlink: zone id is out of range [ 95.032854][ T5610] netlink: zone id is out of range [ 95.039349][ T5610] netlink: zone id is out of range [ 95.044508][ T5610] netlink: zone id is out of range [ 95.049883][ T5610] netlink: zone id is out of range [ 95.055011][ T5610] netlink: zone id is out of range [ 95.061367][ T5610] netlink: zone id is out of range [ 95.066525][ T5610] netlink: zone id is out of range [ 95.071912][ T5610] netlink: zone id is out of range [ 95.080088][ T5610] FAULT_INJECTION: forcing a failure. [ 95.080088][ T5610] name failslab, interval 1, probability 0, space 0, times 1 [ 95.093663][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: syz.2.56 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 95.104206][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.114283][ T5610] Call Trace: [ 95.117572][ T5610] [ 95.120516][ T5610] dump_stack_lvl+0x241/0x360 [ 95.125219][ T5610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.130428][ T5610] ? __pfx__printk+0x10/0x10 [ 95.135127][ T5610] ? ref_tracker_alloc+0x332/0x490 [ 95.140255][ T5610] should_fail_ex+0x3b0/0x4e0 [ 95.144963][ T5610] ? skb_clone+0x20c/0x390 [ 95.149400][ T5610] should_failslab+0xac/0x100 [ 95.154096][ T5610] ? skb_clone+0x20c/0x390 [ 95.158524][ T5610] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 95.163919][ T5610] skb_clone+0x20c/0x390 [ 95.168188][ T5610] __netlink_deliver_tap+0x3cc/0x7c0 [ 95.173488][ T5610] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.178780][ T5610] netlink_deliver_tap+0x19d/0x1b0 [ 95.183905][ T5610] netlink_sendskb+0x68/0x140 [ 95.188602][ T5610] netlink_unicast+0x39d/0x990 [ 95.193410][ T5610] ? __asan_memcpy+0x40/0x70 [ 95.198013][ T5610] ? __pfx_netlink_unicast+0x10/0x10 [ 95.203326][ T5610] netlink_rcv_skb+0x262/0x430 [ 95.208129][ T5610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.213169][ T5610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.218488][ T5610] ? __netlink_deliver_tap+0x77e/0x7c0 [ 95.223970][ T5610] genl_rcv+0x28/0x40 [ 95.227965][ T5610] netlink_unicast+0x7f6/0x990 [ 95.232754][ T5610] ? __pfx_netlink_unicast+0x10/0x10 [ 95.238068][ T5610] ? __virt_addr_valid+0x183/0x530 [ 95.243202][ T5610] ? __check_object_size+0x48e/0x900 [ 95.248510][ T5610] netlink_sendmsg+0x8e4/0xcb0 [ 95.253294][ T5610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.258592][ T5610] ? aa_sock_msg_perm+0x91/0x160 [ 95.263548][ T5610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.268844][ T5610] __sock_sendmsg+0x221/0x270 [ 95.273537][ T5610] ____sys_sendmsg+0x52a/0x7e0 [ 95.278318][ T5610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.283631][ T5610] __sys_sendmsg+0x292/0x380 [ 95.288250][ T5610] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.293385][ T5610] ? __pfx_vfs_write+0x10/0x10 [ 95.298185][ T5610] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.304535][ T5610] ? do_syscall_64+0x100/0x230 [ 95.309313][ T5610] ? do_syscall_64+0xb6/0x230 [ 95.314002][ T5610] do_syscall_64+0xf3/0x230 [ 95.318520][ T5610] ? clear_bhb_loop+0x35/0x90 [ 95.323225][ T5610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.329152][ T5610] RIP: 0033:0x7f020b37dff9 [ 95.333583][ T5610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.353202][ T5610] RSP: 002b:00007f020c232038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.361630][ T5610] RAX: ffffffffffffffda RBX: 00007f020b535f80 RCX: 00007f020b37dff9 [ 95.369699][ T5610] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 95.377686][ T5610] RBP: 00007f020c232090 R08: 0000000000000000 R09: 0000000000000000 [ 95.385668][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.393653][ T5610] R13: 0000000000000000 R14: 00007f020b535f80 R15: 00007f020b65fa28 [ 95.401650][ T5610] [ 95.487594][ T5285] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.538088][ T5231] Bluetooth: hci5: command tx timeout [ 95.617809][ T5285] usb 5-1: device descriptor read/64, error -71 [ 95.739559][ T5285] usb usb5-port1: attempt power cycle [ 95.777952][ T5231] Bluetooth: hci6: command tx timeout [ 96.109146][ T5285] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.148452][ T5285] usb 5-1: device descriptor read/8, error -71 [ 96.408030][ T5285] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.426172][ T5625] bond0: (slave bond_slave_0): Releasing backup interface [ 96.438917][ T5285] usb 5-1: device descriptor read/8, error -71 [ 96.567266][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.568167][ T5285] usb usb5-port1: unable to enumerate USB device [ 96.586570][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.596378][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.614253][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.178064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.238432][ T29] audit: type=1326 audit(1727832256.301:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.280144][ T29] audit: type=1326 audit(1727832256.301:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.317134][ T29] audit: type=1326 audit(1727832256.301:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.347962][ T29] audit: type=1326 audit(1727832256.301:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.376712][ T29] audit: type=1326 audit(1727832256.311:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.411609][ T29] audit: type=1326 audit(1727832256.311:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.450142][ T29] audit: type=1326 audit(1727832256.311:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.492649][ T29] audit: type=1326 audit(1727832256.311:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.518726][ T29] audit: type=1326 audit(1727832256.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.579294][ T5643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.589193][ T29] audit: type=1326 audit(1727832256.311:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 97.613128][ T5643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.733708][ T5647] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.71'. [ 97.746902][ T5647] net_ratelimit: 675 callbacks suppressed [ 97.746920][ T5647] netlink: zone id is out of range [ 97.765322][ T5647] netlink: zone id is out of range [ 97.771084][ T5647] netlink: zone id is out of range [ 97.776252][ T5647] netlink: zone id is out of range [ 97.794218][ T5647] netlink: zone id is out of range [ 97.810157][ T5647] netlink: zone id is out of range [ 97.815737][ T5647] netlink: zone id is out of range [ 97.821380][ T5647] netlink: zone id is out of range [ 97.831260][ T5647] netlink: zone id is out of range [ 97.836842][ T5647] netlink: zone id is out of range [ 97.845642][ T5647] FAULT_INJECTION: forcing a failure. [ 97.845642][ T5647] name failslab, interval 1, probability 0, space 0, times 0 [ 97.858789][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: syz.2.71 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 97.863704][ T5231] Bluetooth: hci6: command tx timeout [ 97.869307][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.869335][ T5647] Call Trace: [ 97.869346][ T5647] [ 97.869356][ T5647] dump_stack_lvl+0x241/0x360 [ 97.869388][ T5647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.869412][ T5647] ? __pfx__printk+0x10/0x10 [ 97.905856][ T5647] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 97.911978][ T5647] ? __pfx___might_resched+0x10/0x10 [ 97.917329][ T5647] should_fail_ex+0x3b0/0x4e0 [ 97.922046][ T5647] should_failslab+0xac/0x100 [ 97.926750][ T5647] ? __alloc_skb+0x1c3/0x440 [ 97.931349][ T5647] kmem_cache_alloc_node_noprof+0x71/0x320 [ 97.937183][ T5647] __alloc_skb+0x1c3/0x440 [ 97.941613][ T5647] ? __pfx___alloc_skb+0x10/0x10 [ 97.946567][ T5647] ? netlink_ack_tlv_len+0x6e/0x200 [ 97.951805][ T5647] netlink_ack+0x13f/0xa30 [ 97.956241][ T5647] ? __pfx_lock_acquire+0x10/0x10 [ 97.961284][ T5647] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 97.967029][ T5647] netlink_rcv_skb+0x262/0x430 [ 97.971814][ T5647] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.976863][ T5647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.982178][ T5647] ? __netlink_deliver_tap+0x77e/0x7c0 [ 97.987660][ T5647] genl_rcv+0x28/0x40 [ 97.991666][ T5647] netlink_unicast+0x7f6/0x990 [ 97.996484][ T5647] ? __pfx_netlink_unicast+0x10/0x10 [ 98.001816][ T5647] ? __virt_addr_valid+0x183/0x530 [ 98.006952][ T5647] ? __check_object_size+0x48e/0x900 [ 98.012264][ T5647] netlink_sendmsg+0x8e4/0xcb0 [ 98.017069][ T5647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.022371][ T5647] ? aa_sock_msg_perm+0x91/0x160 [ 98.027324][ T5647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.032636][ T5647] __sock_sendmsg+0x221/0x270 [ 98.037334][ T5647] ____sys_sendmsg+0x52a/0x7e0 [ 98.042118][ T5647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.047440][ T5647] __sys_sendmsg+0x292/0x380 [ 98.052063][ T5647] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.057215][ T5647] ? __pfx_vfs_write+0x10/0x10 [ 98.062037][ T5647] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.068401][ T5647] ? do_syscall_64+0x100/0x230 [ 98.073177][ T5647] ? do_syscall_64+0xb6/0x230 [ 98.077876][ T5647] do_syscall_64+0xf3/0x230 [ 98.082409][ T5647] ? clear_bhb_loop+0x35/0x90 [ 98.087109][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.093152][ T5647] RIP: 0033:0x7f020b37dff9 [ 98.097590][ T5647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.117214][ T5647] RSP: 002b:00007f020c232038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.125644][ T5647] RAX: ffffffffffffffda RBX: 00007f020b535f80 RCX: 00007f020b37dff9 [ 98.133621][ T5647] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 98.141599][ T5647] RBP: 00007f020c232090 R08: 0000000000000000 R09: 0000000000000000 [ 98.149598][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.157582][ T5647] R13: 0000000000000000 R14: 00007f020b535f80 R15: 00007f020b65fa28 [ 98.165580][ T5647] [ 98.276350][ T5657] fuse: Unknown parameter '0xffffffffffffffff' [ 98.463613][ T5659] fuse: Bad value for 'fd' [ 99.637540][ T5282] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.678067][ T5680] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 99.710735][ T5324] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 99.729687][ T5681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 99.820760][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 99.836058][ T5282] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 99.844955][ T5282] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 99.873985][ T5282] usb 5-1: config 8 has no interface number 0 [ 99.890183][ T5282] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 99.927628][ T5282] usb 5-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.947643][ T5282] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 99.956609][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.963200][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.973927][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.974886][ T5282] usb 5-1: Product: syz [ 99.985047][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.003325][ T5282] usb 5-1: Manufacturer: syz [ 100.012390][ T5282] usb 5-1: SerialNumber: syz [ 100.013645][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.033389][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.045087][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.061753][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.073204][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.308284][ T5692] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.80'. [ 100.454385][ T5282] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 100.470902][ T5282] usb 5-1: USB disconnect, device number 8 [ 100.655704][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.663941][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.681113][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.688675][ T5698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.696663][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.704472][ T5698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.720477][ T5698] team0: Port device bridge0 added [ 100.812805][ T5699] bridge_slave_1: left allmulticast mode [ 100.812836][ T5699] bridge_slave_1: left promiscuous mode [ 100.813034][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.835140][ T5699] bridge_slave_0: left allmulticast mode [ 100.835169][ T5699] bridge_slave_0: left promiscuous mode [ 100.847666][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.867258][ T5698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.87'. [ 100.894423][ T5699] team0: Port device bridge0 removed [ 101.107035][ T5702] x_tables: duplicate underflow at hook 4 [ 101.314528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.333337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.350028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.360337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.369326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.670211][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 