last executing test programs: 37.750086825s ago: executing program 0 (id=7446): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x401c5820, &(0x7f0000000180)) 37.593705423s ago: executing program 0 (id=7448): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="65003300800000000802110000010802110000015050505050500000000000000000000000000000010003010005030000003c04000000002d1a080010090000000000000003001f000000000039a840f1d590ab070100ff"], 0x84}}, 0x0) r6 = fsmount(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000400)=@ethtool_rxfh_indir={0x39, 0x1, [0x0]}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r7 = openat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r8, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000240000006e2000008000140000000005c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xe4}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, 0x0, 0x40010) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_clone3(&(0x7f0000000540)={0x100006180, &(0x7f00000000c0), &(0x7f0000000280)=0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) sched_setscheduler(r12, 0x6, &(0x7f00000005c0)) 36.611428974s ago: executing program 0 (id=7453): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000400002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x90) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010001000000000904000000ff054900000000"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0x0, 0x11, "434b32386b7ce2d2200c54fb3a762a7b2f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x41f}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x41f}}, './file0\x00'}) 33.382144062s ago: executing program 0 (id=7459): syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000012c35b400304106098c6100000010902120001000000000904"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xa5, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x8, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "9cb1c574"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x101, 0x3f}, {0x6, 0x24, 0x1a, 0x2, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0xea8c}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x1, 0x2, 0x8, 0xda1, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x40, 0x1, [0x6, 0x2, 0xffff, 0xfff]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x1, 0xd6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x8a, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xf9, 0xa6}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x7f, 0x7d, 0x7f, 0xff, 0x3f}, 0xe9, &(0x7f00000004c0)={0x5, 0xf, 0xe9, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x3, 0xa4a7}, @generic={0xbd, 0x10, 0x4, "a5c62711c97986479abb1b43f772cc9133da77939d25b4ca9f8b29ff6341d983b2676997f2f61a2a9afe0491286f838210da9370a1c3029cef1a288269d1a388e4e7a5c23e19488755492082a3f1c01f58e7b7c7755704bcd600d0fc0ffac9864f549ff495e398cd519d5bfb9d557c3d192de6cc9aeade002905a86eb1025114b0f4151e528cdff19e00a55020c9c846e97c8fc44e7bbbb12f8d7fa4055d6a087ad2493ef1732d52c3c2e912d375da0876598ba40781490bb36b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x3, 0xab}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x9, 0xf, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7f, 0x5f}]}, 0x3, [{0x40, &(0x7f00000005c0)=@string={0x40, 0x3, "ac86a45dcc7ee6e59a334c1446d6988ad13286e1666fd5f896d422c6843e9071db8fa8df9f09759e664abe8bfbf45e49ed8df5a84639a43d9928ccfe181a"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x200a}}, {0xb0, &(0x7f0000000640)=@string={0xb0, 0x3, "6e9c39da03a328d02f87b8a2af0ae6d92ced3a14d11b767aadc46b83490032e1598180b30aec5b694a4b71e9b01a78658aa4c7686e735d0b52b287b1af8194be79e075abb2c1f586b75fbc9562d117da90b193b4950986dfd7c3d0499655aa258d91effe083f030d579450a1e0d50fd1a5dfb1a369eb73d7244f0ec531b7329ac093587dc1a179ea33c9e0cb4ca56e4a5319058f58057059144a6762a1d5ccb086492fa2988b59f47972c2c7ba0a"}}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fea10080bd2dca8a9848a3c728f1c46b7b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) write(r2, &(0x7f0000000040)="1c00000021002551071c0165ff00dc020200000003100f000ee1000c", 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@empty}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x67}}, 0xf0}}, 0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000840)={'syztnl0\x00', r5, 0x7800, 0x700, 0x200000, 0x6, {{0xd, 0x4, 0x2, 0x3c, 0x34, 0x66, 0x0, 0x50, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xb, 0xc7, [@empty, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x5, [{@loopback, 0x2}, {@remote, 0x480000}]}]}}}}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = accept$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, 0x1c) listen(r6, 0x0) syz_usb_connect$uac1(0x4, 0xdd, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x8, 0xa0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x2, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x7b, 0xff, 0x0, 0x80}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0xfb, "049e15db9753"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x4, ':R'}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "a2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x9, 0x1}, @as_header={0x7, 0x24, 0x1, 0xff, 0x1, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x75, 0xd6, "c63e", "6354b6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x38, 0x9, 0x40, {0x7, 0x25, 0x1, 0x1, 0x39, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x3, "", "c08d85"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x9, "", "2b03c1"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x4, "058615bb5ef1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf8, 0x2, 0x80, {0x7, 0x25, 0x1, 0x0, 0x8, 0x7}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x110, 0x2, 0x8, 0x0, 0x40, 0x8}, 0x3b, &(0x7f0000000a00)={0x5, 0xf, 0x3b, 0x5, [@generic={0x11, 0x10, 0xa, "94adc9e363091f2da6e40476f99b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x7, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x3, 0x8000}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x8, 0xf, 0x5, [0x3fc0, 0xff00]}]}, 0x5, [{0x82, &(0x7f0000000a40)=@string={0x82, 0x3, "33903b6223885bd9bebe5a1205be7eb90755372df2c07b694d9f7adbba140f5705d09a6ffdb3b630e85cf620e92ad56980d1bb6278ad99961e6631bb8217dfe12a6ff02ef2c6390d0fd964c8c1f9ea8a702b9ed5f03915ab1f7d04c32ad467048f142bbd0b016c0b529383fb50fb8b5396cb457eaa5f7e99d11ea44b797218fb"}}, {0x64, &(0x7f0000000b00)=@string={0x64, 0x3, "04e0e3c8361a898a1cdeb0a1cb2bd5dd81df7c472035bccdd86cacae0ca83144f9e00e4ccbd60e778f7bbda3851c4bafa9d2a743540d495c585022252b9ae836a61719bd71cd72f92b351f9e09924994f6f0c8d373a0939540bb3337e6ba08ed24bf"}}, {0x50, &(0x7f0000000b80)=@string={0x50, 0x3, "2b96b14bf54077c44f4da2a14d9e37da8462e2aba5cae6ae014f2bdd57a057794e71f0e24b868602a1978b533d137407beff42414b8e8b8689c591fb280bb5570f2c30fa3fd45acb22c07b23c088"}}, {0xdb, &(0x7f0000000c00)=@string={0xdb, 0x3, "469728ab6948355cb7178d94c6723671806581aaff960c3ff8f3771ea5469ea8ae6b361b79957dbe56211cda6acee59dc45381857c70135646f13c539d0b8dca7d5ac2ce077c9e5cb73787014fb7a3438f966beb365df102c883e608ce8f1031990e92ce1c8288624e9dcb0c2583c346e6397a89842c9c6bd62df2a9cdfb6d6d0c63322779cc5b9fcaec2bdc9d4563eaad959d1cf4ce2f36cc3085aed50a21eb232f5fddf21e4b65347176084e5d78a4c453658d9e0d641e5a8df4394dd4c41f6fcfdd27e15b0945bd5c7776b114764efcaf7ffc50cee21420"}}, {0x6b, &(0x7f0000000d00)=@string={0x6b, 0x3, "2ba10d68e988b781aad85a1620842ec1801338a1823aac187bb8fe009bb83ad7127a041fca1bd57ffd6d63530142adafafbc858d9d696b7a83bbed65a2b152b1edffa510a1e4ce87f1e6feb64d8a2364c558b003a2640e3a11e70cf59cf8957fde3ca395edf0822f26"}}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000000)=0xfee, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x2004c810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$isdn(0x22, 0x3, 0x21) getpeername$inet6(r8, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000380)={0x0, 0x801, 0x8000}) 31.118964468s ago: executing program 0 (id=7465): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f00000005c0)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x54}}, 0x0) 24.360824604s ago: executing program 2 (id=7483): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 24.070175535s ago: executing program 2 (id=7485): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="74187a851d156a68b89a0e73cdc781698a469a4ba0b7c438a42097f4e50b258fb6a9d8719aacbd9ebc682c584d9de352aa", 0x31}], 0x1}], 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x810, r1, 0x64880000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) io_setup(0x7, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000540)="b52a4a8bd83375ef9036c92df45397d0792d68faf37e708d01246bb5d72ee2d3b56d4173f4734d0201c51ebf980adca1fe5a9e9fcbab0d8b5f428ce4a125b72165000000000000000535d410ceb9e982f602336726da5b8765f18f00"/101, 0x65}]) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r3 = creat(0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="2b0000000000000000e1"], 0x2b) sendfile(r5, r4, 0x0, 0x53d2) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000180)={0x14, &(0x7f0000000080)="7ed1d601c1b1bcada9993e521ba85927d1342b02"}) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/262, 0x101d0}], 0x1}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="49000000100001040000000031006b585b76ef0000000000000000051f7ddb2d9e946b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010069703667726500001800228014000700ff02000000000000000000000000000184cae2ad3dcaf66787351a592730ec7993a0f090024aefbb506336f7b049bc142174fdeb9c23b2ec415ebdad77986eebd1444422d27eaf6e27e617333b5de666ccc7c60c5d777b72a75efe9e651c9ef0c85c44db13d4864b2217dedb439721e4f017517fad0db3a24dda520311b8eb5f482624e3"], 0x48}}, 0x0) ioctl$KDSETLED(r6, 0x4b49, 0xb0adb7f6780000) close(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001169d5b2d7f07ad961b5591c2d38a383bcb7fd8c6"], 0x7c}}, 0x20000081) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c000000040a05000000000000000000020000000900030073797a31000000000900010073797a30"], 0x2c}}, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000740)=0x10, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40840, &(0x7f0000000300)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x80) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fcd846404c05c3060000000003010902240008000000000904000002ad163700090501027f03000000090588"], 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 22.110196088s ago: executing program 2 (id=7490): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00"], 0xec}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102384, 0x18ff0}], 0x1, 0x0, 0x100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$sndctrl(0x0, 0x4, 0x10b900) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)) ppoll(&(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000001c0)={0x13}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x19, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000003c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306}, 0x0, {0x2, 0x0, @loopback}, 'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0000000000000900450000380000000001019078ac1e0001ac1414ea96c7010500907802e0000045000000000000000033000000000000ac1414bba03cf82c79e712aa085108730b972495391744c7c74700b2a46ba5d6ffbcc0d0bc2b1665cb0dcd9d3464372fecda7ccb603f874cfd11d669c78c9ec4ae9950210db5044c38715d4c58ec64c63accb3a06b20d1e2918f15000000000000"], 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x7, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000dd03b2086d049009017f00000001090212000100000000090400000001013f00945f1a8bd42ac6d74381baa67b9bba97e5979076db2ed9f04458534f73c1780fa56d05e328cde0d9c79bd1abd0f2636fc6a46f668fcf8f0012442a796ad38a6fa695dbd3c15681e73e7f74dfcfc9d2eff8248c31a867f9d4b8f1ebc090bfafd149"], 0x0) 18.272274455s ago: executing program 2 (id=7495): r0 = semget(0x0, 0x1, 0x181) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000000)=""/38) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x22020600) (async) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', '', [{}, {0x20, '('}, {0x20, '<'}, {0x20, '/dev/kvm\x00'}]}, 0x13) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/nullb0\x00'}]}, 0x18) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) preadv(r1, 0x0, 0x0, 0xfffffffc, 0x0) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) io_setup(0xffff, &(0x7f0000000140)) (async) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04050400c80027"], 0x7) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 17.874185417s ago: executing program 2 (id=7497): syz_usb_connect(0x2, 0x6f, &(0x7f00000042c0)=ANY=[@ANYBLOB="1201000005014b106e050540388901020301090224000100000000090408000246d5d80009050209"], 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TjCT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B', 0x1, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r5, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r5}, 0x8) timer_create(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x202, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x6) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000034000000000056058ae91414bbac1414aa00004e22cc9784a202ee67d91158df6bbea1d709e8b4f3a8b7e76692270385aa2fb22aeabe8962401bbe78aacf2f309f0aee724423d7cd282481076f465aed4e2b9789caf2c69fbfbfc33ff14fad8be3f2e9786b189061", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8cc20000907800001e0c10000000000000000000"], 0x0) 15.268887271s ago: executing program 2 (id=7506): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0xc00, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 8.985296652s ago: executing program 1 (id=7523): r0 = socket$nl_route(0x10, 0x3, 0x0) stat(0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@mcast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffe}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x41) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a380000001c0a05000000000000000000020000000c00034000000000000000e50900020073797a32000000000900010073797a30"], 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB='\x00'], 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000010001d800c0000800500090001000000"], 0x38}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000008001f0003"], 0xc0}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000c0000000000fc0100000000000000000000000000a42ca84723f6c93b000a"], 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x30}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015400800142603600e1208000f0000000401a8001600020003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r12, 0x4188aec6, &(0x7f0000000040)={0x1}) sendmsg$nl_xfrm(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190005090000000000000000e000000100000000000000000000000020010000000000000000000000000001000000000000000002002010"], 0xb8}}, 0x0) 8.642293285s ago: executing program 4 (id=7524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="77809ad791b15fa5bfba9f8738f0ce8006739e8efea10297c2fee0bfd4a46782679ee052447531d4c50682ecbf4dd7a070a59327cb0527440cb18d", @ANYBLOB="000000000000000000003b000000e801330080000000080211000000ffffffffffff90e488f9971a000000000000000000006400044003010004060000000000002a01007206030303030303760600000000060bdd2d2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f2542033dd3d"], 0x208}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffff"], 0x398}}, 0x0) 6.292967634s ago: executing program 1 (id=7526): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) execve(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r2 = getpgrp(0x0) setns(r0, 0x20000000) kcmp(r1, r2, 0x0, r0, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x81e}]}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0xf, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x474}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x54e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x34, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x3, 0x6, 0x10, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[r8], &(0x7f0000000280)=[{0x1, 0x2, 0xc, 0x7}, {0x3, 0x1, 0x10, 0x1}, {0x0, 0x1, 0x5, 0x9}, {0x3, 0x1, 0x4, 0x6}, {0x4, 0x3, 0x9, 0x47cfc2dd520a3c97}, {0x4, 0x5, 0xa, 0x7}], 0x10, 0x7}, 0x90) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3}}, {{0x4}, {0x2, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}}], 0x38) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) openat(r10, &(0x7f0000000180)='./file0\x00', 0x517080, 0x100) preadv(r10, &(0x7f0000000540)=[{&(0x7f0000000480)=""/175, 0xaf}], 0x1, 0xc, 0x0) 6.201987085s ago: executing program 4 (id=7527): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x541b, 0x0) 5.690243075s ago: executing program 1 (id=7530): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x6, 0x7fffffff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 5.485177472s ago: executing program 1 (id=7531): syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000012c35b400304106098c6100000010902120001000000000904"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xa5, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x8, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "9cb1c574"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x101, 0x3f}, {0x6, 0x24, 0x1a, 0x2, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0xea8c}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x1, 0x2, 0x8, 0xda1, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x40, 0x1, [0x6, 0x2, 0xffff, 0xfff]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x1, 0xd6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x8a, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xf9, 0xa6}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x7f, 0x7d, 0x7f, 0xff, 0x3f}, 0xe9, &(0x7f00000004c0)={0x5, 0xf, 0xe9, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x3, 0xa4a7}, @generic={0xbd, 0x10, 0x4, "a5c62711c97986479abb1b43f772cc9133da77939d25b4ca9f8b29ff6341d983b2676997f2f61a2a9afe0491286f838210da9370a1c3029cef1a288269d1a388e4e7a5c23e19488755492082a3f1c01f58e7b7c7755704bcd600d0fc0ffac9864f549ff495e398cd519d5bfb9d557c3d192de6cc9aeade002905a86eb1025114b0f4151e528cdff19e00a55020c9c846e97c8fc44e7bbbb12f8d7fa4055d6a087ad2493ef1732d52c3c2e912d375da0876598ba40781490bb36b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x3, 0xab}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x9, 0xf, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7f, 0x5f}]}, 0x3, [{0x40, &(0x7f00000005c0)=@string={0x40, 0x3, "ac86a45dcc7ee6e59a334c1446d6988ad13286e1666fd5f896d422c6843e9071db8fa8df9f09759e664abe8bfbf45e49ed8df5a84639a43d9928ccfe181a"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x200a}}, {0xb0, &(0x7f0000000640)=@string={0xb0, 0x3, "6e9c39da03a328d02f87b8a2af0ae6d92ced3a14d11b767aadc46b83490032e1598180b30aec5b694a4b71e9b01a78658aa4c7686e735d0b52b287b1af8194be79e075abb2c1f586b75fbc9562d117da90b193b4950986dfd7c3d0499655aa258d91effe083f030d579450a1e0d50fd1a5dfb1a369eb73d7244f0ec531b7329ac093587dc1a179ea33c9e0cb4ca56e4a5319058f58057059144a6762a1d5ccb086492fa2988b59f47972c2c7ba0a"}}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fea10080bd2dca8a9848a3c728f1c46b7b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) write(r2, &(0x7f0000000040)="1c00000021002551071c0165ff00dc020200000003100f000ee1000c", 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@empty}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) pipe2(0x0, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000840)={'syztnl0\x00', r4, 0x7800, 0x700, 0x200000, 0x6, {{0xd, 0x4, 0x2, 0x3c, 0x34, 0x66, 0x0, 0x50, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xb, 0xc7, [@empty, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x5, [{@loopback, 0x2}, {@remote, 0x480000}]}]}}}}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = accept$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, 0x1c) listen(r5, 0x0) syz_usb_connect$uac1(0x4, 0xdd, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x8, 