last executing test programs: 29.440310001s ago: executing program 0 (id=664): r0 = socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0x5, 0x6) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c00031000", @ANYRESHEX], 0xf) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad5684c5820fae9d6d6a3292ea54c7beef915d564c90c200", 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r3) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x5, 0x19, "ef"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}}, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f00000013c0)=[{&(0x7f0000000600)={0x27, 0x0, 0x0, 0x2, 0xd1, 0x5, "4d47c60f432d69a678e890195310064d9ac5b9df8f9d7946acf41f4f238f16d3272ed4dd82684694d2cb89f2c1ed276cb05a3410e76f1633c4bf51a4dc65c9", 0x23}, 0x60, &(0x7f0000000940)=[{&(0x7f0000000680)="964c6837870d30d4fdf4033d8bb5e9e427e6e863dd1f3245ce329f0a4732b5b19a80b553b512d08cde682db50e1f6a28a6c0d29853e3ce57e26a74b7153bef448aba4cd5327c1d5fc3ba7020820ce2123dcef89b60b70bf3101b3d6e28c048db1f8b354936dafac0b093580465809699b95b625fd6899c25aad3ebee2db214147ecc9bb8a4c60d0de67895b568d57dd92f591c38639aa4", 0x97}, {&(0x7f0000000740)="1e086feea0a12ddbc72ce3d49dad42930600f6cfbde9041fca0f9b466bddcc45401fd487cb9e4d0fe8895c199b115814a2fb5a59b7e219e37b0608651f0a5065487a8fee5cdcaaaa5d1695a90af91c6ba9a391ea21c03d96311d06083d66814d", 0x60}, {&(0x7f00000007c0)="33f9524333715735a1dfe2071f57f09ecd23a05d7210497c5c3e2aade64bd2fa4596e641700b0ad7533d55a7f7d0dc88d416c96b13d33b3131b90bd7e84d9b25ecdec5e5c96cffbd1e1e695cab51aec315e2622294e02fa79a83ff793d19cfc4a5632ef3666fe2e94d2bedeb3689494f37ef501462dcaacbbc0598d3ef07a417e038b711b9da81bdb06355add1c3e719165d26679c18d7395067a4", 0x9b}, {&(0x7f0000000880)="992e73d3a711abbea96c07c13a1c5701655adb74d85c5ccd52e432b7e1b89d2740706eac5e8dc4d0cefa399d6c57f10f3861", 0x32}, {&(0x7f00000008c0)="f7060e87ce9a9c6723002db5b9505f7d952449c17ee9207388b4c54cf7c8115e471722e7af74839207646bbc76d2383b51e01f31466d7fd9adbfd58eef09eac82fba", 0x42}], 0x5, &(0x7f00000009c0)={0xc8, 0x10c, 0x3, "b9b08217961621f80a3c84c518a639b53665ff22deff8111332a5f17705aa09fbb2c01fba8e28ced1bbf5763cfeaac2f6ac12e356b533cd664d7bab848c1ac79ae8acc683cd86f80f47c7aa584ae898a15dcc94c011c92fa208b41d17b04e98ad1cab692bd9c49e40001a516c48209df77e3512e658c0846c02188d823095ae8e0b4724a5456b02a5fe774b5a5108511760a461e6078fbd2555ac52926a3b7936391a5032cdef3677510a18cc0070765baf023a7"}, 0xc8, 0x801}, {&(0x7f0000000ac0)={0x27, r6, 0xffffffffffffffff, 0x2, 0x3, 0x5, "0881bb8b62ab069e8c8a187faddd41ad891be62302f7178e44349bbff2c99087cba398ad30ff0cea8fe528566e16a44e43dd8a5662c1ce4a9620356388f113", 0x15}, 0x60, &(0x7f0000001240)=[{&(0x7f0000000b40)="2ac7a9ba0898d8cea7cb23d70755dd1666ef9e532cc961bfd3d4a15e28eb4eb0267b68cb77b81e20a9be8834594fa558f295691d311c3061ccabd18c11740a6692093fb1d44f484fba0779e778d15f8ccf85d047fa4e712c23a584dd8c1a8eab", 0x60}, {&(0x7f0000000bc0)="6bf17694f2f96886f22094baca56ddcd5d5eff0dd7b45849ff11fe854717ae90c300c638b5375bb4a002ed7fc7fdf6b9f2c9e6fdb7181443fe97ef17c744098552805ecb8a91e5609e9df913b4ffe0", 0x4f}, {&(0x7f0000000c40)="5118434e0be8298abb824094cefc48a2698e53b71228349abbf2e504b83ce538c8d64317096d404c9d8929534c424c895722c8b895de688a5ff7acab2a67767487005aa05eaf4309396c356f4bda734a03dc46ba99fb07032623981ace06fd972acd15a005824e91a4fa32c8dce306f53dac229d1e828c04636837080ebe6c39d6c891f09e5f011be44d8d8c17f4849828b11194a3db9d6793c85861b56489fa2998a7e7e419155f274b0aa5aa42c10c213e1c778b30ad635520e455c433347783f6566cc51639f5b6d05197c3480d5dd30909", 0xd3}, {&(0x7f0000000d40)="75e53015f3e5c9bdb7a882ecaddf6144201b4130dd6e67cffc5958531dd2392438ab16c9b88a6304c978dab6e7aae6fa574ce92463b4d2ceecb8517d4c53354156b26ccc5a28b8902ea4608c15d911a205e8d09cc4178693cbbbda878e3f4ce96d9afa8f437d34ccf56bf97cba0cb94d35de27d0531f4f51ad5968756425fdb7d93a7bda32544cb7e3f4058f3ef1c03887921ca5d0", 0x95}, {&(0x7f0000000e00)="90187e4dd00cb793c7822c64edfc5864afaa8eebdc21a90812712cb9d74eac5c0149c42c2a53bee9f6225147d57fa028398f726a0d1497b13250fcf3f3200b706d22d2f73f730bbb216b3d3db2f943fe6e8b6ee011f018ea5999b1064760be8fabed96a4a015f4f96f889b0ec2e601e07a2a8d35d6b4274da6e9f0", 0x7b}, {&(0x7f0000000e80)="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", 0xfc}, {&(0x7f0000000f80)="d9db8579a2db9ec97a8fc4b53ab249f85e61ae74bb9f99b98bce6ea9e33c8573aaa4ffbbeb89e7fd02f2047a05731d17acc50e467936633974666acfd0bb584b3e8a908c00f5cf7ef33b121a846a2b99adc66f2413e28bf526b5adcde6244406028bced3b604d565dac7bbf697266a4b3851cdfe270a1e2ff49bc3a4d452558fa103eb8b767bbffff8b164d9ae6117e32791803abad9993258f320", 