101.704988][ T5720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.92'. [ 101.742094][ T5720] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.92'. [ 102.398109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.519040][ T5736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 102.539988][ T5737] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 102.553678][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.562059][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.594808][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.602058][ T5737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.609559][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.616672][ T5737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.629713][ T5737] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 102.648793][ T5732] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 102.672860][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.680130][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.731057][ T5741] mmap: syz.1.97 (5741) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.956251][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 102.956269][ T29] audit: type=1326 audit(1727832262.021:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.017588][ T29] audit: type=1326 audit(1727832262.061:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.087652][ T29] audit: type=1326 audit(1727832262.061:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.137623][ T29] audit: type=1326 audit(1727832262.061:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.207570][ T29] audit: type=1326 audit(1727832262.061:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.268312][ T29] audit: type=1326 audit(1727832262.061:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.304154][ T29] audit: type=1326 audit(1727832262.061:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.335996][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.348141][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.356481][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.378440][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.387871][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.395223][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.463414][ T29] audit: type=1326 audit(1727832262.061:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.564474][ T29] audit: type=1326 audit(1727832262.061:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.627498][ T29] audit: type=1326 audit(1727832262.061:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 103.837208][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 103.858034][ T5230] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.007603][ T5230] usb 3-1: Using ep0 maxpacket: 32 [ 104.023793][ T5230] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 104.058522][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.076676][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.096246][ T5230] usb 3-1: config 0 descriptor?? [ 104.101955][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.117113][ T5230] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 104.124617][ T5768] bridge_slave_0: entered allmulticast mode [ 104.215984][ T5768] bridge_slave_0: entered promiscuous mode [ 104.244197][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.271954][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.289650][ T5788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.290285][ T5788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.302214][ T5768] bridge_slave_1: entered allmulticast mode [ 104.309755][ T5768] bridge_slave_1: entered promiscuous mode [ 104.389834][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.424522][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.486859][ T5768] team0: Port device team_slave_0 added [ 104.498655][ T5768] team0: Port device team_slave_1 added [ 104.547715][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.555610][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.588074][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.603473][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.611219][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.637318][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.811789][ T5768] hsr_slave_0: entered promiscuous mode [ 104.841862][ T5768] hsr_slave_1: entered promiscuous mode [ 104.869363][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.897819][ T5768] Cannot create hsr debugfs directory [ 105.141418][ T5802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.152455][ T5803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.171473][ T5802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.181763][ T5803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.323765][ T5768] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.465047][ T5242] Bluetooth: hci2: command tx timeout [ 105.561948][ T5768] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.739634][ T5230] gspca_nw80x: reg_w err -71 [ 105.744345][ T5230] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 105.757719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.782594][ T5230] usb 3-1: USB disconnect, device number 6 [ 105.904007][ T5768] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.069290][ T5768] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.143597][ T5818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 106.301547][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.314435][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.343924][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.385212][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.507911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.652631][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.719939][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.734841][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.742073][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.809866][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.817004][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.073354][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.135190][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.138251][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.175870][ T5768] veth0_vlan: entered promiscuous mode [ 107.186159][ T5768] veth1_vlan: entered promiscuous mode [ 107.219066][ T5768] veth0_macvtap: entered promiscuous mode [ 107.292603][ T5768] veth1_macvtap: entered promiscuous mode [ 107.306195][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.316753][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.327452][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.338179][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.348257][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.358810][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.369359][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.381468][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.392658][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.403920][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.413908][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.424406][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.436977][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.452643][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.463240][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.473615][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.484788][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.494923][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.505436][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.515714][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.526468][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.536658][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.547463][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.558125][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.569248][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.579589][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.590107][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.598968][ T5242] Bluetooth: hci2: command tx timeout [ 107.601749][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.614789][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.623805][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.632587][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.641379][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.721264][ T643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.738471][ T643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.771975][ T643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.787510][ T643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.127520][ T5294] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.298566][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 108.318182][ T5294] usb 1-1: too many configurations: 51, using maximum allowed: 8 [ 108.328237][ T5294] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 108.335881][ T5294] usb 1-1: can't read configurations, error -61 [ 108.479326][ T5294] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 108.659180][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 108.672503][ T5294] usb 1-1: too many configurations: 51, using maximum allowed: 8 [ 108.733452][ T5294] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 108.748129][ T5294] usb 1-1: can't read configurations, error -61 [ 108.776607][ T5294] usb usb1-port1: attempt power cycle [ 109.008899][ T5863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.042782][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 109.097009][ T5863] bridge_slave_1: left allmulticast mode [ 109.111060][ T5863] bridge_slave_1: left promiscuous mode [ 109.129958][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.139303][ T5294] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 109.188171][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 109.196339][ T5294] usb 1-1: too many configurations: 51, using maximum allowed: 8 [ 109.219520][ T5294] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 109.231433][ T5294] usb 1-1: can't read configurations, error -61 [ 109.332807][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 109.387662][ T5294] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 109.438354][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 109.446712][ T5294] usb 1-1: too many configurations: 51, using maximum allowed: 8 [ 109.466280][ T5294] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 109.478477][ T5294] usb 1-1: can't read configurations, error -61 [ 109.494622][ T5294] usb usb1-port1: unable to enumerate USB device [ 109.618727][ T5242] Bluetooth: hci2: command tx timeout [ 109.944938][ T5324] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 109.989467][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 109.989486][ T29] audit: type=1326 audit(1727832269.061:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.055492][ T29] audit: type=1326 audit(1727832269.061:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.134945][ T29] audit: type=1326 audit(1727832269.061:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.201428][ T29] audit: type=1326 audit(1727832269.061:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.319329][ T29] audit: type=1326 audit(1727832269.061:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.388572][ T29] audit: type=1326 audit(1727832269.101:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.467683][ T29] audit: type=1326 audit(1727832269.101:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.558222][ T29] audit: type=1326 audit(1727832269.101:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.633132][ T29] audit: type=1326 audit(1727832269.101:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.643229][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.655392][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.762483][ T29] audit: type=1326 audit(1727832269.101:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8c8597dff9 code=0x7ffc0000 [ 110.792035][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.007762][ T5294] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 111.157631][ T5294] usb 5-1: device descriptor read/64, error -71 [ 111.427677][ T5294] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.582087][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.593209][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.598262][ T5294] usb 5-1: device descriptor read/64, error -71 [ 