0xa0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x2, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x7b, 0xff, 0x0, 0x80}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0xfb, "049e15db9753"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x4, ':R'}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "a2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x9, 0x1}, @as_header={0x7, 0x24, 0x1, 0xff, 0x1, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x75, 0xd6, "c63e", "6354b6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x38, 0x9, 0x40, {0x7, 0x25, 0x1, 0x1, 0x39, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x3, "", "c08d85"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x9, "", "2b03c1"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x4, "058615bb5ef1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf8, 0x2, 0x80, {0x7, 0x25, 0x1, 0x0, 0x8, 0x7}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x110, 0x2, 0x8, 0x0, 0x40, 0x8}, 0x3b, &(0x7f0000000a00)={0x5, 0xf, 0x3b, 0x5, [@generic={0x11, 0x10, 0xa, "94adc9e363091f2da6e40476f99b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x7, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x3, 0x8000}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x8, 0xf, 0x5, [0x3fc0, 0xff00]}]}, 0x5, [{0x82, &(0x7f0000000a40)=@string={0x82, 0x3, "33903b6223885bd9bebe5a1205be7eb90755372df2c07b694d9f7adbba140f5705d09a6ffdb3b630e85cf620e92ad56980d1bb6278ad99961e6631bb8217dfe12a6ff02ef2c6390d0fd964c8c1f9ea8a702b9ed5f03915ab1f7d04c32ad467048f142bbd0b016c0b529383fb50fb8b5396cb457eaa5f7e99d11ea44b797218fb"}}, {0x64, &(0x7f0000000b00)=@string={0x64, 0x3, "04e0e3c8361a898a1cdeb0a1cb2bd5dd81df7c472035bccdd86cacae0ca83144f9e00e4ccbd60e778f7bbda3851c4bafa9d2a743540d495c585022252b9ae836a61719bd71cd72f92b351f9e09924994f6f0c8d373a0939540bb3337e6ba08ed24bf"}}, {0x50, &(0x7f0000000b80)=@string={0x50, 0x3, "2b96b14bf54077c44f4da2a14d9e37da8462e2aba5cae6ae014f2bdd57a057794e71f0e24b868602a1978b533d137407beff42414b8e8b8689c591fb280bb5570f2c30fa3fd45acb22c07b23c088"}}, {0xdb, &(0x7f0000000c00)=@string={0xdb, 0x3, "469728ab6948355cb7178d94c6723671806581aaff960c3ff8f3771ea5469ea8ae6b361b79957dbe56211cda6acee59dc45381857c70135646f13c539d0b8dca7d5ac2ce077c9e5cb73787014fb7a3438f966beb365df102c883e608ce8f1031990e92ce1c8288624e9dcb0c2583c346e6397a89842c9c6bd62df2a9cdfb6d6d0c63322779cc5b9fcaec2bdc9d4563eaad959d1cf4ce2f36cc3085aed50a21eb232f5fddf21e4b65347176084e5d78a4c453658d9e0d641e5a8df4394dd4c41f6fcfdd27e15b0945bd5c7776b114764efcaf7ffc50cee21420"}}, {0x6b, &(0x7f0000000d00)=@string={0x6b, 0x3, "2ba10d68e988b781aad85a1620842ec1801338a1823aac187bb8fe009bb83ad7127a041fca1bd57ffd6d63530142adafafbc858d9d696b7a83bbed65a2b152b1edffa510a1e4ce87f1e6feb64d8a2364c558b003a2640e3a11e70cf59cf8957fde3ca395edf0822f26"}}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000000)=0xfee, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x2004c810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$isdn(0x22, 0x3, 0x21) getpeername$inet6(r7, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000380)={0x0, 0x801, 0x8000}) 5.374434401s ago: executing program 4 (id=7532): write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x13) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./bus\x00', 0x84000176) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x0) 5.158140765s ago: executing program 4 (id=7533): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(r0, &(0x7f0000001340)={0xa, 0x4e21, 0x10000, @local}, 0x1c) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbb056f3f59aaaaaabb0806000600000604"], 0x0) socket$packet(0x11, 0x0, 0x300) r2 = socket(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x24000854) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000001400)) socket$nl_route(0x10, 0x3, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@userptr={0x0, 0xd, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "852e0936"}, 0x0, 0x2, {0x0}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='/dev/null\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='sockfs\x00', &(0x7f0000000140)='\b-]\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) 5.010929092s ago: executing program 3 (id=7534): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB], 0x84}}, 0x0) r6 = fsmount(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000400)=@ethtool_rxfh_indir={0x39, 0x1, [0x0]}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r7 = openat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r8, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000240000006e2000008000140000000005c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xe4}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, 0x0, 0x40010) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_clone3(&(0x7f0000000540)={0x100006180, &(0x7f00000000c0), &(0x7f0000000280)=0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) sched_setscheduler(r12, 0x6, &(0x7f00000005c0)) 4.094971203s ago: executing program 4 (id=7535): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5], 0x84}}, 0x0) r6 = fsmount(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000400)=@ethtool_rxfh_indir={0x39, 0x1, [0x0]}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r7 = openat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r8, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000240000006e2000008000140000000005c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xe4}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, 0x0, 0x40010) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_clone3(&(0x7f0000000540)={0x100006180, &(0x7f00000000c0), &(0x7f0000000280)=0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) sched_setscheduler(r12, 0x6, &(0x7f00000005c0)) 3.974224411s ago: executing program 3 (id=7536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="77809ad791b15fa5bfba9f8738f0ce8006739e8efea10297c2fee0bfd4a46782679ee052447531d4c50682ecbf4dd7a070a59327cb0527440cb18d", @ANYBLOB="000000000000000000003b000000e801330080000000080211000000ffffffffffff90e488f9971a000000000000000000006400044003010004060000000000002a01007206030303030303760600000000060bdd2d2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f2542033dd3d"], 0x208}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffff"], 0x398}}, 0x0) 3.760637722s ago: executing program 3 (id=7537): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x490, 0x1a0, 0xd0, 0x3c0, 0x490, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@dev, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0xb0}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f00000004c0)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = io_uring_setup(0x67d2, &(0x7f0000000240)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) (async) io_uring_enter(r1, 0x0, 0x0, 0x12, 0x0, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000002080)=[@in6={0xa, 0x0, 0x0, @local, 0x7276}], 0x1c) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) (async) connect$tipc(r6, &(0x7f0000000000)=@id, 0x10) close(r6) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f00000000c0)={0x2000, 0x8000}) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/42, 0x2a}}], 0x1, 0x12141, 0x0) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c20000020180c200000086dd60c8008000303a01fe8000000000000000000000000000aa00000000000000000000000000000001040090780000000060fd906300000000ff01000000000000000000000000000100000000000000400000ffffac1414aa"], 0x0) 3.515435885s ago: executing program 3 (id=7538): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000080)=""/11, 0xb}}, 0x11c) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='\f'], 0xaf) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) io_submit(r4, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r5, 0x0}]) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) getpeername$l2tp(r0, 0x0, 0x0) 3.31899464s ago: executing program 1 (id=7539): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x4000100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0xb0000004}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3c, 0x0, @empty, @private}, @address_request}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000000)={{@host}, 0x2}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r8}) 2.778062865s ago: executing program 4 (id=7540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x3, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x8, 0xffffffff, 0x0, {0x1, @sliced={0x1, [0x3f, 0x28, 0x0, 0xff2, 0x3, 0x9, 0x8, 0x1, 0x8, 0x0, 0x3, 0x1fd, 0x200, 0xf42, 0x9, 0x6, 0x7, 0x7ff, 0x2001, 0x9, 0x4, 0x6, 0x215e, 0x800, 0x3, 0x2, 0xff, 0x99, 0x7, 0x0, 0x8001, 0x9, 0x7, 0x0, 0x2, 0x37, 0xfffb, 0x3, 0x9, 0x2, 0x80, 0xfbff, 0x1, 0x9, 0x7, 0x5, 0x7fff]}}, 0x1000000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=@getnexthop={0x24, 0x6a, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000015bf000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b404000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) unshare(0x2a020400) r8 = timerfd_create(0x0, 0x0) poll(&(0x7f0000002080)=[{r8}], 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r7, &(0x7f0000000380), 0x0}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x6, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) 2.681739813s ago: executing program 0 (id=7466): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=""/4096) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x48b, 0x0, 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'dummy0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x0) r4 = syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0xb15, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000015c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x2, 0x8, 0x49, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x0, 0x4}}) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9}, {0x0, 0x2, 0x0, 0x0, 0xfffe}}}]}}]}, 0x45c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000029c0)={'syztnl0\x00', &(0x7f0000002940)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xa, 0x1, 0x30, @mcast1, @empty, 0x8000, 0x10, 0x6, 0xfffffffb}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002b00)={'erspan0\x00', &(0x7f0000002a00)={'tunl0\x00', 0x0, 0x1, 0x8, 0x6, 0xffffffff, {{0x2b, 0x4, 0x3, 0x5, 0xac, 0x67, 0x0, 0xb3, 0x4, 0x0, @multicast2, @remote, {[@generic={0x86, 0xf, "b933597d1fad5fc07e982208d9"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0xe, [{@private=0xa010101, 0x6ac}, {@multicast2, 0x10}]}, @cipso={0x86, 0x24, 0x2, [{0x0, 0xd, "8a33944e7578f5d5eb6022"}, {0x1, 0x11, "5f4eae3367fb0c8478680185e4f4fe"}]}, @end, @timestamp={0x44, 0x8, 0xf1, 0x0, 0x6, [0x8]}, @ssrr={0x89, 0xb, 0x4a, [@rand_addr=0x64010100, @loopback]}, @cipso={0x86, 0x34, 0x1, [{0x7, 0x4, "8744"}, {0x0, 0x10, "1ae9dfb903f5bae264bcb6879441"}, {0x7, 0x2}, {0x2, 0x4, 'u.'}, {0x1, 0x2}, {0x7, 0x12, "32e88fbfdc2a49b56730ae2823d208d2"}]}, @generic={0x94, 0x3, "9c"}]}}}}}) sendmmsg$inet(r8, &(0x7f0000005600)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001540)=[{&(0x7f00000000c0)="a53017bba9330e6ba9e256e311c63739c0ee055cb7f69da978144801b8af05c1b66fcdb3819cf74bfcbf30956e44d1a248cd4bcd69599aea8824b89ee57bde038c1a7cfff00d980310fe6e48c8586792362c1a5fdaae8784970eb522d2fb9f0762c51140c65f3249d71b1ae0c174465326e77f12", 0x74}, {&(0x7f0000001240)="53488986a8e71ab284d25ce9163038b08fb3bf1ff1b4f70e6f6b6fc904229df58c055d689e81a379b463f8211e9af78a4471aec58e7701ae0fbee703d61c493d4958b242a21b989e5e77d90b78c412f4f13e276b5280f06c398a2850bc68227bf0e42d23b123fdff4d7fb212aa50d91ba570f3e7c78a5b1db6f1c85f8365d1eec87cb34c8d9d11dbd0232b463f0d16028f3df2ddb58ba46f7c205b89e97d8239cea3431d3299a4963661eb3125d203519ac44102310619e02232ff57a74be69d32c2fb8f142251bc7af81e89965a20a1001971", 0xd3}, {&(0x7f0000001340)="07d87e35176063c33051e2df9c54b7b3540c00a5ed7f83a44a202cecf130fbeb766df418f1761a6f494c5760c5bd17e5cf416faa2f68060762db961219d356182e305fa4ab537435b8dceb06d4b2c7bd285236a22775030575ec7b4b76843617859d355961b2592cb58642132a347fc57542e498c83f0b566579b5bfdef187f28274f719ebd8ff04ae00f8daa44957dd569b8889729e785ad41afbe4ecf4ce9b241a77b85e7f73c68463531b0aba2307269214944f3b4a8d8e6b612cb2a23e002f83f9ec25897cd5c95b2405e9b294c1b51cf67d4834aa23", 0xd8}, {&(0x7f0000001440)="bcf7737e34b3fbfa5ed70645d53aa268947ccc091df9cbe11c174fe6d7f2663cd2ac4f9669423f149d1648a0065441d7fcec4a5dc1b77c7eaf4dd20996d29bfbc5367f667eea8ecdeeaa4a367942f3994035f2e9abf1382463e6a5f8b767954916905b2c5cb672893df6fdd15fa24d63bbcbb7b9d1f731bc7a21ab4381cdbbece9741d7a1f25ba8862bd8650b28df9838901995732b68c00fa6ba278b85ffe5d5d2e0af6f30cc969cc18dab1c62ab9c23e4587d9a2a507475303010837b53eb3b7f995fd4febc606f75377c015506120584d8b767214d87e6fd97d196b50c9d501e1983224b63550fb97255893cbd8c3146e55bed69e8dfad3f79e4e8fc9bb", 0xff}, {&(0x7f0000000140)="3c32842eefa61fcd059ccd9efa3a2cdfa9977c34017bad7181571ff1df135b7c4457653ab0bda97c9bb5b7c6bbe3f01e3aeda845126240e45655b709e47ec9daa1d50231339dda3837508bd0a13e3ee268190b1521efb81fd01c39cadcb8da4366f9028b136b23ba8df1de54995744a6a5", 0x71}], 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="00000000e0000001000000000001000000000000000000ffdd000000"], 0x1d8}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001840)="d6461f9d90b2a27af4f5e4097adb025eebf871ebe24e0c583a21b0c0dc4db033dbdd51844946473d8161a6348a72e8c91888479011ae927593fcc4bad7a2677ff7edf97f27c8db00ad228d170ca0645b510c5fcbb4178ac9e676b40a9e40a06567df57dcc316fb0facb50255042e01b523935df1c12b740b51faf289e6e4699c04d6010b6742abd278c9e76cf2f4868f201e7542f880cbe24f27b8b927b7541c230db45e7b809fcfaf569431a2c7f53dc602", 0xb2}, {&(0x7f0000001900)="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", 0x1000}], 0x2, &(0x7f0000002b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x90000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @local, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@ra, @noop, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0x1, [{@empty}]}, @timestamp={0x44, 0xc, 0x9d, 0x0, 0x6, [0x200, 0x7]}, @lsrr={0x83, 0x1b, 0x1e, [@private=0x2, @remote, @local, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x4, 0xac, 0x0, 0x4}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x2, [{@multicast2, 0x5}]}, @rr={0x7, 0xb, 0xab, [@broadcast, @broadcast]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @loopback, @multicast2}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x45, [@local, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x27, 0xc5, [@broadcast, @remote, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @local, @local]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x87, [@rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x4, [{@loopback, 0xe}, {@multicast1, 0x10001}, {@rand_addr=0x64010102, 0x82}, {@remote, 0x7}, {@multicast2, 0x8}, {@private=0xa010102, 0x1}, {@rand_addr=0x64010101, 0x75cd4762}]}]}}}], 0x1e0}}, {{&(0x7f0000002d40)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000004140)=[{&(0x7f0000002d80)="223c734c8ecd35409afa07432f0d0542070dea2f67694f99687c7ce950935f5bf7821bfaf27bc0c1e3d3c987baf45f7bb256f5f6bef280ce6a33bfe96e430c55143247060cf227c2d5734036f723ff84dfdab3a719f94bd62b3fc896a7b4a7d7b9c0ddde090764d45e0d5cffc1d97db08b5b30ed7cc9d69d1a677e4b747293b658b6d55fc8", 0x85}, {&(0x7f0000002e40)="ca41b344a5f8ce1a2a4359871334576a072a7eb73c11387db522654e6e566bb40db288a6ea6b8d6a45d69d89271fd13e7ad0c8519cfa55cbe3da69f6b0273c6fcee009cce8bfc647f4e6bf41133c6d9174f984a71a555f936186cde8384cf6bd54698814", 0x64}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="eda392127dd48f606ffa5a3d909d6c0b7dc8c63b3326a4c3255e780c8c0aefe78327b9b3", 0x24}, {&(0x7f0000003f00)="070002f2d047a4bb6e0b560ff66cb8f8e4526afcc0596394143e9fff8d2f2f069eb63167965255440dd18b66b290685db09f52a36f22fff537583112c528dc1ddbb70f63bb3f3ee49df443dde49adc10a6a3c87a61036ce7f1c9e79b148bd716ce3b0b95e27311481253ba9d2182242f4c98919d3fe0642b3a6939cf93ff432cd44e740c076f8d6a01561c2116a2c2751be3b2b4f25edbda8598903746a54be2061e9a3f69903ee45327d956ab40635157c93709d999517460aa934d5592bab835c254479f7ccdb8e3539a4aa41273a8fb1544", 0xfffffffffffffe89}, {&(0x7f0000004000)="7ee077049c86008818a2811b07dc09e603f3ca7a62e7b392acdc23047f4e580a239c81e69d4c787ea07dc84f271271978b396d09583c1a675b6fd251fbe2091a695842d4ffabcd36e98132ca40d94f83a25ab13cef4f9412869c0cce9c2f2710bf105bdc90ce3c49e4e3e43c542c648dd6c9c2e29e809b1492072de3693ad618de7b89988c882efdd65b29deb3a43ff1a24fe65a916ba310215b1a5070b6259827dd771032111f23", 0xa8}, {&(0x7f00000040c0)="cfc6e45d9c08f2ef8f79b083f7", 0xd}, {&(0x7f0000004100)="c125ac9950a4d3c9e7a00f10", 0xc}], 0x8, &(0x7f00000041c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x48}}, {{&(0x7f0000004240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000005300)=[{&(0x7f0000004280)="2222053251f05d0063c20b8bb2b237530c3e4eb2fa490a322b602d821581b218cb84f5c5b46d6d532bf9ec79b829189b3213a75810b7f5763ce29edbb7b51ba56a534acb9d825c6db929720eb87e0a0398cad0baff7c16830e4f96a47f601de153fb9dce0de87e90cdd8e73b5dc64854cf01cd", 0x73}, {&(0x7f0000004300)="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", 0x1000}], 0x2, &(0x7f0000005340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x68}}, {{&(0x7f00000053c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000005580)=[{&(0x7f0000005400)="3b4d10dfbd", 0x5}, {&(0x7f0000005440)="139bf89d6a73dc2a53be4abad5378717f3a91d5d191e778c5a3b95e87f641c3077fb43566ed4c9477b7f15bf7f56397844ebbc0dd86957295ace46b5154221844387ae070cee0b1fc4fcfcaef72fc57f482834cd569fc1b058415da06b3bc0cd20bf4fb5aa9aa10c20e3505a3aef9a47c1bae5ce23de357711e4385ffd7c5884e62875", 0x83}, {&(0x7f0000005500)="b625d021affa4c4518ffcdf29af0a5f389990207592a2ee64c31f093712f625076443ea25eeeb160971a6df58a7911f8e2cc0fa6c47eac91074cd090d71dcf45fce3bc04baf64830ade12d653fbe97f83a571dcc6d", 0x55}], 0x3, &(0x7f00000055c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x5, 0x10) 1.93886956s ago: executing program 1 (id=7541): syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000012c35b400304106098c6100000010902120001000000000904"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xa5, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x8, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "9cb1c574"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x101, 0x3f}, {0x6, 0x24, 0x1a, 0x2, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0xea8c}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x1, 0x2, 0x8, 0xda1, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x40, 0x1, [0x6, 0x2, 0xffff, 0xfff]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x1, 0xd6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x8a, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xf9, 0xa6}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x7f, 0x7d, 0x7f, 0xff, 0x3f}, 0xe9, &(0x7f00000004c0)={0x5, 0xf, 0xe9, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x3, 0xa4a7}, @generic={0xbd, 0x10, 0x4, "a5c62711c97986479abb1b43f772cc9133da77939d25b4ca9f8b29ff6341d983b2676997f2f61a2a9afe0491286f838210da9370a1c3029cef1a288269d1a388e4e7a5c23e19488755492082a3f1c01f58e7b7c7755704bcd600d0fc0ffac9864f549ff495e398cd519d5bfb9d557c3d192de6cc9aeade002905a86eb1025114b0f4151e528cdff19e00a55020c9c846e97c8fc44e7bbbb12f8d7fa4055d6a087ad2493ef1732d52c3c2e912d375da0876598ba40781490bb36b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x3, 0xab}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x9, 0xf, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7f, 0x5f}]}, 0x3, [{0x3d, &(0x7f00000005c0)=@string={0x3d, 0x3, "ac86a45dcc7ee6e59a334c1446d6988ad13286e1666fd5f896d422c6843e9071db8fa8df9f09759e664abe8bfbf45e49ed8df5a84639a43d9928cc"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x200a}}, {0xb0, &(0x7f0000000640)=@string={0xb0, 