0x9b}, {&(0x7f0000001040)="4a19301c7cfc8ee07c00b1c2e893daf44fd4ec063410e78287635cbf35f0ba42bcf9b353637c3afeae44c93fdc3b6d0ac1db03d93c0978ccaaaae5df9731d2fe430a693db72085e5bff450d8bddc7a29536c5df38cf4829714b2273985161b75d937bbb220738dade17a53286b18669caba73b021515eb0de9b2602bc114b22ea56903cecfd047b2df0dc446efd9e720ee7eb7a8128b2acc9bd716ec4b9d2b0bba7ed53c70fbdd1ed7792d6ed6f36adf7e3f4c1f04ba1a35cc83a541e1fc0b1b1327be28587615e489404d6f729f49b524a744b156199e3c7b98bcf1770e2f", 0xdf}, {&(0x7f0000001140)="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", 0xfc}], 0x9, &(0x7f0000001300)={0x90, 0x10a, 0x9, "8bc06b7d814d71bbc2334ec1446f2d2fd5ca9d866b03d30b20a25e30cd201da29faf4789243cfcf3e60cc73558a2c5c4c06ed87f3789417c90b87d31338a865ae63ef3db6bb0e701eea4717b92669a84c294577fb63725b3f3e412efddaee6bbd0b7c930d30f0da053acd4ed6325056befe5b955ba01edd9e939a680f08c"}, 0x90, 0x480c4}], 0x2, 0x20000000) sendmsg$alg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="1fff5f7688922822be9332819f4d4c97ca8004c814b449d912e2c4e85c800ed9b49b9246aeec3bb7eb7aa6d946503b596748b116aa8ca1307bc0cc4e95c991166eb2c6429a094ef3be69a17d6f52c35ac60c30e98106778d35426b55ef88e5b6b42278ef3b3e52c646f0b1b3b9b6bb1f3fa958543ea4dd0775d4e5d2de8dd59d6531c554e192491f431d3e70537d5f76467f5ef297efd88a2c602b5d6cf712e9c22d5746c0d099073b3d35e4585a51a7e5d826d4a16b797c10649d4e06b2c91b7699d256adee9f5a98d4c4707e08", 0xce}, {&(0x7f0000000300)="253ec35bdea7f9b7e6409bb3222308b3c8086a083fa4c01ffa2ad74ee9848f2f8778f66f9a527a19444f4271cd4f4ea8d1462521dcbabe9f2585b18753d270c963b9d252865542ffa526c8cf63ac840d4fc2c0e32a93692efd552c8d5d0d9fa30eea226909d95cbf6b4b04ce680bf8b8f6bbeaa9b605396d1246417655aaf9e24b6fe43096400b12bce37ec4104e92b8", 0x90}, {&(0x7f00000001c0)="69315362b3f85ed26f8bab68ebf2741530", 0x11}, {&(0x7f0000000240)="f2059337d2ee97cb2129a38dee72", 0xe}, {&(0x7f00000003c0)="18e1d1b5271966202b1cc58e84e1cc7bcfd7734ce9675d758f6689a1c5dbc4e144d530fad8e957cebcb9e1fc5d49252274751d2262289d3c7d8de414b9785286dd7ba73b4a09e56e70debe5bbc22ab2d25ca3a9b04c8e73a0cffa773", 0x5c}], 0x5, &(0x7f00000004c0)=[@iv={0x80, 0x117, 0x2, 0x68, "06e2197a5e5ea323574ce028a0e94eed74e1f8256e0be10f2f073842517582862b9e123e744c137bb82078ff7f1f5dd9d9b98726effc2be9ab12531d4b3b81aca097686dba03780afd29377c658d33a42796ae3ea147526c8538ba2ff18ab74fe2430a5b94397078"}, @assoc={0x18, 0x117, 0x4, 0x8001}], 0x98, 0x95}, 0x40) 25.329933147s ago: executing program 4 (id=676): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) quotactl_fd$Q_SETQUOTA(r0, 0x0, r1, &(0x7f0000000240)={0x7fff, 0x8, 0x0, 0x0, 0xe8e, 0x5, 0xfffffffffffffffb, 0x3, 0x7}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x78ba66196777f893, {0x43}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000900), 0x8, 0x0) close(r4) timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) read$eventfd(r4, &(0x7f0000000080), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000002c0)={0x9, 0x6, {0x0}, {r1}, 0x0, 0xfffffffffffffff8}) syz_open_procfs(r5, &(0x7f0000000300)='fd/3\x00') io_submit(0x0, 0x0, &(0x7f0000004540)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r7 = fsopen(&(0x7f0000000380)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) mknodat$loop(r8, &(0x7f0000000200)='./file0\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) fchownat(r8, &(0x7f0000000040)='./file0\x00', 0x0, 0xee00, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x6, &(0x7f0000000080)=0x8000000000000001) syz_usb_connect(0x0, 0x3f, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x31, 0x9e, 0x23, 0x40, 0xcf3, 0x7010, 0x929f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x58, 0xe1, 0x50, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {}, {{0x9, 0x5, 0xc, 0x77dbce31b7444267}}]}}]}}]}}, 0x0) 23.384030017s ago: executing program 0 (id=680): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x0, 0x800, 0xfffffffe, 0x6c}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[r3]}, 0x1) 22.089705206s ago: executing program 0 (id=683): io_uring_setup(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33b2728e74c856a58ba74c80f4f4166ac51d720f507c2c205ef5a04370c77928dfde47e15d533060084d4fc271eab837367369218b1bfc59752696396f49c2f582", 0x183}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0b4c632602c810f1e6a6c98f0eaed1d795bc3495ea0b47ca0c44465d4b8b46d", 0x12b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 22.0391726s ago: executing program 4 (id=684): open(0x0, 0x0, 0x0) r0 = open(&(0x7f0000007f80)='./bus\x00', 0x143142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xfdef}}, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 