111.634393][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.653205][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.697904][ T5242] Bluetooth: hci2: command tx timeout [ 111.728655][ T5294] usb usb5-port1: attempt power cycle [ 111.877701][ T5282] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.059895][ T5282] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 112.068204][ T5282] usb 3-1: can't read configurations, error -22 [ 112.088671][ T5294] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 112.133685][ T5294] usb 5-1: device descriptor read/8, error -71 [ 112.207729][ T5282] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 112.309585][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.340445][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.354193][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.372712][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.467724][ T5294] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.499244][ T5294] usb 5-1: device descriptor read/8, error -71 [ 112.507032][ T5282] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 112.515389][ T5282] usb 3-1: can't read configurations, error -22 [ 112.528164][ T5282] usb usb3-port1: attempt power cycle [ 112.618211][ T5294] usb usb5-port1: unable to enumerate USB device [ 112.908071][ T5282] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 112.970097][ T5282] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 112.978454][ T5282] usb 3-1: can't read configurations, error -22 [ 113.101835][ T5950] fuse: Bad value for 'user_id' [ 113.106885][ T5950] fuse: Bad value for 'user_id' [ 113.137489][ T5282] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 113.195139][ T5282] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 113.217589][ T5282] usb 3-1: can't read configurations, error -22 [ 113.224416][ T5282] usb usb3-port1: unable to enumerate USB device [ 113.611597][ T5294] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 113.792679][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.810157][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.825684][ T5294] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 113.834858][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.854507][ T5294] usb 5-1: config 0 descriptor?? [ 114.171268][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.185417][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.274178][ T5294] hid-thrustmaster 0003:044F:B65D.0001: unbalanced collection at end of report description [ 114.301175][ T5294] hid-thrustmaster 0003:044F:B65D.0001: parse failed with error -22 [ 114.317528][ T5294] hid-thrustmaster 0003:044F:B65D.0001: probe with driver hid-thrustmaster failed with error -22 [ 114.472971][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.484465][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.514611][ T5286] usb 5-1: USB disconnect, device number 13 [ 114.638453][ T5970] netlink: 528 bytes leftover after parsing attributes in process `syz.4.160'. [ 114.742938][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.765455][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.786572][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.814726][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.857740][ T25] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 115.007707][ T5282] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 115.184638][ T5282] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.216327][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.254634][ T5282] usb 5-1: Product: syz [ 115.267952][ T5282] usb 5-1: Manufacturer: syz [ 115.296720][ T5282] usb 5-1: SerialNumber: syz [ 115.344486][ T5282] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 115.419071][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.645604][ T5971] qrtr: Invalid version 18 [ 115.759141][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 115.759161][ T29] audit: type=1326 audit(1727832274.821:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x0 [ 115.834649][ T29] audit: type=1326 audit(1727832274.901:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f020b37dff9 code=0x0 [ 115.919466][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.165'. [ 116.013752][ T5990] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 116.508442][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 116.524984][ T25] ath9k_htc: Failed to initialize the device [ 116.592949][ T25] usb 5-1: ath9k_htc: USB layer deinitialized [ 116.875251][ T5995] dvmrp0: entered allmulticast mode [ 116.887648][ T5994] dvmrp0: left allmulticast mode [ 117.237817][ T5998] netlink: 6 bytes leftover after parsing attributes in process `syz.2.167'. [ 117.647649][ T5282] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 117.677518][ T1851] usb 5-1: USB disconnect, device number 14 [ 117.815851][ T6005] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 117.832699][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 117.851938][ T5282] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 117.860078][ T5282] usb 3-1: can't read configurations, error -61 [ 117.987669][ T5282] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 118.147653][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 118.161618][ T5282] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.169520][ T5282] usb 3-1: can't read configurations, error -61 [ 118.176050][ T5282] usb usb3-port1: attempt power cycle [ 118.527157][ T6007] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.537701][ T5282] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 118.596017][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 118.620388][ T5282] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.637256][ T5282] usb 3-1: can't read configurations, error -61 [ 118.753913][ T6013] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 118.777518][ T5282] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 118.818680][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 118.829152][ T5282] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.866248][ T5282] usb 3-1: can't read configurations, error -61 [ 118.883848][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.900504][ T5282] usb usb3-port1: unable to enumerate USB device [ 118.939864][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.962374][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.977971][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.005746][ T6024] xt_hashlimit: overflow, try lower: 17592186044416/2047 [ 119.205062][ T6033] netlink: 6 bytes leftover after parsing attributes in process `syz.3.178'. [ 119.483305][ T29] audit: type=1326 audit(1727832278.551:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.4.180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f164437dff9 code=0x0 [ 119.505067][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.615074][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.637304][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.181094][ T9] ALSA: seq_lock: waiting [1 left] in sound/core/seq/seq_ports.c:255 [ 120.188356][ T5324] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 120.239952][ T6047] tty tty1: ldisc open failed (-12), clearing slot 0 [ 120.908097][ T6073] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 120.951061][ T29] audit: type=1326 audit(1727832280.021:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 120.973247][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.068588][ T29] audit: type=1326 audit(1727832280.021:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.091964][ T29] audit: type=1326 audit(1727832280.021:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.115171][ T29] audit: type=1326 audit(1727832280.061:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.137725][ T29] audit: type=1326 audit(1727832280.061:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.160260][ T29] audit: type=1326 audit(1727832280.061:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.182709][ T29] audit: type=1326 audit(1727832280.061:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.205757][ T29] audit: type=1326 audit(1727832280.061:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.228597][ T29] audit: type=1326 audit(1727832280.061:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.250942][ T29] audit: type=1326 audit(1727832280.061:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f020b37dff9 code=0x7ffc0000 [ 121.374589][ T6076] netlink: 6 bytes leftover after parsing attributes in process `syz.1.191'. [ 121.440332][ T1851] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 121.639548][ T1851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.650816][ T1851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.679369][ T1851] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 121.691768][ T1851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.708905][ T1851] usb 3-1: config 0 descriptor?? [ 121.766962][ T6088] kernel profiling enabled (shift: 9) [ 121.987632][ T5282] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 122.145528][ T1851] magicmouse 0003:05AC:0265.0003: unknown main item tag 0x0 [ 122.153378][ T1851] magicmouse 0003:05AC:0265.0003: item fetching failed at offset 4/5 [ 122.164455][ T5282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.176454][ T1851] magicmouse 0003:05AC:0265.0003: magicmouse hid parse failed [ 122.184285][ T5282] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.193597][ T1851] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -22 [ 122.203206][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.219570][ T5282] usb 5-1: config 0 descriptor?? [ 122.234091][ T5282] pwc: Askey VC010 type 2 USB webcam detected. [ 122.345297][ T1851] usb 3-1: USB disconnect, device number 15 [ 122.741003][ T5231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.750748][ T5231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.759581][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.771117][ T5231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.781316][ T5231] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 122.789116][ T5231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.883086][ T5282] pwc: recv_control_msg error -71 req 02 val 2700 [ 122.890251][ T5282] pwc: recv_control_msg error -71 req 02 val 2c00 [ 122.897133][ T5282] pwc: recv_control_msg error -71 req 04 val 1000 [ 122.904528][ T5282] pwc: recv_control_msg error -71 req 04 val 1300 [ 122.911919][ T5282] pwc: recv_control_msg error -71 req 04 val 1400 [ 122.919901][ T5282] pwc: recv_control_msg error -71 req 02 val 2000 [ 122.926802][ T5282] pwc: recv_control_msg error -71 req 02 val 2100 [ 122.936672][ T5282] pwc: recv_control_msg error -71 req 04 val 1500 [ 122.943939][ T5282] pwc: recv_control_msg error -71 req 02 val 2500 [ 122.954162][ T5282] pwc: recv_control_msg error -71 req 02 val 2400 [ 122.961331][ T5282] pwc: recv_control_msg error -71 req 02 val 2600 [ 122.968630][ T5282] pwc: recv_control_msg error -71 req 02 val 2900 [ 122.976334][ T5282] pwc: recv_control_msg error -71 req 02 val 2800 [ 123.007693][ T5282] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.029784][ T5282] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.068648][ T5282] pwc: Registered as video71. [ 123.075624][ T5282] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 123.160855][ T5282] usb 5-1: USB disconnect, device number 15 [ 123.224829][ T6103] chnl_net:caif_netlink_parms(): no params data found [ 123.376294][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.389216][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.396566][ T6103] bridge_slave_0: entered allmulticast mode [ 123.404351][ T6103] bridge_slave_0: entered promiscuous mode [ 123.413715][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.421063][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.437757][ T6103] bridge_slave_1: entered allmulticast mode [ 123.447280][ T6103] bridge_slave_1: entered promiscuous mode [ 123.518309][ T6103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.544368][ T6103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.590351][ T6103] team0: Port device team_slave_0 added [ 123.599391][ T6103] team0: Port device team_slave_1 added [ 123.647573][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 123.669262][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.677663][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.686640][ T6122] binder: 6119:6122 ioctl c0306201 0 returned -14 [ 123.703627][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.704837][ T6103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.754518][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.765224][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.793193][ T6103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.839795][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 