0x3, "6e9c39da03a328d02f87b8a2af0ae6d92ced3a14d11b767aadc46b83490032e1598180b30aec5b694a4b71e9b01a78658aa4c7686e735d0b52b287b1af8194be79e075abb2c1f586b75fbc9562d117da90b193b4950986dfd7c3d0499655aa258d91effe083f030d579450a1e0d50fd1a5dfb1a369eb73d7244f0ec531b7329ac093587dc1a179ea33c9e0cb4ca56e4a5319058f58057059144a6762a1d5ccb086492fa2988b59f47972c2c7ba0a"}}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fea10080bd2dca8a9848a3c728f1c46b7b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) write(r2, &(0x7f0000000040)="1c00000021002551071c0165ff00dc020200000003100f000ee1000c", 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@empty}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000840)={'syztnl0\x00', r5, 0x7800, 0x700, 0x200000, 0x6, {{0xd, 0x4, 0x2, 0x3c, 0x34, 0x66, 0x0, 0x50, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xb, 0xc7, [@empty, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x5, [{@loopback, 0x2}, {@remote, 0x480000}]}]}}}}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = accept$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, 0x1c) listen(r6, 0x0) syz_usb_connect$uac1(0x4, 0xdd, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x8, 0xa0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x2, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x7b, 0xff, 0x0, 0x80}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0xfb, "049e15db9753"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x4, ':R'}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "a2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x9, 0x1}, @as_header={0x7, 0x24, 0x1, 0xff, 0x1, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x75, 0xd6, "c63e", "6354b6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x38, 0x9, 0x40, {0x7, 0x25, 0x1, 0x1, 0x39, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x3, "", "c08d85"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x9, "", "2b03c1"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x4, "058615bb5ef1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf8, 0x2, 0x80, {0x7, 0x25, 0x1, 0x0, 0x8, 0x7}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x110, 0x2, 0x8, 0x0, 0x40, 0x8}, 0x3b, &(0x7f0000000a00)={0x5, 0xf, 0x3b, 0x5, [@generic={0x11, 0x10, 0xa, "94adc9e363091f2da6e40476f99b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x7, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x3, 0x8000}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x8, 0xf, 0x5, [0x3fc0, 0xff00]}]}, 0x5, [{0x82, &(0x7f0000000a40)=@string={0x82, 0x3, "33903b6223885bd9bebe5a1205be7eb90755372df2c07b694d9f7adbba140f5705d09a6ffdb3b630e85cf620e92ad56980d1bb6278ad99961e6631bb8217dfe12a6ff02ef2c6390d0fd964c8c1f9ea8a702b9ed5f03915ab1f7d04c32ad467048f142bbd0b016c0b529383fb50fb8b5396cb457eaa5f7e99d11ea44b797218fb"}}, {0x64, &(0x7f0000000b00)=@string={0x64, 0x3, "04e0e3c8361a898a1cdeb0a1cb2bd5dd81df7c472035bccdd86cacae0ca83144f9e00e4ccbd60e778f7bbda3851c4bafa9d2a743540d495c585022252b9ae836a61719bd71cd72f92b351f9e09924994f6f0c8d373a0939540bb3337e6ba08ed24bf"}}, {0x50, &(0x7f0000000b80)=@string={0x50, 0x3, "2b96b14bf54077c44f4da2a14d9e37da8462e2aba5cae6ae014f2bdd57a057794e71f0e24b868602a1978b533d137407beff42414b8e8b8689c591fb280bb5570f2c30fa3fd45acb22c07b23c088"}}, {0xdb, &(0x7f0000000c00)=@string={0xdb, 0x3, "469728ab6948355cb7178d94c6723671806581aaff960c3ff8f3771ea5469ea8ae6b361b79957dbe56211cda6acee59dc45381857c70135646f13c539d0b8dca7d5ac2ce077c9e5cb73787014fb7a3438f966beb365df102c883e608ce8f1031990e92ce1c8288624e9dcb0c2583c346e6397a89842c9c6bd62df2a9cdfb6d6d0c63322779cc5b9fcaec2bdc9d4563eaad959d1cf4ce2f36cc3085aed50a21eb232f5fddf21e4b65347176084e5d78a4c453658d9e0d641e5a8df4394dd4c41f6fcfdd27e15b0945bd5c7776b114764efcaf7ffc50cee21420"}}, {0x6b, &(0x7f0000000d00)=@string={0x6b, 0x3, "2ba10d68e988b781aad85a1620842ec1801338a1823aac187bb8fe009bb83ad7127a041fca1bd57ffd6d63530142adafafbc858d9d696b7a83bbed65a2b152b1edffa510a1e4ce87f1e6feb64d8a2364c558b003a2640e3a11e70cf59cf8957fde3ca395edf0822f26"}}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000000)=0xfee, 0x4) getpeername$inet6(r8, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000380)={0x0, 0x801, 0x8000}) 1.04297736s ago: executing program 3 (id=7542): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket(0xa, 0x6, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000340)={0x3}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0xed, 0x0, &(0x7f0000000000)) 0s ago: executing program 3 (id=7543): r0 = socket(0x2, 0x80805, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2}, &(0x7f0000000200)=0x8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000100)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d000000000708001b"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): k_any_held+0x10/0x10 [ 2382.480347][ T8270] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2382.480366][ T8270] direct_splice_actor+0x11e/0x220 [ 2382.480387][ T8270] splice_direct_to_actor+0x58e/0xc90 [ 2382.480419][ T8270] ? __pfx_direct_splice_actor+0x10/0x10 [ 2382.480438][ T8270] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2382.480462][ T8270] ? __fget_files+0x29/0x470 [ 2382.480484][ T8270] ? __pfx_lock_release+0x10/0x10 [ 2382.480505][ T8270] do_splice_direct+0x28c/0x3e0 [ 2382.480527][ T8270] ? __pfx_do_splice_direct+0x10/0x10 [ 2382.480546][ T8270] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2382.480570][ T8270] ? rw_verify_area+0x1d2/0x6b0 [ 2382.480592][ T8270] do_sendfile+0x56d/0xe20 [ 2382.480619][ T8270] ? __might_fault+0xaa/0x120 [ 2382.480648][ T8270] ? __pfx_do_sendfile+0x10/0x10 [ 2382.480676][ T8270] ? __might_fault+0xc6/0x120 [ 2382.480705][ T8270] __se_sys_sendfile64+0x100/0x1e0 [ 2382.480731][ T8270] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2382.480756][ T8270] ? do_syscall_64+0x100/0x230 [ 2382.480781][ T8270] ? do_syscall_64+0xb6/0x230 [ 2382.480812][ T8270] do_syscall_64+0xf3/0x230 [ 2382.480835][ T8270] ? clear_bhb_loop+0x35/0x90 [ 2382.480854][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2382.480878][ T8270] RIP: 0033:0x7f6decf75bd9 [ 2382.480893][ T8270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2382.480908][ T8270] RSP: 002b:00007f6dedd17048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2382.480928][ T8270] RAX: ffffffffffffffda RBX: 00007f6ded104038 RCX: 00007f6decf75bd9 [ 2382.480941][ T8270] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000004 [ 2382.480952][ T8270] RBP: 00007f6dedd170a0 R08: 0000000000000000 R09: 0000000000000000 [ 2382.480964][ T8270] R10: 00000000000007fa R11: 0000000000000246 R12: 0000000000000002 [ 2382.480974][ T8270] R13: 000000000000006e R14: 00007f6ded104038 R15: 00007f6ded22fa78 [ 2382.481003][ T8270] [ 2382.589622][ T29] audit: type=1326 audit(1720464848.624:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.0.7362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7efbb75bd9 code=0x0 [ 2383.311376][ T5146] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2383.365235][ T6128] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2383.509764][ T5146] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2383.509793][ T5146] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2383.509810][ T5146] usb 4-1: Manufacturer: syz [ 2383.513163][ T5146] usb 4-1: config 0 descriptor?? [ 2383.538819][ T5146] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2383.539978][ T5146] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2383.578892][ T8294] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2383.579043][ T8294] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2383.579079][ T8294] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2383.579112][ T8294] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2383.579223][ T8294] vxlan0: entered promiscuous mode [ 2383.579245][ T8294] vxlan0: entered allmulticast mode [ 2383.580399][ T6128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2383.580427][ T6128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2383.584546][ T6128] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2383.795517][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2383.831309][ T8294] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2383.831356][ T8294] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2383.831391][ T8294] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2383.831430][ T8294] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2383.874683][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2383.942109][ T6128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.942150][ T6128] usb 2-1: Product: syz [ 2383.942169][ T6128] usb 2-1: Manufacturer: syz [ 2383.942187][ T6128] usb 2-1: SerialNumber: syz [ 2383.958319][ T6128] usb 2-1: config 0 descriptor?? [ 2383.997123][T26262] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2384.027531][ T8269] tty tty21: ldisc open failed (-12), clearing slot 20 [ 2384.041355][ T8290] netlink: 'syz.3.7366': attribute type 4 has an invalid length. [ 2384.055180][T26262] Bluetooth: hci0: Injecting HCI hardware error event [ 2384.067441][T26262] Bluetooth: hci0: hardware error 0x00 [ 2384.114258][ T8290] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7366'. [ 2384.317313][ T3228] usb 4-1: USB disconnect, device number 105 [ 2384.370763][ T3228] ftdi_sio 4-1:0.0: device disconnected [ 2384.418985][ T8300] FAULT_INJECTION: forcing a failure. [ 2384.418985][ T8300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2384.433013][ T8300] CPU: 1 PID: 8300 Comm: syz.2.7368 Not tainted 6.10.0-rc7-syzkaller #0 [ 2384.441401][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2384.451499][ T8300] Call Trace: [ 2384.454824][ T8300] [ 2384.457792][ T8300] dump_stack_lvl+0x241/0x360 [ 2384.462520][ T8300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2384.468035][ T8300] ? __pfx__printk+0x10/0x10 [ 2384.472723][ T8300] ? __pfx_lock_release+0x10/0x10 [ 2384.477806][ T8300] should_fail_ex+0x3b0/0x4e0 [ 2384.482540][ T8300] _copy_from_user+0x2f/0xe0 [ 2384.487175][ T8300] csum_and_copy_from_iter_full+0x1fe/0x1df0 [ 2384.493225][ T8300] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 2384.499705][ T8300] ? trace_kmalloc+0x1f/0xd0 [ 2384.504346][ T8300] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 2384.510819][ T8300] ? __build_skb_around+0x245/0x3d0 [ 2384.516069][ T8300] ip_generic_getfrag+0x158/0x310 [ 2384.521130][ T8300] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2384.526712][ T8300] ? raw6_getfrag+0x104/0x350 [ 2384.531447][ T8300] ? skb_put+0x114/0x1f0 [ 2384.535735][ T8300] __ip6_append_data+0x3047/0x4070 [ 2384.540917][ T8300] ? __pfx_raw6_getfrag+0x10/0x10 [ 2384.545979][ T8300] ? __pfx___ip6_append_data+0x10/0x10 [ 2384.551482][ T8300] ? ip6_setup_cork+0x9fd/0xfb0 [ 2384.556347][ T8300] ip6_append_data+0x264/0x3a0 [ 2384.561126][ T8300] ? __pfx_raw6_getfrag+0x10/0x10 [ 2384.566160][ T8300] rawv6_sendmsg+0x18f1/0x23c0 [ 2384.570949][ T8300] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 2384.576083][ T8300] ? aa_sk_perm+0x967/0xab0 [ 2384.580608][ T8300] ? __pfx_lock_release+0x10/0x10 [ 2384.585650][ T8300] ? inet_sendmsg+0x330/0x390 [ 2384.590341][ T8300] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2384.595645][ T8300] ? security_socket_sendmsg+0x87/0xb0 [ 2384.601118][ T8300] __sock_sendmsg+0x1a6/0x270 [ 2384.605814][ T8300] sock_write_iter+0x2dd/0x400 [ 2384.610595][ T8300] ? __pfx_sock_write_iter+0x10/0x10 [ 2384.615914][ T8300] do_iter_readv_writev+0x5a4/0x800 [ 2384.621131][ T8300] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2384.626874][ T8300] ? bpf_lsm_file_permission+0x9/0x10 [ 2384.632253][ T8300] ? security_file_permission+0x7f/0xa0 [ 2384.637822][ T8300] ? rw_verify_area+0x1d2/0x6b0 [ 2384.642683][ T8300] vfs_writev+0x37c/0xbb0 [ 2384.647041][ T8300] ? __pfx_lock_acquire+0x10/0x10 [ 2384.652078][ T8300] ? __pfx_vfs_writev+0x10/0x10 [ 2384.656956][ T8300] ? vfs_write+0x7c4/0xc90 [ 2384.661395][ T8300] ? __fget_files+0x29/0x470 [ 2384.666040][ T8300] do_writev+0x1b1/0x350 [ 2384.670313][ T8300] ? __pfx_do_writev+0x10/0x10 [ 2384.675097][ T8300] ? do_syscall_64+0x100/0x230 [ 2384.679880][ T8300] ? do_syscall_64+0xb6/0x230 [ 2384.684577][ T8300] do_syscall_64+0xf3/0x230 [ 2384.689095][ T8300] ? clear_bhb_loop+0x35/0x90 [ 2384.693780][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.699692][ T8300] RIP: 0033:0x7f5c6b975bd9 [ 2384.704118][ T8300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2384.723820][ T8300] RSP: 002b:00007f5c6c73c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2384.732253][ T8300] RAX: ffffffffffffffda RBX: 00007f5c6bb04038 RCX: 00007f5c6b975bd9 [ 2384.740237][ T8300] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005 [ 2384.748306][ T8300] RBP: 00007f5c6c73c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2384.756289][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2384.764273][ T8300] R13: 000000000000006e R14: 00007f5c6bb04038 R15: 00007f5c6bc2fa78 [ 2384.772271][ T8300] [ 2384.775465][ C1] vkms_vblank_simulate: vblank timer overrun [ 2384.823436][ T6128] usb 2-1: ignoring: probably an ADSL modem [ 2384.964255][ T5146] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2385.154171][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 2385.184852][ T5146] usb 5-1: no configurations [ 2385.189570][ T5146] usb 5-1: can't read configurations, error -22 [ 2385.384283][ T5146] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2385.624350][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 2385.655458][ T5146] usb 5-1: no configurations [ 2385.674850][ T5146] usb 5-1: can't read configurations, error -22 [ 2385.684204][T29817] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2385.712444][ T5146] usb usb5-port1: attempt power cycle [ 2385.909638][T29817] usb 4-1: Using ep0 maxpacket: 16 [ 2385.931685][T29817] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 528 [ 2385.964395][T29817] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2385.994177][T29817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.005540][ T5150] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2386.040174][T29817] usb 4-1: Product: ᐊ [ 2386.055754][T29817] usb 4-1: Manufacturer: 裨䊰鞺鷳鿞鱀䛶钯ᘱ⸩㶞踓淘⛉ឥ課탰䆄㲓ꎡ易콉畘鱦୑⒳餢蹸䑉傕驝ỷ弊蹬埯紋㐽耰陕᱅饯켜鲨槎瓒⻎븚敏綫㿖얢鑈㚲㯬儺ꏟ㾵⇢嫩玬䑔ἷ䱆霗쉻﫜ℏ낛杲 [ 2386.146715][ T5146] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2386.184099][T29817] usb 4-1: SerialNumber: ᙱ寉ࢸ裾塘颃໅﵉哠頯뛜嫓꼡戚ᇮ瞠ꣻ竭䪋咞婜䁣㌮ᅄ﨡ﻭ칳鈑勯跃줦䋦س요궦蒫絋ﰌ䛑顳符陘ډ쨗歮ᐓ赝㤨쯭싮瑩싴뺔幓嗱鮷炄鋴쮬栳艫猉⑶脈ﴈ퇵⿠ꄔ䂰﷙鉓挎칷䦮댮ᰊ [ 2386.244446][T26262] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2386.268057][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 2386.278338][ T5150] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2386.287911][ T5150] usb 1-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2386.314883][ T5146] usb 5-1: no configurations [ 2386.321760][ T5146] usb 5-1: can't read configurations, error -22 [ 2386.359812][ T5150] usb 1-1: Manufacturer: syz [ 2386.425685][ T5150] usb 1-1: config 0 descriptor?? [ 2386.484782][ T5150] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2386.494394][ T5146] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2386.512133][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7373'. [ 2386.524584][ T5150] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2386.537812][ T6128] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2386.581790][ T6128] usb 2-1: USB disconnect, device number 109 [ 2386.590444][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 2386.614433][ T5146] usb 5-1: no configurations [ 2386.631447][ T5146] usb 5-1: can't read configurations, error -22 [ 2386.659681][T29817] cdc_ncm 4-1:1.0: bind() failure [ 2386.685034][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2386.693736][ T5146] usb usb5-port1: unable to enumerate USB device [ 2386.700053][T29817] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2386.731582][T29817] cdc_ncm 4-1:1.1: bind() failure [ 2386.732204][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2386.775105][T29817] usb 4-1: USB disconnect, device number 106 [ 2386.785185][ T8321] netlink: 'syz.0.7374': attribute type 4 has an invalid length. [ 2386.803278][ T8321] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7374'. [ 2386.994445][ T5146] usb 1-1: USB disconnect, device number 20 [ 2387.023571][ T5146] ftdi_sio 1-1:0.0: device disconnected [ 2387.134146][ T6128] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2387.304320][ T6128] usb 3-1: device descriptor read/64, error -71 [ 2387.337933][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7376'. [ 2387.470253][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7378'. [ 2387.584208][ T6128] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2387.734345][ T6128] usb 3-1: device descriptor read/64, error -71 [ 2387.855901][ T6128] usb usb3-port1: attempt power cycle [ 2387.976704][ T5146] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2388.156752][ T5146] usb 1-1: Using ep0 maxpacket: 16 [ 2388.158826][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 2388.158864][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 2388.158916][ T5146] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2388.158951][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.160862][ T5146] usb 1-1: config 0 descriptor?? [ 2388.161481][ T8339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2388.264220][ T6128] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2388.306485][ T6128] usb 3-1: device descriptor read/8, error -71 [ 2388.586799][ T6128] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2388.615187][ T6128] usb 3-1: device descriptor read/8, error -71 [ 2388.648526][ T8344] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2388.648560][ T8344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2388.648664][ T8344] vhci_hcd vhci_hcd.0: Device attached [ 2388.683523][ T8345] usbip_core: unknown command [ 2388.683544][ T8345] vhci_hcd: unknown pdu 1610612736 [ 2388.683561][ T8345] usbip_core: unknown command [ 2388.695318][T13010] vhci_hcd: stop threads [ 2388.695336][T13010] vhci_hcd: release socket [ 2388.695359][T13010] vhci_hcd: disconnect device [ 2388.712073][ T8338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1847362798 (236462438144 ns) > initial count (117901241344 ns). Using initial count to start timer. [ 2388.749713][ T6128] usb usb3-port1: unable to enumerate USB device [ 2388.923018][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2388.923346][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2388.926263][ T5146] hid (null): invalid report_size 16341 [ 2388.926293][ T5146] hid (null): unknown global tag 0xe [ 2388.926402][ T5146] hid (null): unknown global tag 0xd [ 2388.926422][ T5146] hid (null): unknown global tag 0xe [ 2388.926440][ T5146] hid (null): invalid report_count -107485465 [ 2388.926491][ T5146] hid (null): invalid report_size 16341 [ 2388.926510][ T5146] hid (null): unknown global tag 0xe [ 2388.926572][ T5146] hid (null): unknown global tag 0xd [ 2388.927420][ T5146] hid (null): unknown global tag 0xd [ 2388.927440][ T5146] hid (null): unknown global tag 0xe [ 2388.927460][ T5146] hid (null): invalid report_count -107485465 [ 2388.927516][ T5146] hid (null): invalid report_size 16341 [ 2388.931040][ T5146] hid-generic 0003:0158:0100.009B: unknown main item tag 0x1 [ 2388.931085][ T5146] hid-generic 0003:0158:0100.009B: unexpected long global item [ 2388.931953][ T5146] hid-generic 0003:0158:0100.009B: probe with driver hid-generic failed with error -22 [ 2389.004221][T29817] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2389.202543][T29817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2389.223354][T29817] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2389.242743][ T5150] usb 1-1: USB disconnect, device number 21 [ 2389.269837][T29817] usb 2-1: New USB device found, idVendor=046d, idProduct=c13f, bcdDevice= 0.00 [ 2389.292050][T29817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.313983][T29817] usb 2-1: config 0 descriptor?? [ 2389.330241][T29817] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2389.528819][ T5150] usb 2-1: USB disconnect, device number 110 [ 2390.174349][ T5146] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2390.396353][ T5146] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2390.413980][ T8367] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2390.414293][ T5146] usb 1-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2390.414321][ T5146] usb 1-1: Manufacturer: syz [ 2390.418461][ T5146] usb 1-1: config 0 descriptor?? [ 2390.424083][ T8367] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2390.453282][ T8367] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2390.457257][ T5146] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2390.462224][ T8367] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2390.503772][ T5146] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2390.581827][ T8367] vxlan0: entered promiscuous mode [ 2390.599088][ T8367] vxlan0: entered allmulticast mode [ 2390.635298][ T8367] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2390.644416][ T8367] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2390.653438][ T8367] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2390.663233][ T8367] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2390.704195][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2390.738510][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2390.868924][ T8355] netlink: 'syz.0.7383': attribute type 4 has an invalid length. [ 2390.952665][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7392'. [ 2390.952755][ T8355] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7383'. [ 2391.174268][ T6128] usb 1-1: USB disconnect, device number 22 [ 2391.190373][ T6128] ftdi_sio 1-1:0.0: device disconnected [ 2391.414284][ T5146] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2391.564169][T29817] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2391.654394][ T5146] usb 3-1: Using ep0 maxpacket: 16 [ 2391.672844][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 2391.721145][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 2391.764180][T29817] usb 4-1: Using ep0 maxpacket: 16 [ 2391.771969][ T5146] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2391.771973][T29817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 2391.822786][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.831342][T29817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 2391.865322][ T5146] usb 3-1: config 0 descriptor?? [ 2391.873259][ T8396] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2391.876412][T29817] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2391.930211][ T8403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2391.934087][T29817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.936783][ T8403] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2391.953646][T26262] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 2391.989478][T29817] usb 4-1: config 0 descriptor?? [ 2392.030950][ T8399] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2392.041920][ T8403] vhci_hcd vhci_hcd.0: Device attached [ 2392.123879][ T8407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7395'. [ 2392.173827][ T8404] usbip_core: unknown command [ 2392.189188][ T8404] vhci_hcd: unknown pdu 1610612736 [ 2392.220148][ T8407] openvswitch: netlink: Message has 1 unknown bytes. [ 2392.227966][ T8404] usbip_core: unknown command [ 2392.244436][ T6128] vhci_hcd: vhci_device speed not set [ 2392.251868][T13009] vhci_hcd: stop threads [ 2392.259499][T13009] vhci_hcd: release socket [ 2392.286975][T13009] vhci_hcd: disconnect device [ 2392.344612][ T6128] usb 11-1: new full-speed USB device number 19 using vhci_hcd [ 2392.369361][ T6128] usb 11-1: enqueue for inactive port 0 [ 2392.477016][ T6128] vhci_hcd: vhci_device speed not set [ 2392.544605][ T5150] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2392.665685][ T8398] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1847362798 (236462438144 ns) > initial count (117901241344 ns). Using initial count to start timer. [ 2392.776234][ T5150] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2392.799531][ T5150] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2392.822545][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.832512][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.844146][ T5150] usb 2-1: New USB device found, idVendor=046d, idProduct=c13f, bcdDevice= 0.00 [ 2392.863906][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2392.873921][ T5146] hid (null): invalid report_size 16341 [ 2392.895654][ T5150] usb 2-1: config 0 descriptor?? [ 2392.899384][ T5146] hid (null): unknown global tag 0xe [ 2392.907841][ T5150] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2392.915701][ T5146] hid (null): unknown global tag 0xd [ 2392.921240][ T5146] hid (null): unknown global tag 0xe [ 2392.928888][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.944997][ T5146] hid (null): invalid report_count -107485465 [ 2392.951287][ T5146] hid (null): invalid report_size 16341 [ 2392.954777][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.958162][ T5146] hid (null): unknown global tag 0xe [ 2392.984218][ T5146] hid (null): unknown global tag 0xd [ 2392.992705][ T5146] hid (null): unknown global tag 0xd [ 2393.000097][ T5146] hid (null): unknown global tag 0xe [ 2393.006017][ T5146] hid (null): invalid report_count -107485465 [ 2393.015065][ T5146] hid (null): invalid report_size 16341 [ 2393.035642][T29817] hid (null): invalid report_size 16341 [ 2393.052090][ T5146] hid-generic 0003:0158:0100.009C: unknown main item tag 0x1 [ 2393.053944][T29817] hid (null): unknown global tag 0xe [ 2393.083361][T29817] hid (null): unknown global tag 0xd [ 2393.102292][ T5146] hid-generic 0003:0158:0100.009C: unexpected long global item [ 2393.117093][ T5150] usb 2-1: USB disconnect, device number 111 [ 2393.140198][T29817] hid (null): unknown global tag 0xe [ 2393.147008][ T5146] hid-generic 0003:0158:0100.009C: probe with driver hid-generic failed with error -22 [ 2393.167877][T29817] hid (null): invalid report_count -107485465 [ 2393.197684][T29817] hid (null): invalid report_size 16341 [ 2393.224490][T29817] hid (null): unknown global tag 0xe [ 2393.229923][T29817] hid (null): unknown global tag 0xd [ 2393.295865][T29817] hid (null): unknown global tag 0xd [ 2393.306426][T29817] hid (null): unknown global tag 0xe [ 2393.311877][T29817] hid (null): invalid report_count -107485465 [ 2393.331799][T29817] hid (null): invalid report_size 16341 [ 2393.356631][T29817] hid-generic 0003:0158:0100.009D: unknown main item tag 0x1 [ 2393.374379][ T2989] usb 3-1: USB disconnect, device number 25 [ 2393.374908][T29817] hid-generic 0003:0158:0100.009D: unexpected long global item [ 2393.403462][T29817] hid-generic 0003:0158:0100.009D: probe with driver hid-generic failed with error -22 [ 2393.452706][T29817] usb 4-1: USB disconnect, device number 107 [ 2393.492301][ T8428] netlink: 'syz.0.7401': attribute type 29 has an invalid length. [ 2393.527774][ T8428] netlink: 'syz.0.7401': attribute type 29 has an invalid length. [ 2393.856744][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7403'. [ 2394.384246][T29817] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2394.509851][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7406'. [ 2394.588390][T29817] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2394.616566][T29817] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2394.650736][T29817] usb 4-1: Manufacturer: syz [ 2394.687610][T29817] usb 4-1: config 0 descriptor?? [ 2394.712129][T29817] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2394.747132][T29817] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2394.949293][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2394.991376][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.040942][ T8445] netlink: 'syz.3.7405': attribute type 4 has an invalid length. [ 2395.061334][ T8445] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7405'. [ 2395.106909][ T8460] fuse: Bad value for 'fd' [ 2395.328054][ T6128] usb 4-1: USB disconnect, device number 108 [ 2395.351592][ T6128] ftdi_sio 4-1:0.0: device disconnected [ 2395.409822][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7410'. [ 2395.434467][ T5150] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 2395.653544][ T5150] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2395.675550][ T5150] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 2395.691469][ T5150] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2395.705356][ T5150] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2395.738005][ T5150] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2395.753613][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2395.777994][ T29] audit: type=1326 audit(1720464861.814:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.2.7413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c6b975bd9 code=0x0 [ 2395.783359][ T5150] usb 1-1: SerialNumber: syz [ 2395.871485][ T8460] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2395.881315][ T8460] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2395.953234][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7413'. [ 2395.961766][ T5150] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 2396.094484][ T8482] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2396.101089][ T8482] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2396.173186][ T8485] pim6reg: entered allmulticast mode [ 2396.195036][ T8482] vhci_hcd vhci_hcd.0: Device attached [ 2396.206401][ T5150] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 2396.233211][ T5150] usb 1-1: USB disconnect, device number 23 [ 2396.275618][ T8483] usbip_core: unknown command [ 2396.288984][ T8483] vhci_hcd: unknown pdu 1610612736 [ 2396.315634][ T8483] usbip_core: unknown command [ 2396.331812][T13010] vhci_hcd: stop threads [ 2396.340899][T13010] vhci_hcd: release socket [ 2396.347782][T13010] vhci_hcd: disconnect device [ 2396.404295][ T2989] vhci_hcd: vhci_device speed not set [ 2396.434192][ T6128] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2396.604616][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 2396.612534][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 2396.639290][ T6128] usb 2-1: Using ep0 maxpacket: 16 [ 2396.646851][ T6128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 2396.664243][T29817] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2396.676128][ T6128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 2396.709525][ T6128] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2396.731891][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.748458][ T6128] usb 2-1: config 0 descriptor?? [ 2396.762828][ T8486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2396.876449][T29817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2396.920723][T29817] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2396.943167][T29817] usb 4-1: New USB device found, idVendor=046d, idProduct=c13f, bcdDevice= 0.00 [ 2396.953826][T29817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.975368][T29817] usb 4-1: config 0 descriptor?? [ 2397.003385][T29817] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2397.074288][ T5145] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2397.192508][ T8481] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1847362798 (236462438144 ns) > initial count (117901241344 ns). Using initial count to start timer. [ 2397.217761][ T5150] usb 4-1: USB disconnect, device number 109 [ 2397.273938][ T5145] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2397.290399][ T5145] usb 1-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2397.305413][ T5145] usb 1-1: Manufacturer: syz [ 2397.315552][ T5145] usb 1-1: config 0 descriptor?? [ 2397.343232][ T5145] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2397.372953][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7421'. [ 2397.386632][ T5145] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2397.426319][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.454567][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.507517][ T6128] hid (null): invalid report_size 16341 [ 2397.524313][ T6128] hid (null): unknown global tag 0xe [ 2397.529904][ T6128] hid (null): unknown global tag 0xd [ 2397.547948][ T6128] hid (null): unknown global tag 0xe [ 2397.566561][ T6128] hid (null): invalid report_count -107485465 [ 2397.575362][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.590692][ T6128] hid (null): invalid report_size 16341 [ 2397.600472][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.613652][ T6128] hid (null): unknown global tag 0xe [ 2397.619775][ T6128] hid (null): unknown global tag 0xd [ 2397.644412][ T6128] hid (null): unknown global tag 0xd [ 2397.665280][ T6128] hid (null): unknown global tag 0xe [ 2397.673997][ T8496] netlink: 'syz.0.7419': attribute type 4 has an invalid length. [ 2397.682533][ T6128] hid (null): invalid report_count -107485465 [ 2397.689232][ T8496] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7419'. [ 2397.702690][ T6128] hid (null): invalid report_size 16341 [ 2397.729194][ T6128] hid-generic 0003:0158:0100.009E: unknown main item tag 0x1 [ 2397.751278][ T6128] hid-generic 0003:0158:0100.009E: unexpected long global item [ 2397.787351][ T6128] hid-generic 0003:0158:0100.009E: probe with driver hid-generic failed with error -22 [ 2397.840827][ T6128] usb 2-1: USB disconnect, device number 112 [ 2397.911552][ T5145] usb 1-1: USB disconnect, device number 24 [ 2397.943134][ T5145] ftdi_sio 1-1:0.0: device disconnected [ 2398.058119][ T8509] fuse: Unknown parameter 'smackfshat' [ 2398.364223][ T6128] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2398.626237][ T6128] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2398.641624][ T6128] usb 3-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2398.670601][ T6128] usb 3-1: Manufacturer: syz [ 2398.687356][ T6128] usb 3-1: config 0 descriptor?? [ 2398.706383][ T6128] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2398.735065][ T6128] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2398.940033][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2398.964549][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.008333][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7432'. [ 2399.018673][ T8512] netlink: 'syz.2.7425': attribute type 4 has an invalid length. [ 2399.052248][ T8512] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7425'. [ 2399.144414][ T5150] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2399.307927][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7435'. [ 2399.318784][ T4743] usb 3-1: USB disconnect, device number 26 [ 2399.334208][ T5150] usb 1-1: device descriptor read/64, error -71 [ 2399.343503][ T4743] ftdi_sio 3-1:0.0: device disconnected [ 2399.625032][ T5150] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2399.794146][ T5150] usb 1-1: device descriptor read/64, error -71 [ 2399.925871][ T5150] usb usb1-port1: attempt power cycle [ 2400.003154][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7436'. [ 2400.354142][ T5150] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2400.410544][ T5145] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2400.444992][ T5150] usb 1-1: device descriptor read/8, error -71 [ 2400.605068][ T5145] usb 3-1: Using ep0 maxpacket: 16 [ 2400.618335][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 2400.630253][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 2400.647762][ T5145] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2400.672923][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2400.715750][ T5145] usb 3-1: config 0 descriptor?? [ 2400.728103][ T8554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2400.755846][ T5150] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2400.814791][ T5150] usb 1-1: device descriptor read/8, error -71 [ 2400.944948][ T5150] usb usb1-port1: unable to enumerate USB device [ 2401.058528][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7439'. [ 2401.208916][ T8552] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1847362798 (236462438144 ns) > initial count (117901241344 ns). Using initial count to start timer. [ 2401.252603][ T6128] IPVS: starting estimator thread 0... [ 2401.259981][ T8568] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 2401.364360][ T8569] IPVS: using max 24 ests per chain, 57600 per kthread [ 2401.451240][ T8572] netlink: 'syz.4.7441': attribute type 22 has an invalid length. [ 2401.462205][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.485340][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2401.516609][ T5145] hid (null): invalid report_size 16341 [ 2401.522411][ T5145] hid (null): unknown global tag 0xe [ 2401.533770][ T5145] hid (null): unknown global tag 0xd [ 2401.557210][ T5145] hid (null): unknown global tag 0xe [ 2401.573538][ T5145] hid (null): invalid report_count -107485465 [ 2401.597394][ T5145] hid (null): invalid report_size 16341 [ 2401.622381][ T5145] hid (null): unknown global tag 0xe [ 2401.629954][ T5145] hid (null): unknown global tag 0xd [ 2401.643461][ T5145] hid (null): unknown global tag 0xd [ 2401.653563][ T5145] hid (null): unknown global tag 0xe [ 2401.659487][ T6128] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2401.675091][ T5145] hid (null): invalid report_count -107485465 [ 2401.692220][ T5145] hid (null): invalid report_size 16341 [ 2401.718177][ T5145] hid-generic 0003:0158:0100.009F: unknown main item tag 0x1 [ 2401.734704][ T5145] hid-generic 0003:0158:0100.009F: unexpected long global item [ 2401.760784][ T5145] hid-generic 0003:0158:0100.009F: probe with driver hid-generic failed with error -22 [ 2401.870477][ T6128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2401.902421][ T5150] usb 3-1: USB disconnect, device number 27 [ 2401.911752][ T6128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2401.970707][ T6128] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2402.028427][ T6128] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2402.076905][ T6128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2402.115532][ T6128] usb 4-1: config 0 descriptor?? [ 2402.252444][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7445'. [ 2402.300803][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7445'. [ 2402.330425][ T8579] tc_dump_action: action bad kind [ 2402.461881][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7448'. [ 2402.619043][ T6128] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 2402.665256][ T6128] plantronics 0003:047F:FFFF.00A0: No inputs registered, leaving [ 2402.707844][ T6128] plantronics 0003:047F:FFFF.00A0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2402.865578][ T8591] netlink: 'syz.2.7450': attribute type 29 has an invalid length. [ 2402.914397][ T8591] netlink: 'syz.2.7450': attribute type 29 has an invalid length. [ 2403.483682][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2403.498760][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2403.525984][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2403.541097][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2403.550621][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2403.561000][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2403.704269][ T5145] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2403.910578][ T5145] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2403.924599][ T5145] usb 1-1: can't read configurations, error -61 [ 2404.034168][ T6128] usb 4-1: reset high-speed USB device number 110 using dummy_hcd [ 2404.085473][ T5145] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2404.145072][ T8615] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 2404.157918][ T8610] IPVS: stopping backup sync thread 8615 ... [ 2404.244322][ T6128] usb 4-1: device descriptor read/64, error -32 [ 2404.298006][ T5145] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2404.319214][ C1] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 2404.344625][ T5145] usb 1-1: can't read configurations, error -61 [ 2404.357186][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 2404.374820][ T5145] usb usb1-port1: attempt power cycle [ 2404.406572][ T8620] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2404.534367][ T6128] usb 4-1: reset high-speed USB device number 110 using dummy_hcd [ 2404.552700][ T5155] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2404.734650][ T6128] usb 4-1: device descriptor read/64, error -32 [ 2404.746622][ T5155] usb 5-1: device descriptor read/64, error -71 [ 2404.804303][ T5145] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2404.849837][ T5145] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2404.880293][ T5145] usb 1-1: can't read configurations, error -61 [ 2404.917119][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 2404.942997][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 2404.962441][ T8607] bridge_slave_0: entered allmulticast mode [ 2404.978390][ T8607] bridge_slave_0: entered promiscuous mode [ 2405.000087][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2405.004303][ T6128] usb 4-1: reset high-speed USB device number 110 using dummy_hcd [ 2405.016480][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 2405.030203][ T8607] bridge_slave_1: entered allmulticast mode [ 2405.044840][ T5155] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2405.048712][ T8607] bridge_slave_1: entered promiscuous mode [ 2405.052637][ T5145] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2405.117791][ T5145] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2405.135307][ T5145] usb 1-1: can't read configurations, error -61 [ 2405.162634][ T5145] usb usb1-port1: unable to enumerate USB device [ 2405.224603][ T5155] usb 5-1: device descriptor read/64, error -71 [ 2405.241122][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2405.250988][ T8629] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2405.257590][ T8629] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2405.286523][ T8629] vhci_hcd vhci_hcd.0: Device attached [ 2405.304203][ T6128] usb 4-1: device not accepting address 110, error -71 [ 2405.311087][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2405.316996][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2405.344809][ T5155] usb usb5-port1: attempt power cycle [ 2405.389725][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2405.415253][ T8631] usbip_core: unknown command [ 2405.419997][ T8631] vhci_hcd: unknown pdu 1610612736 [ 2405.436960][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2405.446789][ T8631] usbip_core: unknown command [ 2405.458620][T13009] vhci_hcd: stop threads [ 2405.462923][T13009] vhci_hcd: release socket [ 2405.467005][ T8607] team0: Port device team_slave_0 added [ 2405.484277][ T5145] vhci_hcd: vhci_device speed not set [ 2405.500334][T13009] vhci_hcd: disconnect device [ 2405.505498][ T8607] team0: Port device team_slave_1 added [ 2405.564311][ T5145] usb 15-1: new full-speed USB device number 18 using vhci_hcd [ 2405.590686][ T5145] usb 15-1: enqueue for inactive port 0 [ 2405.598005][T26262] Bluetooth: hci2: command tx timeout [ 2405.637498][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2405.666490][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2405.699776][ T5145] vhci_hcd: vhci_device speed not set [ 2405.722673][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2405.743356][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2405.754504][ T5155] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2405.759173][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2405.804761][ T5155] usb 5-1: device descriptor read/8, error -71 [ 2405.807039][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2405.973843][ T8607] hsr_slave_0: entered promiscuous mode [ 2405.999436][ T8607] hsr_slave_1: entered promiscuous mode [ 2406.009018][ T6128] usb 4-1: reset high-speed USB device number 110 using dummy_hcd [ 2406.009148][ T8607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2406.037960][ T8607] Cannot create hsr debugfs directory [ 2406.069151][ T6128] usb 4-1: device firmware changed [ 2406.084255][ T5155] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2406.104585][ T5146] usb 4-1: USB disconnect, device number 110 [ 2406.135464][ T5155] usb 5-1: device descriptor read/8, error -71 [ 2406.265726][ T5155] usb usb5-port1: unable to enumerate USB device [ 2406.295022][ T5146] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2406.519008][ T5146] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2406.547784][ T5146] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2406.570190][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.578214][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.600926][ T5146] usb 4-1: New USB device found, idVendor=046d, idProduct=c13f, bcdDevice= 0.00 [ 2406.612251][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.624873][ T5146] usb 4-1: config 0 descriptor?? [ 2406.633960][ T5146] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2406.653354][ T8607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.787361][ T8607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.836380][ T4743] usb 4-1: USB disconnect, device number 111 [ 2406.894347][ T5150] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2407.006560][ T8607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.134253][ T5146] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2407.135749][ T5150] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2407.158448][ T8607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.164103][ T5150] usb 1-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2407.197143][ T5150] usb 1-1: Manufacturer: syz [ 2407.204567][ T5150] usb 1-1: config 0 descriptor?? [ 2407.212455][ T5150] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2407.236456][ T5150] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2407.325848][ T5146] usb 3-1: Using ep0 maxpacket: 16 [ 2407.352997][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 2407.397871][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 2407.420720][ T5146] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2407.443246][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2407.456779][ T8640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2407.467129][ T5146] usb 3-1: config 0 descriptor?? [ 2407.474647][ T8643] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2407.493775][ T8640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2407.543889][ T8607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2407.580403][ T8607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2407.625721][ T8640] netlink: 'syz.0.7459': attribute type 4 has an invalid length. [ 2407.657482][ T8640] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7459'. [ 2407.675486][T26262] Bluetooth: hci2: command tx timeout [ 2407.721377][ T8607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2407.784864][ T8607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2407.932481][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7462'. [ 2407.947202][ T8642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1847362798 (236462438144 ns) > initial count (117901241344 ns). Using initial count to start timer. [ 2408.044110][ T5150] usb 1-1: USB disconnect, device number 33 [ 2408.075910][ T5150] ftdi_sio 1-1:0.0: device disconnected [ 2408.220162][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2408.253417][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2408.261265][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2408.298537][ T5146] hid (null): invalid report_size 16341 [ 2408.353069][ T5146] hid (null): unknown global tag 0xe [ 2408.370143][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 2408.376984][ T5146] hid (null): unknown global tag 0xd [ 2408.377013][ T5146] hid (null): unknown global tag 0xe [ 2408.377032][ T5146] hid (null): invalid report_count -107485465 [ 2408.377084][ T5146] hid (null): invalid report_size 16341 [ 2408.377104][ T5146] hid (null): unknown global tag 0xe [ 2408.377167][ T5146] hid (null): unknown global tag 0xd [ 2408.378005][ T5146] hid (null): unknown global tag 0xd [ 2408.441661][ T5146] hid (null): unknown global tag 0xe [ 2408.459850][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 2408.467094][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2408.467961][ T5146] hid (null): invalid report_count -107485465 [ 2408.492225][ T5146] hid (null): invalid report_size 16341 [ 2408.500968][ T5146] hid-generic 0003:0158:0100.00A1: unknown main item tag 0x1 [ 2408.516028][ T5146] hid-generic 0003:0158:0100.00A1: unexpected long global item [ 2408.543567][ T5146] hid-generic 0003:0158:0100.00A1: probe with driver hid-generic failed with error -22 [ 2408.626788][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 2408.634101][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2408.688018][ T5146] usb 3-1: USB disconnect, device number 28 [ 2408.882784][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7464'. [ 2408.914805][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2408.986105][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.027754][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.054199][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.074726][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.091486][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.102379][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.128502][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.159320][ T8607] veth0_vlan: entered promiscuous mode [ 2409.168849][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.197503][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.216267][ T8607] veth1_vlan: entered promiscuous mode [ 2409.222645][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.245810][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.293875][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.312297][ T3228] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2409.333018][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7463'. [ 2409.335199][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.403184][ T8607] veth0_macvtap: entered promiscuous mode [ 2409.409495][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.446504][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.485873][ T8607] veth1_macvtap: entered promiscuous mode [ 2409.491833][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.524801][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.532282][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.550978][ T3228] usb 4-1: config 128 has no interfaces? [ 2409.574496][ T3228] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2409.594764][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.614282][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.621863][ T3228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.644209][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.654119][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.695593][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2409.700502][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.711353][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2409.714579][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.729382][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2409.741229][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2409.755853][ T53] Bluetooth: hci2: command tx timeout [ 2409.761900][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.761917][ T5101] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2409.777408][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2409.819373][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.824236][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.837217][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.855050][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.865220][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.887165][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.888550][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.937244][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.964374][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2409.974826][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.995078][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2410.008344][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.021876][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2410.034252][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2410.044543][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.064476][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2410.072135][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.085420][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2410.101007][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2410.109114][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.126657][ T4743] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 2410.135259][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.154397][ T4743] hid-generic 0000:0000:0000.00A2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2410.166091][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.202886][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2410.404862][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.434108][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.445401][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.464292][ T5146] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2410.476346][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.496184][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.514148][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.528552][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.539346][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.549551][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.560410][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.571412][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.583399][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.597990][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.611148][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.627491][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.644170][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.663214][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2410.671556][ T5146] usb 3-1: Using ep0 maxpacket: 32 [ 2410.699195][ T5146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2410.730969][ T5146] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2410.754497][ T5146] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ad.dc [ 2410.763624][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.773158][ T8607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.782217][ T8607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.793663][ T5146] usb 3-1: config 0 descriptor?? [ 2410.794158][ T5150] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2410.799811][ T8607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.820913][ T8607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.934904][T11392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.005500][ T5150] usb 5-1: Using ep0 maxpacket: 16 [ 2411.022262][ T5150] usb 5-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 2411.053948][ T5146] usb 3-1: string descriptor 0 read error: -71 [ 2411.066308][ T5146] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 2411.081230][ T5150] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2411.093880][ T5146] usb 3-1: qt2_attach - failed to power on unit: -71 [ 2411.101476][ T5150] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2411.110300][ T5146] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 2411.133047][ T5146] usb 3-1: USB disconnect, device number 29 [ 2411.142352][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.189473][T11392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.202028][ T5150] usb 5-1: config 0 descriptor?? [ 2411.390512][T11392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.638621][T11392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.695058][T26263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2411.703062][T26263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2411.775823][ T8679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1847362798 (236462438144 ns) > initial count (117901241344 ns). Using initial count to start timer. [ 2411.801370][ T5150] usb 4-1: USB disconnect, device number 112 [ 2411.835351][T26262] Bluetooth: hci2: command tx timeout [ 2411.840952][ T53] Bluetooth: hci7: command tx timeout [ 2411.967001][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7471'. [ 2411.981886][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2411.996002][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2412.172484][ T8672] chnl_net:caif_netlink_parms(): no params data found [ 2412.481588][T11392] bridge_slave_1: left allmulticast mode [ 2412.493640][T11392] bridge_slave_1: left promiscuous mode [ 2412.505031][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 2412.543605][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7449'. [ 2412.664733][T11392] bridge_slave_0: left allmulticast mode [ 2412.676827][T11392] bridge_slave_0: left promiscuous mode [ 2412.682676][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.792728][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7473'. [ 2412.909061][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2412.988365][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2413.171343][ T5145] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2413.407250][ T5145] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2413.426814][ T5145] usb 3-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2413.448603][ T5145] usb 3-1: Manufacturer: syz [ 2413.517764][ T5145] usb 3-1: config 0 descriptor?? [ 2413.558294][ T5145] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2413.586591][ T5145] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2413.763715][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2413.798288][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2413.914215][ T53] Bluetooth: hci7: command tx timeout [ 2414.324822][T11392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2414.344989][ T5150] usb 5-1: USB disconnect, device number 121 [ 2414.396225][T11392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2414.429911][T11392] bond0 (unregistering): Released all slaves [ 2414.526750][ T8705] netlink: 'syz.2.7474': attribute type 4 has an invalid length. [ 2414.534801][ T8705] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7474'. [ 2414.640238][ T5150] usb 3-1: USB disconnect, device number 30 [ 2414.652918][ T5150] ftdi_sio 3-1:0.0: device disconnected [ 2414.853470][ T8723] netlink: 'syz.3.7478': attribute type 2 has an invalid length. [ 2414.896286][ T8728] FAULT_INJECTION: forcing a failure. [ 2414.896286][ T8728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2414.933075][ T8728] CPU: 1 PID: 8728 Comm: syz.1.7477 Not tainted 6.10.0-rc7-syzkaller #0 [ 2414.941516][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2414.952081][ T8728] Call Trace: [ 2414.955422][ T8728] [ 2414.958379][ T8728] dump_stack_lvl+0x241/0x360 [ 2414.963114][ T8728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2414.968380][ T8728] ? __pfx__printk+0x10/0x10 [ 2414.973030][ T8728] ? __pfx_lock_release+0x10/0x10 [ 2414.978106][ T8728] ? __lock_acquire+0x1346/0x1fd0 [ 2414.983198][ T8728] should_fail_ex+0x3b0/0x4e0 [ 2414.987931][ T8728] _copy_from_user+0x2f/0xe0 [ 2414.992566][ T8728] kstrtouint_from_user+0xc6/0x190 [ 2414.997720][ T8728] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2415.003475][ T8728] ? __pfx_lock_acquire+0x10/0x10 [ 2415.008550][ T8728] proc_fail_nth_write+0xaa/0x2d0 [ 2415.013590][ T8728] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2415.019537][ T8728] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2415.025208][ T8728] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2415.030868][ T8728] vfs_write+0x2a2/0xc90 [ 2415.035146][ T8728] ? __pfx_vfs_write+0x10/0x10 [ 2415.039963][ T8728] ? __fget_files+0x29/0x470 [ 2415.044573][ T8728] ? __fget_files+0x3f6/0x470 [ 2415.049279][ T8728] ksys_write+0x1a0/0x2c0 [ 2415.053648][ T8728] ? __pfx_ksys_write+0x10/0x10 [ 2415.058545][ T8728] ? do_syscall_64+0x100/0x230 [ 2415.063339][ T8728] ? do_syscall_64+0xb6/0x230 [ 2415.068059][ T8728] do_syscall_64+0xf3/0x230 [ 2415.072584][ T8728] ? clear_bhb_loop+0x35/0x90 [ 2415.077276][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2415.083188][ T8728] RIP: 0033:0x7fab3237475f [ 2415.087619][ T8728] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 2415.107240][ T8728] RSP: 002b:00007fab330db040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2415.115680][ T8728] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab3237475f [ 2415.123665][ T8728] RDX: 0000000000000001 RSI: 00007fab330db0b0 RDI: 0000000000000006 [ 2415.131643][ T8728] RBP: 00007fab330db0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.139630][ T8728] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2415.147619][ T8728] R13: 000000000000006e R14: 00007fab32504110 R15: 00007fab3262fa78 [ 2415.155615][ T8728] [ 2415.158800][ C1] vkms_vblank_simulate: vblank timer overrun [ 2415.186477][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.216367][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.223735][ T8672] bridge_slave_0: entered allmulticast mode [ 2415.258677][ T8672] bridge_slave_0: entered promiscuous mode [ 2415.314146][ T5150] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2415.445586][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.452841][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.504398][ T8672] bridge_slave_1: entered allmulticast mode [ 2415.511951][ T5150] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 2415.529809][ T8672] bridge_slave_1: entered promiscuous mode [ 2415.535795][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.547967][ T5150] usb 4-1: config 0 descriptor?? [ 2415.560269][ T5150] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 2415.870013][ T8756] binder: 8755:8756 ioctl c018620c 200004c0 returned -22 [ 2415.903830][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2415.931597][ T8756] fuse: Bad value for 'fd' [ 2415.954366][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2415.994924][ T53] Bluetooth: hci7: command tx timeout [ 2416.103122][T11392] hsr_slave_0: left promiscuous mode [ 2416.111215][T11392] hsr_slave_1: left promiscuous mode [ 2416.127002][T11392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2416.156174][T11392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2416.179181][T11392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2416.197623][T11392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2416.238869][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7487'. [ 2416.254178][ T4743] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2416.255569][ T5155] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2416.326453][T11392] veth1_macvtap: left promiscuous mode [ 2416.344362][T11392] veth0_macvtap: left promiscuous mode [ 2416.373435][T11392] veth1_vlan: left promiscuous mode [ 2416.379227][T11392] veth0_vlan: left promiscuous mode [ 2416.466905][ T4743] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2416.504792][ T5155] usb 5-1: Using ep0 maxpacket: 8 [ 2416.512516][ T5155] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2416.552189][ T4743] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 2416.561305][ T5155] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2416.597021][ T5155] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2416.608143][ T4743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2416.626922][ T5150] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 2416.640655][ T5155] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2416.653460][ T5150] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 2416.668465][ T4743] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 2416.706410][ T5155] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2416.710519][ T5150] usb 4-1: USB disconnect, device number 113 [ 2416.733262][ T4743] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 2416.759413][ T4743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2416.782500][ T5155] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2416.788029][ T4743] usb 3-1: SerialNumber: syz [ 2416.838237][ T4743] usb 3-1: config 0 descriptor?? [ 2416.853018][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.858615][ T8757] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2416.885721][ T4743] port100 3-1:0.0: NFC: Could not get supported command types [ 2417.120506][ T5150] usb 3-1: USB disconnect, device number 31 [ 2417.136940][ T5155] usb 5-1: usb_control_msg returned -32 [ 2417.142995][ T5155] usbtmc 5-1:16.0: can't read capabilities [ 2417.495545][ T8769] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 2417.967190][ T4743] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2418.074348][ T53] Bluetooth: hci7: command tx timeout [ 2418.214150][ T4743] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2418.223339][ T4743] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2418.244279][ T4743] usb 4-1: Manufacturer: syz [ 2418.287428][ T4743] usb 4-1: config 0 descriptor?? [ 2418.310359][ T4743] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2418.323535][ T4743] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2418.440717][ T5150] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2418.520396][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2418.538493][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2418.628668][T11392] team0 (unregistering): Port device team_slave_1 removed [ 2418.638276][ T5150] usb 3-1: Using ep0 maxpacket: 8 [ 2418.661208][ T5150] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 2418.671425][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2418.709880][ T5150] usb 3-1: config 0 descriptor?? [ 2418.737519][ T5150] usb 3-1: unknown interface protocol 0x3f, assuming v1 [ 2418.763989][ T5150] usb 3-1: cannot find UAC_HEADER [ 2418.846148][ T5150] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2418.900654][T11392] team0 (unregistering): Port device team_slave_0 removed [ 2418.915129][ T7980] udevd[7980]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2420.297959][ T8772] O3c: renamed from bridge_slave_0 (while UP) [ 2420.343041][ T8774] netlink: 'syz.3.7489': attribute type 4 has an invalid length. [ 2420.351324][ T8774] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7489'. [ 2420.397859][ T3228] usb 4-1: USB disconnect, device number 114 [ 2420.401459][ T8672] team0: Port device team_slave_0 added [ 2420.413112][ T3228] ftdi_sio 4-1:0.0: device disconnected [ 2420.435278][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7491'. [ 2420.462390][ T5146] usb 5-1: USB disconnect, device number 122 [ 2420.516605][ T8672] team0: Port device team_slave_1 added [ 2420.854923][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2420.891028][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2420.938072][ T8672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2420.983624][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2421.023668][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2421.066346][ C1] vkms_vblank_simulate: vblank timer overrun [ 2421.111265][ T8672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2421.371505][ T8672] hsr_slave_0: entered promiscuous mode [ 2421.399530][ T8672] hsr_slave_1: entered promiscuous mode [ 2421.427906][ T8672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2421.466675][ T6128] usb 3-1: USB disconnect, device number 32 [ 2421.473451][ T8672] Cannot create hsr debugfs directory [ 2422.103955][ T8822] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2422.110645][ T8822] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2422.153836][ T8822] vhci_hcd vhci_hcd.0: Device attached [ 2422.224424][ T6128] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2422.270318][ T8822] pim6reg: entered allmulticast mode [ 2422.323892][ T8823] usbip_core: unknown command [ 2422.329285][ T8823] vhci_hcd: unknown pdu 1610612736 [ 2422.344495][ T5150] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 2422.352924][ T8823] usbip_core: unknown command [ 2422.364235][ T3228] vhci_hcd: vhci_device speed not set [ 2422.383797][T11392] vhci_hcd: stop threads [ 2422.393777][T11392] vhci_hcd: release socket [ 2422.418276][T11392] vhci_hcd: disconnect device [ 2422.424164][ T6128] usb 5-1: Using ep0 maxpacket: 32 [ 2422.454192][ T3228] usb 11-1: new full-speed USB device number 20 using vhci_hcd [ 2422.454859][ T6128] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 2422.484166][ T3228] usb 11-1: enqueue for inactive port 0 [ 2422.515628][ T6128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2422.546059][ T6128] usb 5-1: config 0 descriptor?? [ 2422.561759][ T5150] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2422.572591][ T6128] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 2422.584501][ T3228] vhci_hcd: vhci_device speed not set [ 2422.594550][ T5150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.605370][ T6128] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 2422.630517][ T5150] usb 3-1: config 0 has no interface number 0 [ 2422.645679][ T6128] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 2422.647410][ T5150] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 2422.653490][ T6128] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 2422.692694][ T8836] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7500'. [ 2422.713689][ T6128] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 2422.722220][ T5150] usb 3-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2422.736986][ T6128] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 2422.754658][ T6128] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 2422.775344][ T5146] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2422.778110][ T5150] usb 3-1: New USB device found, idVendor=056e, idProduct=4005, bcdDevice=89.38 [ 2422.797823][ T6128] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 2422.804795][ T5150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.819593][ T5150] usb 3-1: Product: syz [ 2422.835823][ T5150] usb 3-1: Manufacturer: syz [ 2422.844415][ T5150] usb 3-1: SerialNumber: syz [ 2422.848440][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7500'. [ 2422.862098][ T5150] usb 3-1: config 0 descriptor?? [ 2422.865569][ T6128] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2422.897429][ T6128] usb 5-1: USB disconnect, device number 123 [ 2422.918517][ T6128] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2422.966121][ T6128] keyspan 5-1:0.0: device disconnected [ 2422.976447][ T5146] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.995508][ T5146] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2423.029065][ T5146] usb 2-1: New USB device found, idVendor=046d, idProduct=c13f, bcdDevice= 0.00 [ 2423.055187][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.081798][ T5146] usb 2-1: config 0 descriptor?? [ 2423.119299][ T5146] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2423.341439][ T5146] usb 2-1: USB disconnect, device number 113 [ 2423.770404][ T5150] pegasus 3-1:0.8: probe with driver pegasus failed with error -71 [ 2423.793523][ T5150] usb 3-1: USB disconnect, device number 33 [ 2423.807857][ T8672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2423.842930][ T8672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2423.867734][ T8672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2423.914864][ T8672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2424.252602][ T8672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2424.324970][ T5150] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2424.468862][ T8672] 8021q: adding VLAN 0 to HW filter on device team0 [ 2424.508842][T22816] bridge0: port 1(bridge_slave_0) entered blocking state [ 2424.516133][T22816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2424.542569][ T5150] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2424.563273][ T5150] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2424.590031][ T5150] usb 4-1: Manufacturer: syz [ 2424.617698][ T5150] usb 4-1: config 0 descriptor?? [ 2424.643546][T22816] bridge0: port 2(bridge_slave_1) entered blocking state [ 2424.650820][T22816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2424.666872][ T5150] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2424.690691][ T5150] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2424.912733][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2424.947516][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2425.004615][T11392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.318567][ T8860] netlink: 'syz.3.7503': attribute type 4 has an invalid length. [ 2425.378606][ T8860] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7503'. [ 2425.433242][T22272] usb 4-1: USB disconnect, device number 115 [ 2425.443755][T22272] ftdi_sio 4-1:0.0: device disconnected [ 2425.623683][T11392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.820231][T11392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.885035][T26262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2425.898702][T26262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2425.910295][T26262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2425.925960][T26262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2425.946275][T26262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2425.953978][T26262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2425.974908][ T8907] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 2425.976260][ T8906] IPVS: stopping backup sync thread 8907 ... [ 2426.155990][ T8911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7510'. [ 2426.186516][T11392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.319636][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7510'. [ 2426.400603][ T8672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2426.681630][ T8924] bridge0: port 3(batadv0) entered blocking state [ 2426.712523][ T8924] bridge0: port 3(batadv0) entered disabled state [ 2426.731051][ T8924] batadv0: entered allmulticast mode [ 2426.756415][ T8924] batadv0: entered promiscuous mode [ 2426.795257][ T8924] bridge0: port 3(batadv0) entered blocking state [ 2426.801950][ T8924] bridge0: port 3(batadv0) entered forwarding state [ 2427.151411][ T8926] netlink: 'syz.4.7511': attribute type 10 has an invalid length. [ 2427.244285][T13009] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2427.248405][ T8926] team0: Port device netdevsim0 added [ 2427.255145][T13009] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2427.708888][T29817] hid-generic 0000:0000:0000.00A3: unknown main item tag 0x0 [ 2427.736629][T11392] bridge_slave_1: left allmulticast mode [ 2427.755807][T11392] bridge_slave_1: left promiscuous mode [ 2427.761634][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 2427.770038][T29817] hid-generic 0000:0000:0000.00A3: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2427.827902][T11392] O3c: left allmulticast mode [ 2427.869398][T11392] O3c: left promiscuous mode [ 2427.887835][T11392] bridge0: port 1(O3c) entered disabled state [ 2427.994525][T26262] Bluetooth: hci3: command tx timeout [ 2428.204110][ T5146] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2428.337333][T22816] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2428.415605][ T5146] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2428.445045][ T5146] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2428.463583][ T5146] usb 4-1: Manufacturer: syz [ 2428.495142][ T5146] usb 4-1: config 0 descriptor?? [ 2428.507227][ T5146] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2428.523545][ T5146] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2428.544143][T22816] usb 2-1: Using ep0 maxpacket: 8 [ 2428.551635][T22816] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2428.569694][T22816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2428.600412][T22816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2428.620930][T22816] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2428.644340][T22816] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2428.663783][T22816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.728402][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2428.745640][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2428.882156][T22816] usb 2-1: GET_CAPABILITIES returned 0 [ 2428.889924][T22816] usbtmc 2-1:16.0: can't read capabilities [ 2429.113980][T11392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2429.132224][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2429.157181][T11392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2429.168482][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2429.182258][T11392] bond0 (unregistering): Released all slaves [ 2429.200575][T29817] usb 2-1: USB disconnect, device number 114 [ 2429.320310][ T8959] netlink: 'syz.3.7519': attribute type 4 has an invalid length. [ 2429.349712][ T8959] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7519'. [ 2429.372920][ T8672] veth0_vlan: entered promiscuous mode [ 2429.385707][T22272] usb 4-1: USB disconnect, device number 116 [ 2429.392992][T22272] ftdi_sio 4-1:0.0: device disconnected [ 2429.521556][ T8908] chnl_net:caif_netlink_parms(): no params data found [ 2429.887834][ T8672] veth1_vlan: entered promiscuous mode [ 2430.016316][T11392] hsr_slave_0: left promiscuous mode [ 2430.046989][T11392] hsr_slave_1: left promiscuous mode [ 2430.070943][T11392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2430.079649][T26262] Bluetooth: hci3: command tx timeout [ 2430.092644][T11392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2430.102198][T11392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2430.132498][ T8983] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7522'. [ 2430.150397][T11392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2430.286466][T11392] veth1_macvtap: left promiscuous mode [ 2430.292250][T11392] veth0_macvtap: left promiscuous mode [ 2430.306715][T11392] veth1_vlan: left promiscuous mode [ 2430.312117][T11392] veth0_vlan: left promiscuous mode [ 2430.327985][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7522'. [ 2431.302258][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7524'. [ 2432.023981][T11392] team0 (unregistering): Port device team_slave_1 removed [ 2432.156911][T26262] Bluetooth: hci3: command tx timeout [ 2432.179089][T11392] team0 (unregistering): Port device team_slave_0 removed [ 2433.469231][ T8996] netlink: 'syz.1.7523': attribute type 21 has an invalid length. [ 2433.510395][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.534645][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.557682][ T8908] bridge_slave_0: entered allmulticast mode [ 2433.574111][ T8908] bridge_slave_0: entered promiscuous mode [ 2433.642273][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.668131][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.694378][ T8908] bridge_slave_1: entered allmulticast mode [ 2433.711547][ T8908] bridge_slave_1: entered promiscuous mode [ 2433.897620][ T8908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.954947][ T8908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2434.126053][ T8908] team0: Port device team_slave_0 added [ 2434.134451][ T8672] veth0_macvtap: entered promiscuous mode [ 2434.158811][ T8908] team0: Port device team_slave_1 added [ 2434.216462][ T8672] veth1_macvtap: entered promiscuous mode [ 2434.242325][T26262] Bluetooth: hci3: command tx timeout [ 2434.412221][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2434.438958][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.477917][ T8908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2434.512098][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2434.519341][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.559616][ T8908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2434.607898][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.627192][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.645253][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.665382][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.698557][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.714514][T22816] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2434.727095][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.744643][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.774583][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.798769][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.820108][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.845497][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.876549][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.904135][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2434.907530][T22816] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2434.924150][T22816] usb 2-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2434.932274][T22816] usb 2-1: Manufacturer: syz [ 2434.944638][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.984885][T22816] usb 2-1: config 0 descriptor?? [ 2434.992567][T22816] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2435.001080][ T9042] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7534'. [ 2435.009175][T22816] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2435.013127][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2435.133820][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.188369][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7534'. [ 2435.212404][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.234068][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.258508][ T9027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2435.274844][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.280367][ T9027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2435.320925][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.353118][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.389702][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.420296][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.463593][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.490410][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.508365][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.538864][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.569809][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.599236][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.648711][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2435.782307][ T9027] netlink: 'syz.1.7531': attribute type 4 has an invalid length. [ 2435.814236][ T9027] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7531'. [ 2435.871380][ T8672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2435.900381][ T8672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2435.900491][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7536'. [ 2435.912392][ T8672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2435.923042][ T6128] usb 2-1: USB disconnect, device number 115 [ 2435.945233][ T6128] ftdi_sio 2-1:0.0: device disconnected [ 2435.951636][ T8672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2435.966702][ T9056] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7535'. [ 2436.010139][ T8908] hsr_slave_0: entered promiscuous mode [ 2436.031514][ T8908] hsr_slave_1: entered promiscuous mode [ 2436.173590][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7535'. [ 2436.470232][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.506099][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.555554][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.563285][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.592475][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.613143][T13009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2436.628855][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.638650][T13009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2436.656006][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.684380][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.704135][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.742406][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.754275][T22272] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2436.780141][ T5150] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 2436.806267][ T5150] hid-generic 0000:0000:0000.00A4: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2436.827668][T11392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2436.844086][T11392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2436.882770][ T9073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2436.979731][T22272] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2437.016112][T22272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.035187][T26262] Bluetooth: hci6: Opcode 0x206a failed: -110 [ 2437.038581][ T53] Bluetooth: hci6: command 0x206a tx timeout [ 2437.068515][T22272] usb 4-1: Product: syz [ 2437.072777][T22272] usb 4-1: Manufacturer: syz [ 2437.085412][T22272] usb 4-1: SerialNumber: syz [ 2437.102071][T22272] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2437.125430][T29817] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2437.474192][ T9090] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 2437.474269][ T9088] IPVS: stopping backup sync thread 9090 ... [ 2438.464195][ T5155] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2438.648435][T29817] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2438.847409][ T5155] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 2438.847449][ T5155] usb 2-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 2438.847474][ T5155] usb 2-1: Manufacturer: syz [ 2438.850094][ T5155] usb 2-1: config 0 descriptor?? [ 2439.289088][ T5155] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2439.321543][ T9095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2439.489105][ T5155] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 2439.513076][ T9095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2444.480490][ T53] Bluetooth: hci6: command 0x206a tx timeout [ 2448.544440][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2448.557472][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2448.567703][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2448.583270][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2448.592624][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2448.604421][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2450.794519][ T53] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 2455.095553][ T9122] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2455.109877][ T9122] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2455.119726][ T9122] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2455.131370][ T9122] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2455.147618][ T9122] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2455.157619][ T9122] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2455.168874][ T9122] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2455.176914][ T9122] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2455.185409][ T9122] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2455.199730][ T9120] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2455.209459][ T9120] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2455.225357][ T9120] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2458.231168][ T9108] Bluetooth: hci8: Opcode 0x0c03 failed: -4 [ 2461.169457][ T9119] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2461.182761][ T9119] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2461.197799][ T9119] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2461.206782][ T9119] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2461.215159][ T9119] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2461.222635][ T9119] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2461.593982][ T9092] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2461.804175][ T9095] netlink: 'syz.1.7541': attribute type 4 has an invalid length. [ 2461.811992][ T9095] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7541'. [ 2462.407596][ T9119] Bluetooth: hci10: command tx timeout [ 2462.414823][T26262] Bluetooth: hci9: command tx timeout [ 2462.421834][T26262] Bluetooth: hci4: command tx timeout [ 2462.515664][ T9106] gretap0: refused to change device tx_queue_len [ 2462.544737][ T9106] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2463.367211][ T9119] Bluetooth: hci8: command tx timeout [ 2464.494314][ T9119] Bluetooth: hci10: command tx timeout [ 2464.499904][ T9119] Bluetooth: hci4: command tx timeout [ 2464.506203][T26262] Bluetooth: hci9: command tx timeout [ 2465.454103][ T9119] Bluetooth: hci8: command tx timeout [ 2466.565069][ T9123] Bluetooth: hci4: command tx timeout [ 2466.570575][ T9123] Bluetooth: hci9: command tx timeout [ 2466.576181][ T9119] Bluetooth: hci10: command tx timeout [ 2466.822475][ T5146] usb 2-1: USB disconnect, device number 116 [ 2466.864720][ T5146] ftdi_sio 2-1:0.0: device disconnected [ 2467.524409][ T9123] Bluetooth: hci8: command tx timeout [ 2468.011471][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.017993][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.654180][ T9123] Bluetooth: hci9: command tx timeout [ 2468.659672][ T9123] Bluetooth: hci10: command tx timeout [ 2468.674334][T26262] Bluetooth: hci4: command tx timeout [ 2469.608710][ T9123] Bluetooth: hci8: command tx timeout [ 2470.043086][ T1282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2470.662234][ T8908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2470.919525][ T8908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2471.160382][ T8908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2471.743594][ T8908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2472.521676][ T1282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2472.813015][ T9133] chnl_net:caif_netlink_parms(): no params data found [ 2472.911193][ T9111] chnl_net:caif_netlink_parms(): no params data found [ 2473.080225][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 2475.822339][ T1282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2476.124475][ T9126] chnl_net:caif_netlink_parms(): no params data found [ 2486.738821][ T9119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2486.751927][ T9119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2486.762006][ T9119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2486.772340][ T9119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2486.780781][ T9119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2486.789865][ T9119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2488.884296][ T9119] Bluetooth: hci0: command tx timeout [ 2490.985434][ T9119] Bluetooth: hci0: command tx timeout [ 2493.044238][ T9119] Bluetooth: hci0: command tx timeout [ 2495.124363][ T9119] Bluetooth: hci0: command tx timeout [ 2510.135859][ T9123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2510.151429][ T9123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2510.161084][ T9123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2510.170775][ T9123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2510.182736][ T9123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2510.191103][ T9123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2510.228501][ T9123] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2510.249698][ T9123] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2510.259477][ T9123] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2510.289034][ T9123] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2510.297302][ T9123] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2510.305606][ T9123] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2511.180682][ T1282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2511.808437][ T9119] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2511.832700][ T9119] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2511.855742][ T9119] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2511.864773][ T9119] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2511.884329][ T9119] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2511.892491][ T9119] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2512.321478][ T9126] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 2512.325416][ T9119] Bluetooth: hci2: command tx timeout [ 2513.004129][ T9119] Bluetooth: hci11: command tx timeout [ 2514.004507][ T9119] Bluetooth: hci12: command tx timeout [ 2514.404463][ T9119] Bluetooth: hci2: command tx timeout [ 2515.044296][ T9119] Bluetooth: hci11: command tx timeout [ 2515.812511][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 2515.871945][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 2515.917178][ T9133] bridge_slave_0: entered allmulticast mode [ 2515.971134][ T9133] bridge_slave_0: entered promiscuous mode [ 2516.047009][ T9133] bridge0: port 2(bridge_slave_1) entered blocking state [ 2516.104165][ T9119] Bluetooth: hci12: command tx timeout [ 2516.124693][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 2516.132068][ T9133] bridge_slave_1: entered allmulticast mode [ 2516.209111][ T9133] bridge_slave_1: entered promiscuous mode [ 2516.484652][ T9119] Bluetooth: hci2: command tx timeout [ 2517.124919][ T9119] Bluetooth: hci11: command tx timeout [ 2518.164526][ T9119] Bluetooth: hci12: command tx timeout [ 2518.567037][ T9119] Bluetooth: hci2: command tx timeout [ 2519.210145][ T9123] Bluetooth: hci11: command tx timeout [ 2520.244602][ T9119] Bluetooth: hci12: command tx timeout [ 2521.573384][ T9123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2521.594252][ T9123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2521.609862][ T9123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2521.618447][ T9123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2521.628050][ T9123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2521.637777][ T9123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2523.764194][ T9123] Bluetooth: hci3: command tx timeout [ 2525.232267][ T9133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2525.844229][ T9123] Bluetooth: hci3: command tx timeout [ 2526.738708][ T1282] bridge_slave_1: left allmulticast mode [ 2526.769700][ T1282] bridge_slave_1: left promiscuous mode [ 2526.792014][ T1282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2527.185505][ T1282] bridge_slave_0: left allmulticast mode [ 2527.191245][ T1282] bridge_slave_0: left promiscuous mode [ 2527.235170][ T1282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2527.924241][ T9123] Bluetooth: hci3: command tx timeout [ 2529.451216][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.457964][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.005358][ T9123] Bluetooth: hci3: command tx timeout [ 2536.647815][ T9119] Bluetooth: hci7: command 0x0406 tx timeout [ 2541.534703][ T1282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2541.931103][ T1282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2542.254911][ T1282] bond0 (unregistering): Released all slaves [ 2543.790790][ T9221] chnl_net:caif_netlink_parms(): no params data found [ 2543.827262][ T9230] chnl_net:caif_netlink_parms(): no params data found [ 2544.449255][ T9232] chnl_net:caif_netlink_parms(): no params data found [ 2545.000652][ T9236] chnl_net:caif_netlink_parms(): no params data found [ 2545.511794][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state [ 2545.537403][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 2545.568871][ T9221] bridge_slave_0: entered allmulticast mode [ 2545.598319][ T9221] bridge_slave_0: entered promiscuous mode [ 2546.469334][ T9244] chnl_net:caif_netlink_parms(): no params data found [ 2546.558400][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.584215][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 2546.614373][ T9221] bridge_slave_1: entered allmulticast mode [ 2546.622222][ T9221] bridge_slave_1: entered promiscuous mode [ 2546.704173][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state [ 2546.711377][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state [ 2546.749905][ T9230] bridge_slave_0: entered allmulticast mode [ 2546.779926][ T9230] bridge_slave_0: entered promiscuous mode [ 2546.807337][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.824162][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state [ 2546.834730][ T9230] bridge_slave_1: entered allmulticast mode [ 2546.856095][ T9230] bridge_slave_1: entered promiscuous mode [ 2547.971803][ T9119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2547.984057][ T9119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2547.994467][ T9119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2548.014314][ T9119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2548.025252][ T9119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2548.040139][ T9119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2548.597887][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2548.671099][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2550.154798][ T9123] Bluetooth: hci4: command tx timeout [ 2550.779741][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.814310][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 2550.824545][ T9232] bridge_slave_0: entered allmulticast mode [ 2550.845877][ T9232] bridge_slave_0: entered promiscuous mode [ 2550.875851][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 2550.883072][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 2550.934369][ T9232] bridge_slave_1: entered allmulticast mode [ 2550.977418][ T9232] bridge_slave_1: entered promiscuous mode [ 2551.366629][ T9230] team0: Port device team_slave_0 added [ 2552.245043][ T9123] Bluetooth: hci4: command tx timeout [ 2552.698183][ T9230] team0: Port device team_slave_1 added [ 2553.084666][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.097471][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.127603][ T9236] bridge_slave_0: entered allmulticast mode [ 2553.156835][ T9236] bridge_slave_0: entered promiscuous mode [ 2553.176177][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.183379][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.236721][ T9236] bridge_slave_1: entered allmulticast mode [ 2553.256320][ T9236] bridge_slave_1: entered promiscuous mode [ 2553.297092][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2554.324626][ T9123] Bluetooth: hci4: command tx timeout [ 2554.748737][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2555.615236][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2555.622249][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2555.734138][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2555.774486][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2555.781598][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2555.883397][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2556.299956][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2556.408191][ T9123] Bluetooth: hci4: command tx timeout [ 2556.706291][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 2556.713509][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 2556.774387][ T9244] bridge_slave_0: entered allmulticast mode [ 2556.794170][ T9244] bridge_slave_0: entered promiscuous mode [ 2556.806402][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 2556.813611][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 2556.841498][ T9244] bridge_slave_1: entered allmulticast mode [ 2556.895907][ T9244] bridge_slave_1: entered promiscuous mode [ 2556.958541][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2557.227116][ T9232] team0: Port device team_slave_0 added [ 2557.257583][ T9232] team0: Port device team_slave_1 added [ 2558.735622][ T9230] hsr_slave_0: entered promiscuous mode [ 2558.793548][ T9230] hsr_slave_1: entered promiscuous mode [ 2558.899715][ T9230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2558.915578][ T9230] Cannot create hsr debugfs directory [ 2558.985956][ T9236] team0: Port device team_slave_0 added [ 2559.329712][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2559.378990][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2560.866592][ T9236] team0: Port device team_slave_1 added [ 2561.058004][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2561.074003][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2561.153284][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2562.093331][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2562.125294][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2562.194207][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2562.294995][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2562.302069][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2562.434021][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2562.536338][ T9244] team0: Port device team_slave_0 added [ 2562.637140][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2562.670852][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2562.784168][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2563.691140][ T9244] team0: Port device team_slave_1 added [ 2563.738554][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 2564.337158][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2564.365655][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2564.423482][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2564.703148][ T9232] hsr_slave_0: entered promiscuous mode [ 2564.738682][ T9232] hsr_slave_1: entered promiscuous mode [ 2564.815912][ T9232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2564.823826][ T9232] Cannot create hsr debugfs directory [ 2565.132396][ T1282] hsr_slave_0: left promiscuous mode [ 2565.258933][ T1282] hsr_slave_1: left promiscuous mode [ 2565.590127][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2565.622715][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2565.673238][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2565.704121][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2565.874183][ T1282] veth1_macvtap: left promiscuous mode [ 2565.879854][ T1282] veth0_macvtap: left promiscuous mode [ 2565.914451][ T1282] veth1_vlan: left promiscuous mode [ 2565.919905][ T1282] veth0_vlan: left promiscuous mode [ 2566.899205][ T1282] pim6reg (unregistering): left allmulticast mode [ 2570.472894][ T9119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2570.494331][ T9119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2570.504999][ T9119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2570.515287][ T9119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2570.534231][ T9119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2570.541888][ T9119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2570.775607][ T9123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2570.828424][ T9123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2570.837869][ T9123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2570.872156][ T9123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2570.882455][ T9123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2570.890887][ T9123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2571.532464][ T1282] team0 (unregistering): Port device team_slave_1 removed [ 2572.094925][ T1282] team0 (unregistering): Port device team_slave_0 removed [ 2572.648893][ T9123] Bluetooth: hci0: command tx timeout [ 2572.864936][ T9119] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2572.883744][ T9119] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2572.894558][ T9119] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2572.912809][ T9119] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2572.920927][ T9119] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2572.928634][ T9119] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2572.982923][ T9123] Bluetooth: hci7: command tx timeout [ 2574.724119][ T9123] Bluetooth: hci0: command tx timeout [ 2575.055600][ T9123] Bluetooth: hci7: command tx timeout [ 2575.061220][ T9123] Bluetooth: hci8: command tx timeout [ 2576.813012][ T9123] Bluetooth: hci0: command tx timeout [ 2577.040544][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2577.064143][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2577.134085][ T9123] Bluetooth: hci8: command tx timeout [ 2577.139673][ T9123] Bluetooth: hci7: command tx timeout [ 2577.196648][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2578.884158][ T9123] Bluetooth: hci0: command tx timeout [ 2579.211542][ T9123] Bluetooth: hci7: command tx timeout [ 2579.217471][ T9119] Bluetooth: hci8: command tx timeout [ 2580.187431][ T9244] hsr_slave_0: entered promiscuous mode [ 2580.292939][ T9244] hsr_slave_1: entered promiscuous mode [ 2580.357191][ T9244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2580.384093][ T9244] Cannot create hsr debugfs directory [ 2580.615899][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 2580.623431][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 2580.654332][ T9306] bridge_slave_0: entered allmulticast mode [ 2580.684183][ T9306] bridge_slave_0: entered promiscuous mode [ 2580.972268][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 2581.024129][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 2581.031595][ T9306] bridge_slave_1: entered allmulticast mode [ 2581.063841][ T9306] bridge_slave_1: entered promiscuous mode [ 2581.285039][ T9123] Bluetooth: hci8: command tx timeout [ 2581.824564][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2581.953143][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2582.089628][ T9119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2582.104112][ T9119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2582.113828][ T9119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2582.148399][ T9119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2582.169443][ T9119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2582.178651][ T9119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2582.914264][ T9306] team0: Port device team_slave_0 added [ 2583.667427][ T9306] team0: Port device team_slave_1 added [ 2584.244570][ T9119] Bluetooth: hci2: command tx timeout [ 2584.574865][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2584.634044][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2584.737621][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2584.858733][ T9360] chnl_net:caif_netlink_parms(): no params data found [ 2584.900495][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2584.942276][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2585.014094][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2585.135559][ T9356] chnl_net:caif_netlink_parms(): no params data found [ 2586.090898][ T9363] chnl_net:caif_netlink_parms(): no params data found [ 2586.324529][ T9119] Bluetooth: hci2: command tx timeout [ 2586.363308][ T9306] hsr_slave_0: entered promiscuous mode [ 2586.419495][ T9306] hsr_slave_1: entered promiscuous mode [ 2586.551455][ T9306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2586.583703][ T9306] Cannot create hsr debugfs directory [ 2587.170882][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 2587.194181][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 2587.201597][ T9360] bridge_slave_0: entered allmulticast mode [ 2587.242603][ T9360] bridge_slave_0: entered promiscuous mode [ 2587.260903][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 2587.285543][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 2587.292955][ T9360] bridge_slave_1: entered allmulticast mode [ 2587.335983][ T9360] bridge_slave_1: entered promiscuous mode [ 2588.404348][ T9119] Bluetooth: hci2: command tx timeout [ 2588.634300][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.641510][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 2588.724810][ T9356] bridge_slave_0: entered allmulticast mode [ 2588.745829][ T9356] bridge_slave_0: entered promiscuous mode [ 2588.797263][ T9360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2588.867483][ T9360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2588.910804][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state [ 2588.946474][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 2588.953897][ T9356] bridge_slave_1: entered allmulticast mode [ 2588.983128][ T9356] bridge_slave_1: entered promiscuous mode [ 2589.667885][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2590.127638][ T9360] team0: Port device team_slave_0 added [ 2590.158851][ T9360] team0: Port device team_slave_1 added [ 2590.240269][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 2590.282908][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2590.484600][ T9119] Bluetooth: hci2: command tx timeout [ 2590.780964][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 2590.798461][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 2590.834556][ T9363] bridge_slave_0: entered allmulticast mode [ 2590.864197][ T9363] bridge_slave_0: entered promiscuous mode [ 2590.891727][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.898371][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.910635][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 2590.924088][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 2590.954303][ T9363] bridge_slave_1: entered allmulticast mode [ 2590.985583][ T9363] bridge_slave_1: entered promiscuous mode [ 2591.496772][ T9356] team0: Port device team_slave_0 added [ 2591.908924][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2591.944130][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2592.021647][ T9360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2592.608182][ T9356] team0: Port device team_slave_1 added [ 2592.680002][ T9363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2592.729741][ T9363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2592.771830][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2592.784311][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2592.877142][ T9360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2594.910644][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2594.947274][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2595.065352][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2595.166277][ T9363] team0: Port device team_slave_0 added [ 2595.468026][ T9360] hsr_slave_0: entered promiscuous mode [ 2595.497171][ T9360] hsr_slave_1: entered promiscuous mode [ 2595.711577][ T9360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2595.734140][ T9360] Cannot create hsr debugfs directory [ 2595.752171][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2595.780663][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2595.864141][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2595.912599][ T9363] team0: Port device team_slave_1 added [ 2597.485258][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2597.492278][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2597.574041][ T9363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2598.054984][ T1282] ------------[ cut here ]------------ [ 2598.061414][ T1282] WARNING: CPU: 1 PID: 1282 at kernel/kthread.c:525 kthread_unpark+0x16b/0x210 [ 2598.071255][ T1282] Modules linked in: [ 2598.075237][ T1282] CPU: 1 PID: 1282 Comm: kworker/u8:8 Not tainted 6.10.0-rc7-syzkaller #0 [ 2598.083865][ T1282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2598.095203][ T1282] Workqueue: netns cleanup_net [ 2598.100037][ T1282] RIP: 0010:kthread_unpark+0x16b/0x210 [ 2598.106389][ T1282] Code: 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 93 00 00 00 41 80 4d 03 04 4c 89 e7 48 8b 34 24 e8 dd 23 2e 0a eb 09 e8 06 87 33 00 90 <0f> 0b 90 48 89 ef be 08 00 00 00 e8 b5 3e 99 00 f0 80 65 00 fb 4c [ 2598.126918][ T1282] RSP: 0018:ffffc90004727760 EFLAGS: 00010293 [ 2598.133039][ T1282] RAX: ffffffff8162a0aa RBX: 0000000000000000 RCX: ffff888023570000 [ 2598.141189][ T1282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2598.149393][ T1282] RBP: ffff88802c68d400 R08: ffffffff8162a037 R09: 1ffffffff25f4ecd [ 2598.158341][ T1282] R10: dffffc0000000000 R11: fffffbfff25f4ece R12: 0000000000000000 [ 2598.166716][ T1282] R13: ffff88801fbf002c R14: 1ffff11003f7e005 R15: ffff88801fbf0000 [ 2598.174898][ T1282] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 2598.183871][ T1282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2598.190570][ T1282] CR2: 00007f7a790ae649 CR3: 0000000070592000 CR4: 00000000003506f0 [ 2598.199662][ T1282] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 2598.208504][ T1282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2598.216569][ T1282] Call Trace: [ 2598.219920][ T1282] [ 2598.222883][ T1282] ? __warn+0x163/0x4e0 [ 2598.227401][ T1282] ? kthread_unpark+0x16b/0x210 [ 2598.232299][ T1282] ? report_bug+0x2b3/0x500 [ 2598.236917][ T1282] ? kthread_unpark+0x16b/0x210 [ 2598.241836][ T1282] ? handle_bug+0x3e/0x70 [ 2598.246261][ T1282] ? exc_invalid_op+0x1a/0x50 [ 2598.250988][ T1282] ? asm_exc_invalid_op+0x1a/0x20 [ 2598.256213][ T1282] ? kthread_unpark+0xf7/0x210 [ 2598.261037][ T1282] ? kthread_unpark+0x16a/0x210 [ 2598.266009][ T1282] ? kthread_unpark+0x16b/0x210 [ 2598.270915][ T1282] kthread_stop+0x17a/0x630 [ 2598.275540][ T1282] destroy_workqueue+0x136/0xc40 [ 2598.280546][ T1282] ? destroy_workqueue+0x86f/0xc40 [ 2598.285815][ T1282] wg_destruct+0x1e2/0x2e0 [ 2598.290277][ T1282] ? __pfx_wg_destruct+0x10/0x10 [ 2598.295320][ T1282] netdev_run_todo+0xe1a/0x1000 [ 2598.301073][ T1282] ? __pfx_netdev_run_todo+0x10/0x10 [ 2598.307114][ T1282] ? unregister_netdevice_queue+0x26b/0x370 [ 2598.313078][ T1282] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2598.320628][ T1282] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 2598.326888][ T1282] default_device_exit_batch+0xa14/0xa90 [ 2598.332590][ T1282] ? __pfx___might_resched+0x10/0x10 [ 2598.338019][ T1282] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2598.344263][ T1282] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2598.349772][ T1282] ? cfg802154_pernet_exit+0xc3/0xe0 [ 2598.355196][ T1282] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2598.361403][ T1282] cleanup_net+0x89d/0xcc0 [ 2598.365946][ T1282] ? __pfx_cleanup_net+0x10/0x10 [ 2598.370942][ T1282] ? process_scheduled_works+0x945/0x1830 [ 2598.376768][ T1282] process_scheduled_works+0xa2c/0x1830 [ 2598.382392][ T1282] ? __pfx_process_scheduled_works+0x10/0x10 [ 2598.388519][ T1282] ? assign_work+0x364/0x3d0 [ 2598.393157][ T1282] worker_thread+0x86d/0xd50 [ 2598.397850][ T1282] ? __kthread_parkme+0x169/0x1d0 [ 2598.403779][ T1282] ? __pfx_worker_thread+0x10/0x10 [ 2598.410122][ T1282] kthread+0x2f0/0x390 [ 2598.414283][ T1282] ? __pfx_worker_thread+0x10/0x10 [ 2598.419433][ T1282] ? __pfx_kthread+0x10/0x10 [ 2598.424106][ T1282] ret_from_fork+0x4b/0x80 [ 2598.428564][ T1282] ? __pfx_kthread+0x10/0x10 [ 2598.433193][ T1282] ret_from_fork_asm+0x1a/0x30 [ 2598.438112][ T1282] [ 2598.441161][ T1282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2598.448464][ T1282] CPU: 1 PID: 1282 Comm: kworker/u8:8 Not tainted 6.10.0-rc7-syzkaller #0 [ 2598.457004][ T1282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2598.467094][ T1282] Workqueue: netns cleanup_net [ 2598.471899][ T1282] Call Trace: [ 2598.475209][ T1282] [ 2598.478163][ T1282] dump_stack_lvl+0x241/0x360 [ 2598.482889][ T1282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2598.488125][ T1282] ? __pfx__printk+0x10/0x10 [ 2598.492762][ T1282] ? vscnprintf+0x5d/0x90 [ 2598.497124][ T1282] panic+0x349/0x860 [ 2598.501060][ T1282] ? __warn+0x172/0x4e0 [ 2598.505255][ T1282] ? __pfx_panic+0x10/0x10 [ 2598.509720][ T1282] ? ret_from_fork_asm+0x1a/0x30 [ 2598.514705][ T1282] __warn+0x346/0x4e0 [ 2598.518725][ T1282] ? kthread_unpark+0x16b/0x210 [ 2598.523624][ T1282] report_bug+0x2b3/0x500 [ 2598.528004][ T1282] ? kthread_unpark+0x16b/0x210 [ 2598.532898][ T1282] handle_bug+0x3e/0x70 [ 2598.537117][ T1282] exc_invalid_op+0x1a/0x50 [ 2598.541665][ T1282] asm_exc_invalid_op+0x1a/0x20 [ 2598.546555][ T1282] RIP: 0010:kthread_unpark+0x16b/0x210 [ 2598.552063][ T1282] Code: 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 93 00 00 00 41 80 4d 03 04 4c 89 e7 48 8b 34 24 e8 dd 23 2e 0a eb 09 e8 06 87 33 00 90 <0f> 0b 90 48 89 ef be 08 00 00 00 e8 b5 3e 99 00 f0 80 65 00 fb 4c [ 2598.571708][ T1282] RSP: 0018:ffffc90004727760 EFLAGS: 00010293 [ 2598.578088][ T1282] RAX: ffffffff8162a0aa RBX: 0000000000000000 RCX: ffff888023570000 [ 2598.586098][ T1282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2598.594105][ T1282] RBP: ffff88802c68d400 R08: ffffffff8162a037 R09: 1ffffffff25f4ecd [ 2598.602116][ T1282] R10: dffffc0000000000 R11: fffffbfff25f4ece R12: 0000000000000000 [ 2598.610121][ T1282] R13: ffff88801fbf002c R14: 1ffff11003f7e005 R15: ffff88801fbf0000 [ 2598.618146][ T1282] ? kthread_unpark+0xf7/0x210 [ 2598.622951][ T1282] ? kthread_unpark+0x16a/0x210 [ 2598.627860][ T1282] kthread_stop+0x17a/0x630 [ 2598.632413][ T1282] destroy_workqueue+0x136/0xc40 [ 2598.637393][ T1282] ? destroy_workqueue+0x86f/0xc40 [ 2598.642547][ T1282] wg_destruct+0x1e2/0x2e0 [ 2598.647175][ T1282] ? __pfx_wg_destruct+0x10/0x10 [ 2598.652155][ T1282] netdev_run_todo+0xe1a/0x1000 [ 2598.657059][ T1282] ? __pfx_netdev_run_todo+0x10/0x10 [ 2598.662379][ T1282] ? unregister_netdevice_queue+0x26b/0x370 [ 2598.668334][ T1282] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2598.674614][ T1282] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 2598.680852][ T1282] default_device_exit_batch+0xa14/0xa90 [ 2598.687069][ T1282] ? __pfx___might_resched+0x10/0x10 [ 2598.692401][ T1282] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2598.698604][ T1282] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2598.704112][ T1282] ? cfg802154_pernet_exit+0xc3/0xe0 [ 2598.709434][ T1282] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2598.715663][ T1282] cleanup_net+0x89d/0xcc0 [ 2598.720122][ T1282] ? __pfx_cleanup_net+0x10/0x10 [ 2598.725108][ T1282] ? process_scheduled_works+0x945/0x1830 [ 2598.730859][ T1282] process_scheduled_works+0xa2c/0x1830 [ 2598.736472][ T1282] ? __pfx_process_scheduled_works+0x10/0x10 [ 2598.742500][ T1282] ? assign_work+0x364/0x3d0 [ 2598.747131][ T1282] worker_thread+0x86d/0xd50 [ 2598.751773][ T1282] ? __kthread_parkme+0x169/0x1d0 [ 2598.756836][ T1282] ? __pfx_worker_thread+0x10/0x10 [ 2598.761984][ T1282] kthread+0x2f0/0x390 [ 2598.766091][ T1282] ? __pfx_worker_thread+0x10/0x10 [ 2598.771232][ T1282] ? __pfx_kthread+0x10/0x10 [ 2598.775859][ T1282] ret_from_fork+0x4b/0x80 [ 2598.780313][ T1282] ? __pfx_kthread+0x10/0x10 [ 2598.784959][ T1282] ret_from_fork_asm+0x1a/0x30 [ 2598.789891][ T1282] [ 2598.796005][ T1282] Kernel Offset: disabled [ 2598.800520][ T1282] Rebooting in 86400 seconds..