21.099503795s ago: executing program 0 (id=686): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) 20.989580705s ago: executing program 4 (id=687): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000001b640)={0x2020}, 0x2020) 20.787843212s ago: executing program 0 (id=689): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r4, 0x7}, 0x14}}, 0x0) 20.470674041s ago: executing program 0 (id=691): r0 = socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0x5, 0x6) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c00031000", @ANYRESHEX], 0xf) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad5684c5820fae9d6d6a3292ea54c7beef915d564c90c200", 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r3) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x5, 0x19, "ef"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}}, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f00000013c0)=[{&(0x7f0000000600)={0x27, 0x0, 0x0, 0x2, 0xd1, 0x5, "4d47c60f432d69a678e890195310064d9ac5b9df8f9d7946acf41f4f238f16d3272ed4dd82684694d2cb89f2c1ed276cb05a3410e76f1633c4bf51a4dc65c9", 0x23}, 0x60, &(0x7f0000000940)=[{&(0x7f0000000680)="964c6837870d30d4fdf4033d8bb5e9e427e6e863dd1f3245ce329f0a4732b5b19a80b553b512d08cde682db50e1f6a28a6c0d29853e3ce57e26a74b7153bef448aba4cd5327c1d5fc3ba7020820ce2123dcef89b60b70bf3101b3d6e28c048db1f8b354936dafac0b093580465809699b95b625fd6899c25aad3ebee2db214147ecc9bb8a4c60d0de67895b568d57dd92f591c38639aa4", 0x97}, {&(0x7f0000000740)="1e086feea0a12ddbc72ce3d49dad42930600f6cfbde9041fca0f9b466bddcc45401fd487cb9e4d0fe8895c199b115814a2fb5a59b7e219e37b0608651f0a5065487a8fee5cdcaaaa5d1695a90af91c6ba9a391ea21c03d96311d06083d66814d", 0x60}, {&(0x7f00000007c0)="33f9524333715735a1dfe2071f57f09ecd23a05d7210497c5c3e2aade64bd2fa4596e641700b0ad7533d55a7f7d0dc88d416c96b13d33b3131b90bd7e84d9b25ecdec5e5c96cffbd1e1e695cab51aec315e2622294e02fa79a83ff793d19cfc4a5632ef3666fe2e94d2bedeb3689494f37ef501462dcaacbbc0598d3ef07a417e038b711b9da81bdb06355add1c3e719165d26679c18d7395067a4", 0x9b}, {&(0x7f0000000880)="992e73d3a711abbea96c07c13a1c5701655adb74d85c5ccd52e432b7e1b89d2740706eac5e8dc4d0cefa399d6c57f10f3861", 0x32}, {&(0x7f00000008c0)="f7060e87ce9a9c6723002db5b9505f7d952449c17ee9207388b4c54cf7c8115e471722e7af74839207646bbc76d2383b51e01f31466d7fd9adbfd58eef09eac82fba", 0x42}], 0x5, &(0x7f00000009c0)={0xc8, 0x10c, 0x3, "b9b08217961621f80a3c84c518a639b53665ff22deff8111332a5f17705aa09fbb2c01fba8e28ced1bbf5763cfeaac2f6ac12e356b533cd664d7bab848c1ac79ae8acc683cd86f80f47c7aa584ae898a15dcc94c011c92fa208b41d17b04e98ad1cab692bd9c49e40001a516c48209df77e3512e658c0846c02188d823095ae8e0b4724a5456b02a5fe774b5a5108511760a461e6078fbd2555ac52926a3b7936391a5032cdef3677510a18cc0070765baf023a7"}, 0xc8, 0x801}, {&(0x7f0000000ac0)={0x27, r6, 0xffffffffffffffff, 0x2, 0x3, 0x5, "0881bb8b62ab069e8c8a187faddd41ad891be62302f7178e44349bbff2c99087cba398ad30ff0cea8fe528566e16a44e43dd8a5662c1ce4a9620356388f113", 0x15}, 0x60, &(0x7f0000001240)=[{&(0x7f0000000b40)="2ac7a9ba0898d8cea7cb23d70755dd1666ef9e532cc961bfd3d4a15e28eb4eb0267b68cb77b81e20a9be8834594fa558f295691d311c3061ccabd18c11740a6692093fb1d44f484fba0779e778d15f8ccf85d047fa4e712c23a584dd8c1a8eab", 0x60}, {&(0x7f0000000bc0)="6bf17694f2f96886f22094baca56ddcd5d5eff0dd7b45849ff11fe854717ae90c300c638b5375bb4a002ed7fc7fdf6b9f2c9e6fdb7181443fe97ef17c744098552805ecb8a91e5609e9df913b4ffe0", 0x4f}, {&(0x7f0000000c40)="5118434e0be8298abb824094cefc48a2698e53b71228349abbf2e504b83ce538c8d64317096d404c9d8929534c424c895722c8b895de688a5ff7acab2a67767487005aa05eaf4309396c356f4bda734a03dc46ba99fb07032623981ace06fd972acd15a005824e91a4fa32c8dce306f53dac229d1e828c04636837080ebe6c39d6c891f09e5f011be44d8d8c17f4849828b11194a3db9d6793c85861b56489fa2998a7e7e419155f274b0aa5aa42c10c213e1c778b30ad635520e455c433347783f6566cc51639f5b6d05197c3480d5dd30909", 0xd3}, {&(0x7f0000000d40)="75e53015f3e5c9bdb7a882ecaddf6144201b4130dd6e67cffc5958531dd2392438ab16c9b88a6304c978dab6e7aae6fa574ce92463b4d2ceecb8517d4c53354156b26ccc5a28b8902ea4608c15d911a205e8d09cc4178693cbbbda878e3f4ce96d9afa8f437d34ccf56bf97cba0cb94d35de27d0531f4f51ad5968756425fdb7d93a7bda32544cb7e3f4058f3ef1c03887921ca5d0", 0x95}, {&(0x7f0000000e00)="90187e4dd00cb793c7822c64edfc5864afaa8eebdc21a90812712cb9d74eac5c0149c42c2a53bee9f6225147d57fa028398f726a0d1497b13250fcf3f3200b706d22d2f73f730bbb216b3d3db2f943fe6e8b6ee011f018ea5999b1064760be8fabed96a4a015f4f96f889b0ec2e601e07a2a8d35d6b4274da6e9f0", 