123.848761][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.864429][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.880492][ T6103] hsr_slave_0: entered promiscuous mode [ 123.886173][ T25] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 123.896583][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.904979][ T6103] hsr_slave_1: entered promiscuous mode [ 123.911438][ T6103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.920098][ T6103] Cannot create hsr debugfs directory [ 123.933556][ T25] usb 3-1: config 0 descriptor?? [ 123.987736][ T5316] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 124.155648][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.158746][ T5316] usb 5-1: Using ep0 maxpacket: 32 [ 124.236183][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.250105][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.276714][ T5316] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 124.287621][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.309112][ T5316] usb 5-1: config 0 descriptor?? [ 124.357008][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 124.384295][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 124.407361][ T25] usb 3-1: USB disconnect, device number 16 [ 124.485066][ T6103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.557312][ T6127] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 124.717865][ T6103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.836957][ T6103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.897755][ T5242] Bluetooth: hci7: command tx timeout [ 124.934655][ T6103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.087649][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 125.150396][ T6103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.189465][ T6103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.215479][ T6103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.257525][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 125.266492][ T25] usb 3-1: config 0 has no interfaces? [ 125.275974][ T6103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.353488][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.393549][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.427622][ T25] usb 3-1: Product: syz [ 125.448350][ T25] usb 3-1: Manufacturer: syz [ 125.475475][ T25] usb 3-1: SerialNumber: syz [ 125.490586][ T25] usb 3-1: config 0 descriptor?? [ 125.551494][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.613864][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.204'. [ 125.751587][ T6103] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.832659][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.839913][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.899927][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.907056][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.354893][ T6103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.514176][ T5316] usbhid 5-1:0.0: can't add hid device: -71 [ 126.521671][ T6144] x_tables: duplicate underflow at hook 4 [ 126.552056][ T6103] veth0_vlan: entered promiscuous mode [ 126.565742][ T5316] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 126.592411][ T5316] usb 5-1: USB disconnect, device number 16 [ 126.601301][ T6103] veth1_vlan: entered promiscuous mode [ 126.633934][ T6103] veth0_macvtap: entered promiscuous mode [ 126.656261][ T6103] veth1_macvtap: entered promiscuous mode [ 126.709580][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.741074][ T5286] usb 3-1: USB disconnect, device number 17 [ 126.744695][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.770792][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.790517][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.801951][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.813750][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.834191][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.845125][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.864339][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.877117][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.887572][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.908075][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.920604][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.951653][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.974326][ T6103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.988807][ T5242] Bluetooth: hci7: command tx timeout [ 127.085393][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.111645][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.137279][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.157441][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.167308][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.184737][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.197297][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.215101][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.242287][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.269193][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.296807][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.317482][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.337855][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.357688][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.377269][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.399591][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.418913][ T6103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.442484][ T6103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.457264][ T6103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.466727][ T6103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.476238][ T6103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.677619][ T643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.084763][ T643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.272601][ T643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.299063][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.317870][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.322442][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 128.334650][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.343579][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.351984][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 128.361253][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.399788][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.435927][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.468379][ T643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.534760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.542865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.646985][ T6163] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:512 [ 128.655020][ T1851] IPVS: starting estimator thread 0... [ 128.802976][ T643] bridge_slave_0: left allmulticast mode [ 128.808936][ T643] bridge_slave_0: left promiscuous mode [ 128.820014][ T643] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.853151][ T6164] IPVS: using max 21 ests per chain, 50400 per kthread [ 128.886183][ T6172] fuse: Unknown parameter 'B)0x0000000000000003' [ 129.057840][ T5242] Bluetooth: hci7: command tx timeout [ 129.207573][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 129.357575][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 129.371229][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.389748][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 129.440934][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.472031][ T8] usb 1-1: config 0 descriptor?? [ 130.407433][ T643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.420586][ T5324] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 130.433758][ T5242] Bluetooth: hci6: command tx timeout [ 130.493301][ T25] usb 2-1: USB disconnect, device number 2 [ 130.620004][ T643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.740352][ T643] bond0 (unregistering): Released all slaves [ 130.827515][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.896115][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 130.926627][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.043270][ T6178] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 131.106862][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.127502][ T8] usb 1-1: USB disconnect, device number 14 [ 131.137802][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 131.142974][ T5242] Bluetooth: hci7: command tx timeout [ 131.171194][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.186900][ T9] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 131.207535][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.250466][ T9] usb 4-1: config 0 descriptor?? [ 131.260524][ T9] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 131.287499][ T9] usb 4-1: selecting invalid altsetting 0 [ 131.297875][ T9] cxusb: set interface failed [ 131.303168][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 131.364349][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.405347][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.418708][ T9] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 131.445401][ T9] usb 4-1: media controller created [ 131.527600][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.545363][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.647112][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.678153][ T6178] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 131.748908][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 131.755135][ T9] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 131.878369][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 131.884182][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 132.168198][ T9] usb 4-1: USB disconnect, device number 3 [ 132.301113][ T6200] binder: 6199:6200 ioctl c0306201 20000140 returned -14 [ 132.302808][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 132.379528][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 132.408023][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 132.468057][ T5249] syz-executor (5249) used greatest stack depth: 18160 bytes left [ 132.498217][ T5242] Bluetooth: hci6: command tx timeout [ 132.617874][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 132.647761][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 132.682425][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.723166][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.794955][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.886149][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.907638][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.916761][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.029140][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.035512][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.182222][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 133.277028][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.305545][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.328589][ T6157] bridge_slave_0: entered allmulticast mode [ 133.343111][ T6157] bridge_slave_0: entered promiscuous mode [ 133.381424][ T643] hsr_slave_0: left promiscuous mode [ 133.389201][ T643] hsr_slave_1: left promiscuous mode [ 133.395075][ T643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.410409][ T643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.421651][ T25] usb 1-1: USB disconnect, device number 15 [ 133.508221][ T643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.530888][ T643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.594148][ T6183] syz.1.218 (6183): drop_caches: 1 [ 133.602650][ T643] veth1_macvtap: left promiscuous mode [ 133.631537][ T643] veth0_macvtap: left promiscuous mode [ 133.679432][ T643] veth1_vlan: left promiscuous mode [ 133.723801][ T643] veth0_vlan: left promiscuous mode [ 133.937577][ T5282] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.207965][ T6244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.227'. [ 134.230592][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.242202][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.278316][ T5282] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 134.307494][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.388421][ T5282] usb 4-1: config 0 descriptor?? [ 134.577633][ T5242] Bluetooth: hci6: command tx timeout [ 134.979670][ T5282] cypress 0003:04B4:07B1.0004: unknown main item tag 0x6 [ 134.992736][ T5282] cypress 0003:04B4:07B1.0004: item fetching failed at offset 4/5 [ 135.015206][ T5282] cypress 0003:04B4:07B1.0004: parse failed [ 135.033189][ T5282] cypress 0003:04B4:07B1.0004: probe with driver cypress failed with error -22 [ 135.238933][ T643] team0 (unregistering): Port device team_slave_1 removed [ 135.391357][ T643] team0 (unregistering): Port device team_slave_0 removed [ 136.657493][ T5242] Bluetooth: hci6: command tx timeout [ 136.720827][ T5286] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 136.933732][ T5286] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.947601][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.980481][ T5286] usb 1-1: Product: syz [ 136.992880][ T5286] usb 1-1: Manufacturer: syz [ 137.029516][ T5286] usb 1-1: SerialNumber: syz [ 137.088465][ T5286] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.270705][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 138.062908][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.099846][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.176898][ T6157] bridge_slave_1: entered allmulticast mode [ 138.227791][ T6157] bridge_slave_1: entered promiscuous mode [ 138.347723][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 138.403753][ T9] ath9k_htc: Failed to initialize the device [ 138.430617][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 138.518145][ T8] usb 4-1: USB disconnect, device number 4 [ 138.580719][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.603576][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 138.767568][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.933467][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.978608][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.417743][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 139.860303][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 141.017154][ T8] usb 3-1: no configurations [ 141.075148][ T0] sched: DL replenish lagged too much [ 144.280461][ T8] usb 3-1: can't read configurations, error -22 [ 144.328716][ T6281] netlink: 104 bytes leftover after parsing attributes in process `syz.3.236'. [ 146.421945][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.323938][ T9] usb 1-1: USB disconnect, device number 16 [ 147.366369][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.089819][ T6157] team0: Port device team_slave_0 added [ 157.177642][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 157.311518][ T6157] team0: Port device team_slave_1 added [ 157.671700][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.827649][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.853601][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.895703][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.917729][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.943134][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.067485][ T5285] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.335846][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.343910][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.355453][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.410088][ T6157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.531919][ T5285] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.548561][ T6308] bond1: entered promiscuous mode [ 158.567798][ T6308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.580421][ T5285] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.627908][ T5285] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.647320][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.655406][ T5285] usb 2-1: SerialNumber: syz [ 158.979788][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.986830][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.012921][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.045211][ T5285] usb 2-1: 0:2 : does not exist [ 159.257041][ T5285] usb 2-1: USB disconnect, device number 3 [ 159.270233][ T6157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.346655][ T6323] tipc: Started in network mode [ 159.352330][ T6323] tipc: Node identity ac1414aa, cluster identity 4711 [ 159.368267][ T6306] udevd[6306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.420074][ T6323] tipc: Enabled bearer , priority 10 [ 159.628148][ T6327] fuse: Bad value for 'fd' [ 159.769684][ T6327] ======================================================= [ 159.769684][ T6327] WARNING: The mand mount option has been deprecated and [ 159.769684][ T6327] and is ignored by this kernel. Remove the mand [ 159.769684][ T6327] option from the mount to silence this warning. [ 159.769684][ T6327] ======================================================= [ 159.804597][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.137585][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 160.747781][ T5231] Bluetooth: hci0: command tx timeout [ 160.967246][ T5285] tipc: Node number set to 2886997162 [ 162.830315][ T5231] Bluetooth: hci0: command tx timeout [ 162.997501][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 164.669594][ T9] usb 3-1: device descriptor read/all, error -71 [ 164.900373][ T5231] Bluetooth: hci0: command tx timeout [ 164.961469][ T6157] hsr_slave_0: entered promiscuous mode [ 165.089864][ T6157] hsr_slave_1: entered promiscuous mode [ 165.145000][ T6157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.201911][ T5230] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.211992][ T6157] Cannot create hsr debugfs directory [ 165.399485][ T5230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.425707][ T5230] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.455539][ T5230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.517121][ T5230] usb 2-1: config 0 descriptor?? [ 165.577555][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 165.794747][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.844815][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 165.930260][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 165.971665][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.035792][ T9] usb 3-1: SerialNumber: syz [ 166.073276][ T9] usb 3-1: config 0 descriptor?? [ 166.139442][ T9] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 166.467786][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.654902][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.735591][ T5230] usbhid 2-1:0.0: can't add hid device: -71 [ 166.742096][ T8] usb 3-1: USB disconnect, device number 21 [ 166.777491][ T5230] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 166.837101][ T6317] chnl_net:caif_netlink_parms(): no params data found [ 166.893281][ T5230] usb 2-1: USB disconnect, device number 4 [ 166.978347][ T5231] Bluetooth: hci0: command tx timeout [ 167.291167][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 167.291186][ T29] audit: type=1326 audit(1727832326.351:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c8597dff9 code=0x0 [ 167.391642][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.438625][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.445924][ T6317] bridge_slave_0: entered allmulticast mode [ 167.528516][ T6317] bridge_slave_0: entered promiscuous mode [ 167.563035][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.612389][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.655527][ T6317] bridge_slave_1: entered allmulticast mode [ 167.696732][ T6317] bridge_slave_1: entered promiscuous mode [ 168.097815][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 168.111614][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.197237][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.297891][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 168.327890][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.385787][ T8] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 168.443111][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.484932][ T8] usb 3-1: config 0 descriptor?? [ 168.530058][ T6317] team0: Port device team_slave_0 added [ 168.606813][ T6317] team0: Port device team_slave_1 added [ 168.795107][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.810783][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.855422][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.900383][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.927288][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.971659][ T5230] usb 3-1: USB disconnect, device number 22 [ 169.022489][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.412643][ T6317] hsr_slave_0: entered promiscuous mode [ 169.439906][ T6317] hsr_slave_1: entered promiscuous mode [ 169.458464][ T6317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.477543][ T6317] Cannot create hsr debugfs directory [ 176.378768][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.391122][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.399575][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.409316][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.424735][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.435437][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.113193][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.127117][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.135798][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.144283][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.152471][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.160553][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.509610][ T5231] Bluetooth: hci1: command tx timeout [ 180.267714][ T5231] Bluetooth: hci2: command tx timeout [ 180.578545][ T5231] Bluetooth: hci1: command tx timeout [ 180.631493][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.640701][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.649876][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.658514][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.668290][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 180.675686][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.339623][ T5242] Bluetooth: hci2: command tx timeout [ 182.657966][ T5242] Bluetooth: hci1: command tx timeout [ 182.737934][ T5242] Bluetooth: hci3: command tx timeout [ 184.426268][ T5242] Bluetooth: hci2: command tx timeout [ 184.744709][ T5242] Bluetooth: hci1: command tx timeout [ 184.837468][ T5231] Bluetooth: hci3: command tx timeout [ 186.506386][ T5242] Bluetooth: hci2: command tx timeout [ 186.899246][ T5242] Bluetooth: hci3: command tx timeout [ 188.987574][ T5242] Bluetooth: hci3: command tx timeout [ 189.188214][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.199509][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.208758][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.217215][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.225858][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 189.234659][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.297957][ T5231] Bluetooth: hci4: command tx timeout [ 193.378035][ T5231] Bluetooth: hci4: command tx timeout [ 194.425123][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.431543][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.457895][ T5231] Bluetooth: hci4: command tx timeout [ 197.537981][ T5231] Bluetooth: hci4: command tx timeout [ 207.693593][ T5242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.703061][ T5242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.717785][ T5242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.725707][ T5242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.738032][ T5242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.748707][ T5242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.781681][ T5242] Bluetooth: hci7: command tx timeout [ 211.858146][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 211.864291][ T5235] Bluetooth: hci7: command tx timeout [ 213.937908][ T5242] Bluetooth: hci7: command tx timeout [ 216.018201][ T5242] Bluetooth: hci7: command tx timeout [ 236.750550][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 236.759615][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 236.767741][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 236.776843][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 236.791753][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 236.801445][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 238.835070][ T5242] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 238.849431][ T5242] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 238.860424][ T5242] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 238.868823][ T5242] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 238.876501][ T5242] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 238.888650][ T5242] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 238.898227][ T5242] Bluetooth: hci8: command tx timeout [ 240.978455][ T5242] Bluetooth: hci9: command tx timeout [ 240.984996][ T5242] Bluetooth: hci8: command tx timeout [ 241.205027][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 241.214412][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 241.223018][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 241.231491][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 