0x7b}, {&(0x7f0000000e80)="257a9206f1d1a6b55849bcf17bce00623eafca4bcb8576c25617b05339c2e891d9cff5400cccaf5031d91aeb07b37a41822f2cecc52832a59c34535538b4e408b87c91f5dd15c4718db2a5f367979abbd1795db1b892a0a2824a815db2c1d44d03864d5437840da06c57eb2ef1dbcf34ffd324fe72acc36f0d264195bcbb6e0051955a4d835946501af5d2438502aa88b140b458eec165d97af8df640b56b73a3ea4ed06cd57a372ff11937168d96402b622d1894a1ecc880201f2308e86b7215914723d6cb924a70f9fb55873950ec127080797efe79845f6594dc5666f058fdd4af3ac37907d3072a5eebc01e90e561e2ac981b627943f75f61554", 0xfc}, {&(0x7f0000000f80)="d9db8579a2db9ec97a8fc4b53ab249f85e61ae74bb9f99b98bce6ea9e33c8573aaa4ffbbeb89e7fd02f2047a05731d17acc50e467936633974666acfd0bb584b3e8a908c00f5cf7ef33b121a846a2b99adc66f2413e28bf526b5adcde6244406028bced3b604d565dac7bbf697266a4b3851cdfe270a1e2ff49bc3a4d452558fa103eb8b767bbffff8b164d9ae6117e32791803abad9993258f320", 0x9b}, {&(0x7f0000001040)="4a19301c7cfc8ee07c00b1c2e893daf44fd4ec063410e78287635cbf35f0ba42bcf9b353637c3afeae44c93fdc3b6d0ac1db03d93c0978ccaaaae5df9731d2fe430a693db72085e5bff450d8bddc7a29536c5df38cf4829714b2273985161b75d937bbb220738dade17a53286b18669caba73b021515eb0de9b2602bc114b22ea56903cecfd047b2df0dc446efd9e720ee7eb7a8128b2acc9bd716ec4b9d2b0bba7ed53c70fbdd1ed7792d6ed6f36adf7e3f4c1f04ba1a35cc83a541e1fc0b1b1327be28587615e489404d6f729f49b524a744b156199e3c7b98bcf1770e2f", 0xdf}, {&(0x7f0000001140)="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", 0xfc}], 0x9, &(0x7f0000001300)={0x90, 0x10a, 0x9, "8bc06b7d814d71bbc2334ec1446f2d2fd5ca9d866b03d30b20a25e30cd201da29faf4789243cfcf3e60cc73558a2c5c4c06ed87f3789417c90b87d31338a865ae63ef3db6bb0e701eea4717b92669a84c294577fb63725b3f3e412efddaee6bbd0b7c930d30f0da053acd4ed6325056befe5b955ba01edd9e939a680f08c"}, 0x90, 0x480c4}], 0x2, 0x20000000) sendmsg$alg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="1fff5f7688922822be9332819f4d4c97ca8004c814b449d912e2c4e85c800ed9b49b9246aeec3bb7eb7aa6d946503b596748b116aa8ca1307bc0cc4e95c991166eb2c6429a094ef3be69a17d6f52c35ac60c30e98106778d35426b55ef88e5b6b42278ef3b3e52c646f0b1b3b9b6bb1f3fa958543ea4dd0775d4e5d2de8dd59d6531c554e192491f431d3e70537d5f76467f5ef297efd88a2c602b5d6cf712e9c22d5746c0d099073b3d35e4585a51a7e5d826d4a16b797c10649d4e06b2c91b7699d256adee9f5a98d4c4707e08", 0xce}, {&(0x7f0000000300)="253ec35bdea7f9b7e6409bb3222308b3c8086a083fa4c01ffa2ad74ee9848f2f8778f66f9a527a19444f4271cd4f4ea8d1462521dcbabe9f2585b18753d270c963b9d252865542ffa526c8cf63ac840d4fc2c0e32a93692efd552c8d5d0d9fa30eea226909d95cbf6b4b04ce680bf8b8f6bbeaa9b605396d1246417655aaf9e24b6fe43096400b12bce37ec4104e92b8", 0x90}, {&(0x7f00000001c0)="69315362b3f85ed26f8bab68ebf2741530", 0x11}, {&(0x7f0000000240)="f2059337d2ee97cb2129a38dee72", 0xe}, {&(0x7f00000003c0)="18e1d1b5271966202b1cc58e84e1cc7bcfd7734ce9675d758f6689a1c5dbc4e144d530fad8e957cebcb9e1fc5d49252274751d2262289d3c7d8de414b9785286dd7ba73b4a09e56e70debe5bbc22ab2d25ca3a9b04c8e73a0cffa773", 0x5c}], 0x5, &(0x7f00000004c0)=[@iv={0x80, 0x117, 0x2, 0x68, "06e2197a5e5ea323574ce028a0e94eed74e1f8256e0be10f2f073842517582862b9e123e744c137bb82078ff7f1f5dd9d9b98726effc2be9ab12531d4b3b81aca097686dba03780afd29377c658d33a42796ae3ea147526c8538ba2ff18ab74fe2430a5b94397078"}, @assoc={0x18, 0x117, 0x4, 0x8001}], 0x98, 0x95}, 0x40) 19.350337227s ago: executing program 4 (id=695): open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000}]) 18.318552421s ago: executing program 4 (id=697): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 17.864970624s ago: executing program 4 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r3, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 13.488297816s ago: executing program 3 (id=704): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) 13.321183356s ago: executing program 3 (id=705): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000100)=""/211, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x40}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="fbfbff06ce62bd7a2efded8d1b7c39e815b507f15dd02aafcacce4aea1", 0x1d}, {0x0}], 0x2}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 12.248473096s ago: executing program 3 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0xd40, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0xd24, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4a0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebde8191ef32b791e708c5de2c6489cbf6041a3a4e139ac5dfa5375a39526077"}, @WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8560b2abfcff5f7fad26edbe46db38b2193196f33baad7e10cfd832dc3c8992a"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x7e4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d03c421799dad8e5f1569d04f366d37ad2d85b00ff504f8d8e2dd9f96bea6635"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}]}]}]}, 0xd40}}, 0x0) 12.087834629s ago: executing program 3 (id=708): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 11.925255641s ago: executing program 3 (id=709): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) 11.894012892s ago: executing program 3 (id=710): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000100)=[{}], 0x1, 0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 10.574361625s ago: executing program 2 (id=711): socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_secret(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000240), &(0x7f0000000380)=0x4) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r4, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1) read$dsp(r4, &(0x7f0000000200)=""/168, 0xa8) 9.482123562s ago: executing program 2 (id=714): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x2, 0x1a) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1800}, 0x48) 8.463512256s ago: executing program 2 (id=715): socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), &(0x7f0000000380)=0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0)) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) read$dsp(r3, &(0x7f0000000200)=""/168, 0xa8) 7.373160407s ago: executing program 2 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) epoll_wait(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00']) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 6.327666065s ago: executing program 2 (id=718): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9}}}, 0x8) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000356000), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\r', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=ANY=[], 0xb0}}], 0x2, 0x400c878) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000180)='2\x00', 0x2) write(r1, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 4.386579837s ago: executing program 1 (id=719): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732178271cb92f3e4bdda6732a10715efe7a7eae23413207a9cd1c24ea5ad8f333bfedf8e93e880fc51fb9051917d5488a13c22f1a575b1767424074c84444b29becb98de0e479ae50c12711cc5e26973d496458de4969e51dd5aee7ae9ca5da879f96737d626b447cdf675bc4af3e1ffec688c6945d0786b8ff146cab2e441e3438f3ddd2832b9ac4c9693141785b844f706c8137d0ebf12347ee82f9bd1968c51803a81998a149178952f712f57c09038a8f8a2e871a1f3b026ec617a77cb2163cea2164504b5ae989034b7ceb91545c2d968b9852181505afb7422606d1db2982240a7583260c32f5e3ea677edfeffc6cb30ef79c96938f7b571a3747042c4db17296ea799f65205b5cc2bf60f5921db65d28ae0a3ce76601fb0dfc04c7fa3900aff36af6c018df195fe6e97e6aa3a81c06130489c24b82c920681d3efb1fc33c73f8645ff0baa0be3a9a92b601f9602a2ef119e527c156bd8d8c91ec92baed92c43bc153fb5c7a5b08f8c8c03b0d266bcadbb061ae5e0f15eab9ba116923a27d961377383fae7b837a448e786371140ee20733f1fc82b565f4f1dc3859c49c5e9e18180e8511ddf854609ed7fcb50ca1c43934883488c9689e0de4f05ee35a254c900b2dee53673e959ae5adbc3f793917ad556654e4df993f2bbd4b9b9259efdcbd3c3c2d315cb1c92438cdea1792c390cef68d3926d44cd9361912518732211458bdc92f855c9c018e3a7b35da0d8c8f934dbc3cfba39a9fa99e1a76759d09e705e0e4d84a32987c661b2e3f58ca446ca835fabdaf163ae94f2a59481ab62298d4350ae9358fdbd2b1b20da4afaaf2982903c2805b6caf71719d0d74852ae8414baa491363af0d20a7ad133b81356c30e77d036ba519867fe35391c36ecd0464b40a3871637dc81af3c19f59f347749cb07ac25f96e0cbf84288d32aff6dcd9cd2ebbd905d53dc87b14002cf971df0b76c5171e392f78cd002fd34a28454a32531ab9fccb16820b462bd13005da9d2fbd0ed02a4a7527b9b40b939bbf0686d16fa3070f129ae48da709408dfdb12c661148e282d50794b34b2e15236bf2f967bba67a7c650a02743ec3b852b5511c1ab32efc7d85a97bb622935b72d5c06e7bde3f389172684a6e61c852f6ec2a323858f67f8f9dde9f9eaa26cfcf958dafe5ed23b6c06f094fa1550ce0a39447769218060cb9e78a0e6f61a08b629e2512d8972a2a337b0b6b97220d292af823b8800ef45e72089659a0b1cbc750d6491d55f9bde4d1c4abe796d6951be456b8ad327794ddc74042c9e303832ccbf2d2fcb6d01007b8cf0552b568af89adc9b198cbea6b8137ef70ad16919ade2bdbd29d23c78c04cce6dedf07598d33841d8f02f7ed5a349fddbc742ea7e742636a2cb4ff663192cb1102adcc019b92caac00f5a644afc2d03b68f933aa6b8eddd6c39a0de8913034a0b48ddabd39aee173350f3dfa0329c308fb94e3528e", 0x498}, {&(0x7f00000002c0)="e4d561e9744108000000e9b4ec081c8eb4534bc5b9284f843e2bc71745", 0x1d}, {0x0}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xbf) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 4.18516128s ago: executing program 1 (id=720): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) 4.100323347s ago: executing program 1 (id=721): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x458, 0x3f3, 0x4, 0x0, 0x25dfdbfb, {0x6, 0x1, 0x38, [0x200, 0x1, 0x1, 0x8, 0xfffffff9, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x7, 0x3, 0xb, 0x0, 0x3, 0x0, 0x8, 0x2, 0x4, 0x8, 0x7e0, 0x10000, 0x3, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x80000000, 0x2, 0x5, 0xc, 0x5, 0x101, 0x1, 0x6, 0xc, 0x62, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x2, 0x0, 0x8, 0x6, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x2, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0xc, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x4, 0x1, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x7, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x9, 0xaf72, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0xcc8, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x6, 0x8, 0x6, 0x1, 0x3, 0x8, 0x2c8, 0x4, 0x0, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x40b, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x8, 0xff1, 0x7fff, 0x2, 0xffffffff, 0x6, 0x4, 0x2, 0x7fffffff, 0x0, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63c, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x9, 0x0, 0xc9, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x3, 0x5e74810d, 0x0, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x38, ['!}\x00', '/dev/uhid\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x458}}, 0x4000041) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3800000003010104000000000000070002000000240001801400018008000100e0000c00028004ec01000000000000000000000000000000d0e8846a27b9a2079bb78608f02767bbda952396e2a5eb88b0d82a6d7c57aef05c1ef3d2895d016420190e402237233948907e8205096bfd21ffdde1d39221f2a766c1f2c97e60805744419f8897fda26d1827"], 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001500)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x44004) read(r3, &(0x7f00000009c0)=""/75, 0x4b) 3.115290875s ago: executing program 2 (id=722): r0 = socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0x5, 0x6) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c00031000", @ANYRESHEX], 0xf) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, 0x0, &(0x7f00000005c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad5684c5820fae9d6d6a3292ea54c7beef915d564c90c200", 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r4) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x5, 0x19, "ef"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}}, 0x0) sendmmsg$nfc_llcp(r3, &(0x7f00000013c0)=[{&(0x7f0000000600)={0x27, 0x0, 0x0, 0x2, 0xd1, 0x5, "4d47c60f432d69a678e890195310064d9ac5b9df8f9d7946acf41f4f238f16d3272ed4dd82684694d2cb89f2c1ed276cb05a3410e76f1633c4bf51a4dc65c9", 0x23}, 0x60, &(0x7f0000000940)=[{&(0x7f0000000680)="964c6837870d30d4fdf4033d8bb5e9e427e6e863dd1f3245ce329f0a4732b5b19a80b553b512d08cde682db50e1f6a28a6c0d29853e3ce57e26a74b7153bef448aba4cd5327c1d5fc3ba7020820ce2123dcef89b60b70bf3101b3d6e28c048db1f8b354936dafac0b093580465809699b95b625fd6899c25aad3ebee2db214147ecc9bb8a4c60d0de67895b568d57dd92f591c38639aa4", 0x97}, {&(0x7f0000000740)="1e086feea0a12ddbc72ce3d49dad42930600f6cfbde9041fca0f9b466bddcc45401fd487cb9e4d0fe8895c199b115814a2fb5a59b7e219e37b0608651f0a5065487a8fee5cdcaaaa5d1695a90af91c6ba9a391ea21c03d96311d06083d66814d", 0x60}, {&(0x7f00000007c0)="33f9524333715735a1dfe2071f57f09ecd23a05d7210497c5c3e2aade64bd2fa4596e641700b0ad7533d55a7f7d0dc88d416c96b13d33b3131b90bd7e84d9b25ecdec5e5c96cffbd1e1e695cab51aec315e2622294e02fa79a83ff793d19cfc4a5632ef3666fe2e94d2bedeb3689494f37ef501462dcaacbbc0598d3ef07a417e038b711b9da81bdb06355add1c3e719165d26679c18d7395067a4", 0x9b}, {&(0x7f0000000880)="992e73d3a711abbea96c07c13a1c5701655adb74d85c5ccd52e432b7e1b89d2740706eac5e8dc4d0cefa399d6c57f10f3861", 0x32}, {&(0x7f00000008c0)="f7060e87ce9a9c6723002db5b9505f7d952449c17ee9207388b4c54cf7c8115e471722e7af74839207646bbc76d2383b51e01f31466d7fd9adbfd58eef09eac82fba", 0x42}], 0x5, &(0x7f00000009c0)={0xc8, 0x10c, 0x3, "b9b08217961621f80a3c84c518a639b53665ff22deff8111332a5f17705aa09fbb2c01fba8e28ced1bbf5763cfeaac2f6ac12e356b533cd664d7bab848c1ac79ae8acc683cd86f80f47c7aa584ae898a15dcc94c011c92fa208b41d17b04e98ad1cab692bd9c49e40001a516c48209df77e3512e658c0846c02188d823095ae8e0b4724a5456b02a5fe774b5a5108511760a461e6078fbd2555ac52926a3b7936391a5032cdef3677510a18cc0070765baf023a7"}, 0xc8, 0x801}, {&(0x7f0000000ac0)={0x27, r7, 0xffffffffffffffff, 0x2, 0x3, 0x5, "0881bb8b62ab069e8c8a187faddd41ad891be62302f7178e44349bbff2c99087cba398ad30ff0cea8fe528566e16a44e43dd8a5662c1ce4a9620356388f113", 0x15}, 