241.239499][ T5235] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 241.246921][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 243.058075][ T5235] Bluetooth: hci8: command tx timeout [ 243.063543][ T5235] Bluetooth: hci9: command tx timeout [ 243.301362][ T5235] Bluetooth: hci10: command tx timeout [ 245.137889][ T5235] Bluetooth: hci9: command tx timeout [ 245.143378][ T5235] Bluetooth: hci8: command tx timeout [ 245.378983][ T5235] Bluetooth: hci10: command tx timeout [ 247.218072][ T5235] Bluetooth: hci9: command tx timeout [ 247.457972][ T5235] Bluetooth: hci10: command tx timeout [ 249.537838][ T5235] Bluetooth: hci10: command tx timeout [ 250.217796][ T5231] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 250.226611][ T5231] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 250.236549][ T5231] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 250.244614][ T5231] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 250.257881][ T5231] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 250.266989][ T5231] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 252.344051][ T5235] Bluetooth: hci11: command tx timeout [ 252.824821][ T5235] Bluetooth: hci6: command 0x0406 tx timeout [ 254.422524][ T5231] Bluetooth: hci11: command tx timeout [ 255.862315][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.868792][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.498015][ T5231] Bluetooth: hci11: command tx timeout [ 258.587859][ T5231] Bluetooth: hci11: command tx timeout [ 268.247080][ T5235] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 268.258491][ T5235] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 268.267137][ T5235] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 268.278120][ T5235] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 268.298518][ T5235] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 268.306044][ T5235] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 270.337959][ T5235] Bluetooth: hci12: command tx timeout [ 272.417734][ T5235] Bluetooth: hci12: command tx timeout [ 274.497819][ T5235] Bluetooth: hci12: command tx timeout [ 276.581675][ T5235] Bluetooth: hci12: command tx timeout [ 283.554641][ T5235] Bluetooth: hci0: command 0x0406 tx timeout [ 297.313408][ T5242] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 297.325576][ T5242] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 297.334002][ T5242] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 297.342909][ T5242] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 297.351048][ T5242] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 297.359943][ T5242] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 298.904305][ T5242] Bluetooth: hci1: command 0x0406 tx timeout [ 299.352888][ T5242] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 299.366311][ T5242] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 299.375280][ T5242] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 299.391886][ T5242] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 299.400008][ T5242] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 299.412092][ T5242] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 299.458001][ T5242] Bluetooth: hci13: command tx timeout [ 301.317829][ T5231] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 301.327027][ T5231] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 301.339321][ T5231] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 301.350904][ T5231] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 301.361361][ T5231] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 301.371603][ T5231] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 301.458745][ T5231] Bluetooth: hci14: command tx timeout [ 301.538066][ T5231] Bluetooth: hci13: command tx timeout [ 303.457872][ T5231] Bluetooth: hci15: command tx timeout [ 303.537925][ T5231] Bluetooth: hci14: command tx timeout [ 303.618055][ T5231] Bluetooth: hci13: command tx timeout [ 304.039602][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 304.045724][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 305.537867][ T5235] Bluetooth: hci15: command tx timeout [ 305.618238][ T5235] Bluetooth: hci14: command tx timeout [ 305.708238][ T5235] Bluetooth: hci13: command tx timeout [ 307.628765][ T5235] Bluetooth: hci15: command tx timeout [ 307.698049][ T5235] Bluetooth: hci14: command tx timeout [ 309.697750][ T5235] Bluetooth: hci15: command tx timeout [ 310.268307][ T5242] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 310.279381][ T5242] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 310.288277][ T5242] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 310.296396][ T5242] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 310.309438][ T5242] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 310.321866][ T5242] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 312.425917][ T5242] Bluetooth: hci16: command tx timeout [ 314.257677][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 314.497735][ T5235] Bluetooth: hci16: command tx timeout [ 316.577763][ T5235] Bluetooth: hci16: command tx timeout [ 317.317795][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.325176][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.657812][ T5235] Bluetooth: hci16: command tx timeout [ 328.831196][ T5242] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 328.840880][ T5242] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 328.849056][ T5242] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 328.858535][ T5242] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 328.879349][ T5242] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 328.888025][ T5242] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 330.978964][ T5242] Bluetooth: hci17: command tx timeout [ 332.018376][ T30] INFO: task kworker/u8:5:643 blocked for more than 143 seconds. [ 332.026166][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 332.058250][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.078350][ T30] task:kworker/u8:5 state:D stack:21208 pid:643 tgid:643 ppid:2 flags:0x00004000 [ 332.106000][ T30] Workqueue: netns cleanup_net [ 332.132184][ T30] Call Trace: [ 332.135621][ T30] [ 332.157501][ T30] __schedule+0x1895/0x4b30 [ 332.162141][ T30] ? __pfx___schedule+0x10/0x10 [ 332.167048][ T30] ? __pfx_lock_release+0x10/0x10 [ 332.257627][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 332.263180][ T30] ? kthread_data+0x52/0xd0 [ 332.308063][ T30] ? schedule+0x90/0x320 [ 332.312398][ T30] ? wq_worker_sleeping+0x66/0x240 [ 332.327438][ T30] ? schedule+0x90/0x320 [ 332.331859][ T30] schedule+0x14b/0x320 [ 332.349677][ T30] schedule_preempt_disabled+0x13/0x30 [ 332.355236][ T30] __mutex_lock+0x6a7/0xd70 [ 332.367484][ T30] ? __mutex_lock+0x52a/0xd70 [ 332.372253][ T30] ? mpls_net_exit+0x7d/0x2a0 [ 332.376978][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 332.394271][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 332.403669][ T30] ? mpls_net_exit+0x78/0x2a0 [ 332.416695][ T30] ? kfree+0x1a0/0x440 [ 332.421338][ T30] ? mpls_net_exit+0x78/0x2a0 [ 332.426074][ T30] mpls_net_exit+0x7d/0x2a0 [ 332.447548][ T30] cleanup_net+0x802/0xcc0 [ 332.452040][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 332.457054][ T30] ? process_scheduled_works+0x976/0x1850 [ 332.473843][ T30] process_scheduled_works+0xa63/0x1850 [ 332.485926][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.504008][ T30] ? assign_work+0x364/0x3d0 [ 332.514272][ T30] worker_thread+0x870/0xd30 [ 332.527525][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 332.533624][ T30] ? __kthread_parkme+0x169/0x1d0 [ 332.553307][ T30] ? __pfx_worker_thread+0x10/0x10 [ 332.563839][ T30] kthread+0x2f0/0x390 [ 332.574305][ T30] ? __pfx_worker_thread+0x10/0x10 [ 332.587051][ T30] ? __pfx_kthread+0x10/0x10 [ 332.597648][ T30] ret_from_fork+0x4b/0x80 [ 332.602145][ T30] ? __pfx_kthread+0x10/0x10 [ 332.613171][ T30] ret_from_fork_asm+0x1a/0x30 [ 332.623299][ T30] [ 332.626518][ T30] INFO: task jbd2/sda1-8:4649 blocked for more than 143 seconds. [ 332.648105][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 332.655800][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.693912][ T30] task:jbd2/sda1-8 state:D stack:23504 pid:4649 tgid:4649 ppid:2 flags:0x00004000 [ 332.712278][ T30] Call Trace: [ 332.715622][ T30] [ 332.724183][ T30] __schedule+0x1895/0x4b30 [ 332.735215][ T30] ? __pfx___schedule+0x10/0x10 [ 332.748316][ T30] ? __pfx_lock_release+0x10/0x10 [ 332.753425][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.769956][ T30] ? schedule+0x90/0x320 [ 332.774362][ T30] schedule+0x14b/0x320 [ 332.783965][ T30] io_schedule+0x8d/0x110 [ 332.802423][ T30] bit_wait_io+0x12/0xd0 [ 332.806747][ T30] __wait_on_bit+0xb0/0x2f0 [ 332.827587][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 332.832608][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 332.849741][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 332.854867][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 332.867962][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 332.873527][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 332.892466][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 332.907577][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 332.912873][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 332.927559][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 332.933280][ T30] ? __timer_delete_sync+0x15c/0x310 [ 332.952413][ T30] ? __timer_delete_sync+0x25d/0x310 [ 332.966513][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 332.973495][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 332.987546][ T30] ? prepare_to_wait+0x186/0x210 [ 332.992583][ T30] ? schedule+0x90/0x320 [ 332.996882][ T30] kjournald2+0x41c/0x7b0 [ 333.012232][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.025144][ T30] ? __pfx_kjournald2+0x10/0x10 [ 333.036448][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 333.047544][ T30] ? __kthread_parkme+0x169/0x1d0 [ 333.057881][ T5235] Bluetooth: hci17: command tx timeout [ 333.068003][ T30] ? __pfx_kjournald2+0x10/0x10 [ 333.072938][ T30] kthread+0x2f0/0x390 [ 333.077055][ T30] ? __pfx_kjournald2+0x10/0x10 [ 333.096128][ T30] ? __pfx_kthread+0x10/0x10 [ 333.105914][ T30] ret_from_fork+0x4b/0x80 [ 333.117855][ T30] ? __pfx_kthread+0x10/0x10 [ 333.122594][ T30] ret_from_fork_asm+0x1a/0x30 [ 333.139121][ T30] [ 333.142484][ T30] INFO: task dhcpcd:4901 blocked for more than 144 seconds. [ 333.167486][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 333.175273][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.195766][ T30] task:dhcpcd state:D stack:20608 pid:4901 tgid:4901 ppid:4900 flags:0x00000002 [ 333.212152][ T30] Call Trace: [ 333.215496][ T30] [ 333.231704][ T30] __schedule+0x1895/0x4b30 [ 333.236333][ T30] ? __pfx___schedule+0x10/0x10 [ 333.261256][ T30] ? __pfx_lock_release+0x10/0x10 [ 333.266378][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 333.282932][ T30] ? schedule+0x90/0x320 [ 333.287271][ T30] schedule+0x14b/0x320 [ 333.295230][ T30] schedule_preempt_disabled+0x13/0x30 [ 333.316860][ T30] __mutex_lock+0x6a7/0xd70 [ 333.327522][ T30] ? __mutex_lock+0x52a/0xd70 [ 333.332270][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 333.347756][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 333.352878][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 333.367812][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 333.373011][ T30] ? __lock_acquire+0x1384/0x2050 [ 333.392448][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.406584][ T30] netlink_rcv_skb+0x1e3/0x430 [ 333.415424][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.428494][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.434070][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.447411][ T30] netlink_unicast+0x7f6/0x990 [ 333.452272][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 333.472534][ T30] ? __virt_addr_valid+0x183/0x530 [ 333.483999][ T30] ? __check_object_size+0x48e/0x900 [ 333.494381][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 333.506393][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.517547][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 333.522568][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.538035][ T30] __sock_sendmsg+0x221/0x270 [ 333.542797][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 333.559958][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.577585][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 333.583680][ T30] __sys_sendmsg+0x292/0x380 [ 333.597949][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.603217][ T30] ? netlink_bind+0xaeb/0xc90 [ 333.619885][ T30] ? __pfx___sys_bind+0x10/0x10 [ 333.624822][ T30] ? fd_install+0x35c/0x5d0 [ 333.642951][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.656994][ T30] ? do_syscall_64+0x100/0x230 [ 333.663095][ T30] ? do_syscall_64+0xb6/0x230 [ 333.681484][ T30] do_syscall_64+0xf3/0x230 [ 333.686068][ T30] ? clear_bhb_loop+0x35/0x90 [ 333.697351][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.703368][ T30] RIP: 0033:0x7f53107c3a4b [ 333.722444][ T30] RSP: 002b:00007ffebc64c098 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.737554][ T30] RAX: ffffffffffffffda RBX: 00007f53106eb6c0 RCX: 00007f53107c3a4b [ 333.745603][ T30] RDX: 0000000000000000 RSI: 00007ffebc660248 RDI: 0000000000000013 [ 333.763874][ T30] RBP: 0000000000000013 R08: 0000000000000000 R09: 00007ffebc660248 [ 333.787923][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 333.795962][ T30] R13: 00007ffebc660248 R14: 0000000000000044 R15: 0000000000000001 [ 333.817651][ T30] [ 333.823789][ T30] INFO: task syz-executor:6317 blocked for more than 145 seconds. [ 333.837557][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 333.845249][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.873585][ T30] task:syz-executor state:D stack:21728 pid:6317 tgid:6317 ppid:1 flags:0x00000004 [ 333.896984][ T30] Call Trace: [ 333.906005][ T30] [ 333.916150][ T30] __schedule+0x1895/0x4b30 [ 333.925962][ T30] ? __pfx___schedule+0x10/0x10 [ 333.937126][ T30] ? __pfx_lock_release+0x10/0x10 [ 333.951906][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 333.965368][ T30] ? schedule+0x90/0x320 [ 333.975298][ T30] schedule+0x14b/0x320 [ 333.988208][ T30] schedule_preempt_disabled+0x13/0x30 [ 333.993747][ T30] __mutex_lock+0x6a7/0xd70 [ 334.008313][ T30] ? __mutex_lock+0x52a/0xd70 [ 334.013065][ T30] ? del_device_store+0xfc/0x480 [ 334.027350][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 334.032490][ T30] del_device_store+0xfc/0x480 [ 334.049998][ T30] ? __pfx_del_device_store+0x10/0x10 [ 334.055481][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 334.072876][ T30] ? bus_attr_store+0x4f/0xb0 [ 334.086181][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 334.096565][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 334.107338][ T30] vfs_write+0xa6d/0xc90 [ 334.111656][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 334.129865][ T30] ? __pfx_vfs_write+0x10/0x10 [ 334.135137][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 334.147497][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.152771][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 334.167768][ T30] ? fdget_pos+0x265/0x320 [ 334.172347][ T30] ksys_write+0x183/0x2b0 [ 334.176721][ T30] ? __pfx_ksys_write+0x10/0x10 [ 334.207145][ T30] ? do_syscall_64+0x100/0x230 [ 334.214311][ T30] ? do_syscall_64+0xb6/0x230 [ 334.228015][ T30] do_syscall_64+0xf3/0x230 [ 334.232602][ T30] ? clear_bhb_loop+0x35/0x90 [ 334.249004][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.254981][ T30] RIP: 0033:0x7f2ec277cadf [ 334.271449][ T30] RSP: 002b:00007f2ec2a5f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 334.287470][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2ec277cadf [ 334.295521][ T30] RDX: 0000000000000001 RSI: 00007f2ec2a5f270 RDI: 0000000000000005 [ 334.315211][ T30] RBP: 00007f2ec27f13ae R08: 0000000000000000 R09: 00007f2ec2a5f077 [ 334.329246][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 334.347746][ T30] R13: 00007f2ec2a5f270 R14: 00007f2ec3464620 R15: 0000000000000003 [ 334.355807][ T30] [ 334.369234][ T30] INFO: task syz.2.255:6387 blocked for more than 145 seconds. [ 334.376838][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 334.397390][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.406125][ T30] task:syz.2.255 state:D stack:25680 pid:6387 tgid:6387 ppid:5348 flags:0x00004006 [ 334.431991][ T30] Call Trace: [ 334.435416][ T30] [ 334.448360][ T30] __schedule+0x1895/0x4b30 [ 334.452966][ T30] ? __pfx___schedule+0x10/0x10 [ 334.469120][ T30] ? __pfx_lock_release+0x10/0x10 [ 334.474236][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 334.488187][ T30] ? schedule+0x90/0x320 [ 334.492508][ T30] schedule+0x14b/0x320 [ 334.496724][ T30] schedule_preempt_disabled+0x13/0x30 [ 334.514224][ T30] __mutex_lock+0x6a7/0xd70 [ 334.525242][ T30] ? __mutex_lock+0x52a/0xd70 [ 334.543729][ T30] ? tun_chr_close+0x3b/0x1b0 [ 334.554627][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 334.566456][ T30] ? __pfx_call_rcu+0x10/0x10 [ 334.576493][ T30] tun_chr_close+0x3b/0x1b0 [ 334.587534][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 334.605276][ T30] __fput+0x23f/0x880 [ 334.609883][ T30] task_work_run+0x24f/0x310 [ 334.614533][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 334.630978][ T30] ? __pfx_task_work_run+0x10/0x10 [ 334.637142][ T30] ? do_exit+0xa2a/0x28e0 [ 334.648455][ T30] ? kmem_cache_free+0x1a2/0x420 [ 334.653468][ T30] ? do_exit+0xa2a/0x28e0 [ 334.672058][ T30] do_exit+0xa2f/0x28e0 [ 334.676388][ T30] ? __pfx_do_exit+0x10/0x10 [ 334.687348][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 334.697638][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.703726][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.720665][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 334.725947][ T30] do_group_exit+0x207/0x2c0 [ 334.742253][ T5235] Bluetooth: hci7: command 0x0406 tx timeout [ 334.749162][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.754450][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 334.772457][ T30] get_signal+0x16a3/0x1740 [ 334.777053][ T30] ? __pfx_get_signal+0x10/0x10 [ 334.794453][ T30] arch_do_signal_or_restart+0x96/0x860 [ 334.806927][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 334.817357][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.823428][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 334.842465][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 334.854614][ T30] do_syscall_64+0x100/0x230 [ 334.864367][ T30] ? clear_bhb_loop+0x35/0x90 [ 334.875452][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.887608][ T30] RIP: 0033:0x7f020b37dff9 [ 334.892088][ T30] RSP: 002b:00007f020b65fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 334.917969][ T30] RAX: 0000000000000000 RBX: 00007f020b537a80 RCX: 00007f020b37dff9 [ 334.926196][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 334.946986][ T30] RBP: 00007f020b537a80 R08: 00007f020b522000 R09: 00007f020b65fe7f [ 334.956825][ T30] R10: 00000000005e843c R11: 0000000000000246 R12: 0000000000029f2c [ 334.975014][ T30] R13: 00007f020b65fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 334.991160][ T30] [ 334.996492][ T30] INFO: task syz-executor:6465 blocked for more than 146 seconds. [ 335.029471][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 335.037173][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.067553][ T30] task:syz-executor state:D stack:26816 pid:6465 tgid:6465 ppid:1 flags:0x00004004 [ 335.087683][ T30] Call Trace: [ 335.091022][ T30] [ 335.093988][ T30] __schedule+0x1895/0x4b30 [ 335.111366][ T30] ? __pfx___schedule+0x10/0x10 [ 335.116306][ T30] ? __pfx_lock_release+0x10/0x10 [ 335.127474][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 335.133021][ T30] ? schedule+0x90/0x320 [ 335.138244][ T5242] Bluetooth: hci17: command tx timeout [ 335.157148][ T30] schedule+0x14b/0x320 [ 335.163064][ T30] schedule_preempt_disabled+0x13/0x30 [ 335.177482][ T30] __mutex_lock+0x6a7/0xd70 [ 335.182078][ T30] ? __mutex_lock+0x52a/0xd70 [ 335.186794][ T30] ? register_nexthop_notifier+0x84/0x290 [ 335.204785][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 335.215100][ T30] ? __asan_memset+0x23/0x50 [ 335.237433][ T30] register_nexthop_notifier+0x84/0x290 [ 335.243238][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 335.260055][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 335.266375][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 335.277338][ T30] ? __asan_memset+0x23/0x50 [ 335.281996][ T30] ops_init+0x31e/0x590 [ 335.286202][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 335.302687][ T30] setup_net+0x287/0x9e0 [ 335.317102][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 335.327951][ T30] ? __pfx_setup_net+0x10/0x10 [ 335.332883][ T30] copy_net_ns+0x33f/0x570 [ 335.349287][ T30] create_new_namespaces+0x425/0x7b0 [ 335.354679][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 335.372944][ T30] ksys_unshare+0x619/0xc10 [ 335.382774][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 335.394340][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.408752][ T30] ? do_syscall_64+0x100/0x230 [ 335.413598][ T30] __x64_sys_unshare+0x38/0x40 [ 335.427889][ T30] do_syscall_64+0xf3/0x230 [ 335.435299][ T30] ? clear_bhb_loop+0x35/0x90 [ 335.449822][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.455814][ T30] RIP: 0033:0x7efc4ab7f7f7 [ 335.473252][ T30] RSP: 002b:00007efc4ae5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 335.487590][ T30] RAX: ffffffffffffffda RBX: 00007efc4abf1a85 RCX: 00007efc4ab7f7f7 [ 335.495644][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 335.516680][ T30] RBP: 0000000000000000 R08: 00007efc4b867d60 R09: 0000000000000000 [ 335.527502][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 335.535542][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 335.554862][ T30] [ 335.564607][ T30] [ 335.564607][ T30] Showing all locks held in the system: [ 335.577832][ T30] 3 locks held by kworker/u8:0/11: [ 335.583006][ T30] #0: ffff88814be53948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.605367][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.627666][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 335.649083][ T30] 1 lock held by khungtaskd/30: [ 335.654941][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 335.679307][ T30] 4 locks held by kworker/u8:5/643: [ 335.684577][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.707338][ T30] #1: ffffc90002fffd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.727699][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 335.754241][ T30] #3: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 335.775950][ T30] 3 locks held by kworker/u8:9/2985: [ 335.785304][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.807420][ T30] #1: ffffc90009e97d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.828890][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 335.847371][ T30] 1 lock held by dhcpcd/4901: [ 335.853426][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.878900][ T30] 2 locks held by getty/4984: [ 335.883638][ T30] #0: ffff88802ddd70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 335.906763][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 335.927445][ T30] 3 locks held by kworker/1:3/5282: [ 335.932705][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.962388][ T30] #1: ffffc90003fc7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.985814][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 335.997192][ T30] 4 locks held by kworker/1:4/5294: [ 336.007370][ T30] 8 locks held by syz-executor/6157: [ 336.012700][ T30] #0: ffff888023c0e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 336.043318][ T30] #1: ffff888060c13088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 336.057567][ T30] #2: ffff88814476b008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 336.082433][ T30] #3: ffffffff8f56f7c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 336.108721][ T30] #4: ffff8880607f60e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 336.126335][ T30] #5: ffff8880607f5250 (&devlink->lock_key#8){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 336.148283][ T30] #6: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 336.167792][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 336.191683][ T30] 4 locks held by syz-executor/6317: [ 336.197021][ T30] #0: ffff888023c0e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 336.216908][ T30] #1: ffff88803174c088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 336.232281][ T30] #2: ffff88814476b008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 336.253911][ T30] #3: ffffffff8f56f7c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 336.277858][ T30] 1 lock held by syz.2.255/6387: [ 336.282846][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 336.304920][ T30] 2 locks held by syz-executor/6457: [ 336.314096][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.339954][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 336.357900][ T30] 2 locks held by syz-executor/6461: [ 336.363235][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.384977][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 336.397328][ T30] 2 locks held by syz-executor/6465: [ 336.402656][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.423939][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.448519][ T30] 2 locks held by syz-executor/6470: [ 336.454106][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.475869][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.500079][ T30] 2 locks held by syz-executor/6474: [ 336.505423][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.527605][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.547361][ T30] 2 locks held by syz-executor/6481: [ 336.552709][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.576300][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.591563][ T30] 2 locks held by syz-executor/6486: [ 336.596943][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.617519][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.638767][ T30] 2 locks held by syz-executor/6489: [ 336.644126][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.666071][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.681725][ T30] 2 locks held by syz-executor/6493: [ 336.695774][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.709610][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.727412][ T30] 2 locks held by syz-executor/6499: [ 336.732761][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.755950][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.776627][ T30] 2 locks held by syz-executor/6508: [ 336.783233][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.803282][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.817988][ T30] 2 locks held by syz-executor/6511: [ 336.823326][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.851641][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.875316][ T30] 2 locks held by syz-executor/6514: [ 336.884776][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.907360][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.927335][ T30] 2 locks held by syz-executor/6519: [ 336.932681][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 336.956712][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 336.977348][ T30] 2 locks held by syz-executor/6525: [ 336.982696][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 337.008784][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 337.027868][ T30] [ 337.030256][ T30] ============================================= [ 337.030256][ T30] [ 337.055104][ T30] NMI backtrace for cpu 0 [ 337.059578][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 337.070120][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.080217][ T30] Call Trace: [ 337.083527][ T30] [ 337.086485][ T30] dump_stack_lvl+0x241/0x360 [ 337.091211][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.096454][ T30] ? __pfx__printk+0x10/0x10 [ 337.101122][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 337.106120][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 337.111622][ T30] ? _printk+0xd5/0x120 [ 337.115831][ T30] ? __pfx__printk+0x10/0x10 [ 337.120471][ T30] ? __wake_up_klogd+0xcc/0x110 [ 337.125366][ T30] ? __pfx__printk+0x10/0x10 [ 337.130012][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 337.135089][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 337.141119][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 337.147149][ T30] watchdog+0xff4/0x1040 [ 337.151451][ T30] ? watchdog+0x1ea/0x1040 [ 337.155925][ T30] ? __pfx_watchdog+0x10/0x10 [ 337.160644][ T30] kthread+0x2f0/0x390 [ 337.164749][ T30] ? __pfx_watchdog+0x10/0x10 [ 337.169511][ T30] ? __pfx_kthread+0x10/0x10 [ 337.174135][ T30] ret_from_fork+0x4b/0x80 [ 337.178597][ T30] ? __pfx_kthread+0x10/0x10 [ 337.183233][ T30] ret_from_fork_asm+0x1a/0x30 [ 337.188058][ T30] [ 337.193009][ T30] Sending NMI from CPU 0 to CPUs 1: [ 337.198943][ C1] NMI backtrace for cpu 1 [ 337.198958][ C1] CPU: 1 UID: 0 PID: 5294 Comm: kworker/1:4 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 337.198981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.198993][ C1] Workqueue: events nsim_dev_trap_report_work [ 337.199020][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 337.199047][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d a4 06 9d 0c 48 89 de 5b e9 83 c8 5d 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d7 03 00 65 8b 15 00 fc [ 337.199064][ C1] RSP: 0018:ffffc90000a17b00 EFLAGS: 00000293 [ 337.199079][ C1] RAX: 0000000000000100 RBX: ffff8880e3096f00 RCX: dffffc0000000000 [ 337.199093][ C1] RDX: ffff8880253d9e00 RSI: 000000000000002e RDI: 0000000000000040 [ 337.199106][ C1] RBP: 0000000000212210 R08: ffffffff8142ee7a R09: 1ffffffff2858b1d [ 337.199120][ C1] R10: dffffc0000000000 R11: fffffbfff2858b1e R12: ffff888028cbd79c [ 337.199134][ C1] R13: ffffea00018c2580 R14: 0000000063096f00 R15: 000000000000002e [ 337.199147][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 337.199169][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.199182][ C1] CR2: 00007f020b52b208 CR3: 000000000e734000 CR4: 00000000003526f0 [ 337.199198][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 337.199209][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 337.199221][ C1] Call Trace: [ 337.199228][ C1] [ 337.199235][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 337.199259][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 337.199299][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 337.199320][ C1] ? nmi_handle+0x2a/0x5a0 [ 337.199346][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 337.199370][ C1] ? nmi_handle+0x14f/0x5a0 [ 337.199387][ C1] ? nmi_handle+0x2a/0x5a0 [ 337.199406][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 337.199431][ C1] ? default_do_nmi+0x63/0x160 [ 337.199471][ C1] ? exc_nmi+0x123/0x1f0 [ 337.199493][ C1] ? end_repeat_nmi+0xf/0x53 [ 337.199513][ C1] ? __phys_addr+0x8a/0x170 [ 337.199545][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 337.199568][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 337.199592][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 337.199615][ C1] [ 337.199621][ C1] [ 337.199627][ C1] __phys_addr+0x99/0x170 [ 337.199644][ C1] ? nf_conntrack_free+0x2fd/0x390 [ 337.199669][ C1] check_slab_allocation+0x16/0x110 [ 337.199689][ C1] ? nf_conntrack_free+0x2fd/0x390 [ 337.199713][ C1] kmem_cache_free+0x14c/0x420 [ 337.199737][ C1] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 337.199765][ C1] nf_conntrack_free+0x2fd/0x390 [ 337.199791][ C1] nf_conntrack_in+0xb51/0x1890 [ 337.199828][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 337.199859][ C1] ? ipt_do_table+0x312/0x1860 [ 337.199886][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 337.199913][ C1] ? ip_route_me_harder+0xc98/0x1300 [ 337.199954][ C1] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 337.199977][ C1] ? ipv4_conntrack_local+0x120/0x200 [ 337.200003][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 337.200026][ C1] nf_hook_slow+0xc3/0x220 [ 337.200049][ C1] ? __pfx_dst_output+0x10/0x10 [ 337.200075][ C1] nf_hook+0x2c4/0x450 [ 337.200100][ C1] ? nf_hook+0x9e/0x450 [ 337.200122][ C1] ? __pfx_nf_hook+0x10/0x10 [ 337.200147][ C1] ? __pfx_dst_output+0x10/0x10 [ 337.200180][ C1] ? ip_fast_csum+0x1f0/0x2b0 [ 337.200202][ C1] __ip_local_out+0x3d9/0x4e0 [ 337.200225][ C1] ? __pfx_dst_output+0x10/0x10 [ 337.200251][ C1] ip_local_out+0x26/0x70 [ 337.200275][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 337.200308][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 337.200336][ C1] ? synproxy_pernet+0x45/0x270 [ 337.200364][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 337.200394][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 337.200420][ C1] ? NF_HOOK+0x29e/0x450 [ 337.200441][ C1] ? nf_ip_checksum+0x13a/0x500 [ 337.200470][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 337.200500][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 337.200530][ C1] ? __lock_acquire+0x1384/0x2050 [ 337.200558][ C1] ? __pfx_validate_chain+0x10/0x10 [ 337.200583][ C1] nft_do_chain+0x4ad/0x1da0 [ 337.200607][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 337.200633][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 337.200675][ C1] nft_do_chain_inet+0x418/0x6b0 [ 337.200704][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 337.200729][ C1] ? ipt_do_table+0x312/0x1860 [ 337.200764][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 337.200789][ C1] nf_hook_slow+0xc3/0x220 [ 337.200813][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 337.200834][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 337.200855][ C1] NF_HOOK+0x29e/0x450 [ 337.200877][ C1] ? NF_HOOK+0x9a/0x450 [ 337.200896][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 337.200923][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 337.200947][ C1] ? ip_rcv_finish+0x406/0x560 [ 337.200968][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 337.200989][ C1] NF_HOOK+0x3a4/0x450 [ 337.201008][ C1] ? __lock_acquire+0x1384/0x2050 [ 337.201036][ C1] ? NF_HOOK+0x9a/0x450 [ 337.201055][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 337.201074][ C1] ? ip_rcv_core+0x801/0xd10 [ 337.201095][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 337.201119][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 337.201140][ C1] __netif_receive_skb+0x2bf/0x650 [ 337.201168][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 337.201196][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 337.201218][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.201244][ C1] ? __pfx_lock_release+0x10/0x10 [ 337.201272][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 337.201304][ C1] process_backlog+0x662/0x15b0 [ 337.201331][ C1] ? process_backlog+0x33b/0x15b0 [ 337.201359][ C1] ? __pfx_process_backlog+0x10/0x10 [ 337.201382][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.201411][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.201441][ C1] __napi_poll+0xcb/0x490 [ 337.201465][ C1] net_rx_action+0x89b/0x1240 [ 337.201500][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 337.201525][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 337.201567][ C1] handle_softirqs+0x2c5/0x980 [ 337.201594][ C1] ? do_softirq+0x11b/0x1e0 [ 337.201619][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 337.201648][ C1] do_softirq+0x11b/0x1e0 [ 337.201670][ C1] [ 337.201676][ C1] [ 337.201683][ C1] ? __pfx_do_softirq+0x10/0x10 [ 337.201707][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 337.201736][ C1] ? rcu_is_watching+0x15/0xb0 [ 337.201757][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 337.201782][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 337.201803][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 337.201828][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 337.201852][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 337.201876][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 337.201905][ C1] ? process_scheduled_works+0x976/0x1850 [ 337.201931][ C1] process_scheduled_works+0xa63/0x1850 [ 337.201969][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.201999][ C1] ? assign_work+0x364/0x3d0 [ 337.202026][ C1] worker_thread+0x870/0xd30 [ 337.202058][ C1] ? __kthread_parkme+0x169/0x1d0 [ 337.202086][ C1] ? __pfx_worker_thread+0x10/0x10 [ 337.202111][ C1] kthread+0x2f0/0x390 [ 337.202128][ C1] ? __pfx_worker_thread+0x10/0x10 [ 337.202154][ C1] ? __pfx_kthread+0x10/0x10 [ 337.202176][ C1] ret_from_fork+0x4b/0x80 [ 337.202202][ C1] ? __pfx_kthread+0x10/0x10 [ 337.202220][ C1] ret_from_fork_asm+0x1a/0x30 [ 337.202253][ C1] [ 338.098580][ T5242] Bluetooth: hci17: command tx timeout [ 338.104211][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 338.111115][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 338.121659][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.131752][ T30] Call Trace: [ 338.135059][ T30] [ 338.138019][ T30] dump_stack_lvl+0x241/0x360 [ 338.142747][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.148015][ T30] ? __pfx__printk+0x10/0x10 [ 338.152751][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.158795][ T30] ? vscnprintf+0x5d/0x90 [ 338.163178][ T30] panic+0x349/0x880 [ 338.167143][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 338.173518][ T30] ? __pfx_panic+0x10/0x10 [ 338.177971][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 338.183376][ T30] ? __irq_work_queue_local+0x137/0x410 [ 338.188968][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 338.194378][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 338.200573][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 338.206775][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 338.212974][ T30] watchdog+0x1033/0x1040 [ 338.217433][ T30] ? watchdog+0x1ea/0x1040 [ 338.221981][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.226696][ T30] kthread+0x2f0/0x390 [ 338.230802][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.235605][ T30] ? __pfx_kthread+0x10/0x10 [ 338.240230][ T30] ret_from_fork+0x4b/0x80 [ 338.244705][ T30] ? __pfx_kthread+0x10/0x10 [ 338.249331][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.254151][ T30] [ 338.257559][ T30] Kernel Offset: disabled [ 338.261921][ T30] Rebooting in 86400 seconds..