0x60, &(0x7f0000001240)=[{&(0x7f0000000b40)="2ac7a9ba0898d8cea7cb23d70755dd1666ef9e532cc961bfd3d4a15e28eb4eb0267b68cb77b81e20a9be8834594fa558f295691d311c3061ccabd18c11740a6692093fb1d44f484fba0779e778d15f8ccf85d047fa4e712c23a584dd8c1a8eab", 0x60}, {&(0x7f0000000bc0)="6bf17694f2f96886f22094baca56ddcd5d5eff0dd7b45849ff11fe854717ae90c300c638b5375bb4a002ed7fc7fdf6b9f2c9e6fdb7181443fe97ef17c744098552805ecb8a91e5609e9df913b4ffe0", 0x4f}, {&(0x7f0000000c40)="5118434e0be8298abb824094cefc48a2698e53b71228349abbf2e504b83ce538c8d64317096d404c9d8929534c424c895722c8b895de688a5ff7acab2a67767487005aa05eaf4309396c356f4bda734a03dc46ba99fb07032623981ace06fd972acd15a005824e91a4fa32c8dce306f53dac229d1e828c04636837080ebe6c39d6c891f09e5f011be44d8d8c17f4849828b11194a3db9d6793c85861b56489fa2998a7e7e419155f274b0aa5aa42c10c213e1c778b30ad635520e455c433347783f6566cc51639f5b6d05197c3480d5dd30909", 0xd3}, {&(0x7f0000000d40)="75e53015f3e5c9bdb7a882ecaddf6144201b4130dd6e67cffc5958531dd2392438ab16c9b88a6304c978dab6e7aae6fa574ce92463b4d2ceecb8517d4c53354156b26ccc5a28b8902ea4608c15d911a205e8d09cc4178693cbbbda878e3f4ce96d9afa8f437d34ccf56bf97cba0cb94d35de27d0531f4f51ad5968756425fdb7d93a7bda32544cb7e3f4058f3ef1c03887921ca5d0", 0x95}, {&(0x7f0000000e00)="90187e4dd00cb793c7822c64edfc5864afaa8eebdc21a90812712cb9d74eac5c0149c42c2a53bee9f6225147d57fa028398f726a0d1497b13250fcf3f3200b706d22d2f73f730bbb216b3d3db2f943fe6e8b6ee011f018ea5999b1064760be8fabed96a4a015f4f96f889b0ec2e601e07a2a8d35d6b4274da6e9f0", 0x7b}, {&(0x7f0000000e80)="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", 0xfc}, {&(0x7f0000000f80)="d9db8579a2db9ec97a8fc4b53ab249f85e61ae74bb9f99b98bce6ea9e33c8573aaa4ffbbeb89e7fd02f2047a05731d17acc50e467936633974666acfd0bb584b3e8a908c00f5cf7ef33b121a846a2b99adc66f2413e28bf526b5adcde6244406028bced3b604d565dac7bbf697266a4b3851cdfe270a1e2ff49bc3a4d452558fa103eb8b767bbffff8b164d9ae6117e32791803abad9993258f320", 0x9b}, {&(0x7f0000001040)="4a19301c7cfc8ee07c00b1c2e893daf44fd4ec063410e78287635cbf35f0ba42bcf9b353637c3afeae44c93fdc3b6d0ac1db03d93c0978ccaaaae5df9731d2fe430a693db72085e5bff450d8bddc7a29536c5df38cf4829714b2273985161b75d937bbb220738dade17a53286b18669caba73b021515eb0de9b2602bc114b22ea56903cecfd047b2df0dc446efd9e720ee7eb7a8128b2acc9bd716ec4b9d2b0bba7ed53c70fbdd1ed7792d6ed6f36adf7e3f4c1f04ba1a35cc83a541e1fc0b1b1327be28587615e489404d6f729f49b524a744b156199e3c7b98bcf1770e2f", 0xdf}, {&(0x7f0000001140)="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", 0xfc}], 0x9, &(0x7f0000001300)={0x90, 0x10a, 0x9, "8bc06b7d814d71bbc2334ec1446f2d2fd5ca9d866b03d30b20a25e30cd201da29faf4789243cfcf3e60cc73558a2c5c4c06ed87f3789417c90b87d31338a865ae63ef3db6bb0e701eea4717b92669a84c294577fb63725b3f3e412efddaee6bbd0b7c930d30f0da053acd4ed6325056befe5b955ba01edd9e939a680f08c"}, 0x90, 0x480c4}], 0x2, 0x20000000) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="1fff5f7688922822be9332819f4d4c97ca8004c814b449d912e2c4e85c800ed9b49b9246aeec3bb7eb7aa6d946503b596748b116aa8ca1307bc0cc4e95c991166eb2c6429a094ef3be69a17d6f52c35ac60c30e98106778d35426b55ef88e5b6b42278ef3b3e52c646f0b1b3b9b6bb1f3fa958543ea4dd0775d4e5d2de8dd59d6531c554e192491f431d3e70537d5f76467f5ef297efd88a2c602b5d6cf712e9c22d5746c0d099073b3d35e4585a51a7e5d826d4a16b797c10649d4e06b2c91b7699d256adee9f5a98d4c4707e08", 0xce}, {&(0x7f0000000300)="253ec35bdea7f9b7e6409bb3222308b3c8086a083fa4c01ffa2ad74ee9848f2f8778f66f9a527a19444f4271cd4f4ea8d1462521dcbabe9f2585b18753d270c963b9d252865542ffa526c8cf63ac840d4fc2c0e32a93692efd552c8d5d0d9fa30eea226909d95cbf6b4b04ce680bf8b8f6bbeaa9b605396d1246417655aaf9e24b6fe43096400b12bce37ec4104e92b8", 0x90}, {&(0x7f00000001c0)="69315362b3f85ed26f8bab68ebf2741530", 0x11}, {&(0x7f0000000240)="f2059337d2ee97cb2129a38dee72", 0xe}, {&(0x7f00000003c0)="18e1d1b5271966202b1cc58e84e1cc7bcfd7734ce9675d758f6689a1c5dbc4e144d530fad8e957cebcb9e1fc5d49252274751d2262289d3c7d8de414b9785286dd7ba73b4a09e56e70debe5bbc22ab2d25ca3a9b04c8e73a0cffa773", 0x5c}], 0x5, &(0x7f00000004c0)=[@iv={0x80, 0x117, 0x2, 0x68, "06e2197a5e5ea323574ce028a0e94eed74e1f8256e0be10f2f073842517582862b9e123e744c137bb82078ff7f1f5dd9d9b98726effc2be9ab12531d4b3b81aca097686dba03780afd29377c658d33a42796ae3ea147526c8538ba2ff18ab74fe2430a5b94397078"}, @assoc={0x18, 0x117, 0x4, 0x8001}], 0x98, 0x95}, 0x40) 3.09097383s ago: executing program 1 (id=723): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c713a5774613f726573697a652c7533727130303030303030303000303030303030303030342c736d61636b66736861743d6574002678f9edfbac5d6325f9002c00c9cd79b9b92293ea"], 0xfe, 0x61d3, &(0x7f0000008140)="$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") unlink(&(0x7f0000000580)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r4, 0x89e2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x7) sendmmsg$inet6(r3, 0x0, 0x0, 0xc8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.506415673s ago: executing program 1 (id=724): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x2, 0x1a) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1800}, 0x48) 0s ago: executing program 1 (id=726): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lsm_list_modules(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): sock_write_iter+0x2dd/0x400 [ 237.466750][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 237.466798][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 237.466822][ C0] ? security_file_permission+0x7f/0xa0 [ 237.466910][ C0] vfs_write+0xa72/0xc90 [ 237.466940][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 237.466978][ C0] ? __pfx_vfs_write+0x10/0x10 [ 237.467047][ C0] ? do_futex+0x33b/0x560 [ 237.467103][ C0] ksys_write+0x1a0/0x2c0 [ 237.467193][ C0] ? __pfx_ksys_write+0x10/0x10 [ 237.467219][ C0] ? do_syscall_64+0x100/0x230 [ 237.467244][ C0] ? do_syscall_64+0xb6/0x230 [ 237.467269][ C0] do_syscall_64+0xf3/0x230 [ 237.467337][ C0] ? clear_bhb_loop+0x35/0x90 [ 237.467369][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.467398][ C0] RIP: 0033:0x7fc63a575bd9 [ 237.467419][ C0] RSP: 002b:00007fc63b2a2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.467495][ C0] RAX: ffffffffffffffda RBX: 00007fc63a704038 RCX: 00007fc63a575bd9 [ 237.467513][ C0] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000009 [ 237.467530][ C0] RBP: 00007fc63a5e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 237.467546][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.467563][ C0] R13: 000000000000006e R14: 00007fc63a704038 R15: 00007ffefeb87848 [ 237.467647][ C0] [ 237.467662][ C0] [ 237.467662][ C0] Showing all locks held in the system: [ 237.467675][ C0] 1 lock held by pool_workqueue_/3: [ 237.467692][ C0] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 237.467836][ C0] 2 locks held by kworker/u8:3/52: [ 237.467905][ C0] 5 locks held by kworker/u8:4/67: [ 237.467952][ C0] 2 locks held by getty/4854: [ 237.467966][ C0] #0: ffff88802a95f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 237.468097][ C0] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 237.468219][ C0] 4 locks held by kworker/1:2/4874: [ 237.468233][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.468360][ C0] #1: ffffc900031d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.468473][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 237.468584][ C0] #3: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 237.468670][ C0] 5 locks held by kworker/1:4/5152: [ 237.468736][ C0] #0: ffff888018aa1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.468812][ C0] #1: ffffc90003aa7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.468939][ C0] #2: ffff888023645190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 237.469072][ C0] #3: ffff88802a2d4190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 237.469198][ C0] #4: ffff88801c763168 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_configuration+0x4fb/0x1fb0 [ 237.469341][ C0] 5 locks held by kworker/0:8/5188: [ 237.469357][ C0] #0: ffff888018aa1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.469484][ C0] #1: ffffc9000435fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.469612][ C0] #2: ffff888023748190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 237.469741][ C0] #3: ffff888026342190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 237.469862][ C0] #4: ffff88801c778e68 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_configuration+0x4fb/0x1fb0 [ 237.469942][ C0] 4 locks held by udevd/5233: [ 237.470012][ C0] #0: ffff88801af649e0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 237.470089][ C0] #1: ffff88807c5c5488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 237.470221][ C0] #2: ffff88802cc301e8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 237.470360][ C0] #3: ffff88802a2d4190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 237.470493][ C0] 4 locks held by udevd/5841: [ 237.470509][ C0] #0: ffff88807ecda1c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 237.470638][ C0] #1: ffff88802548f088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 237.470771][ C0] #2: ffff88801f04ff08 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 237.470904][ C0] #3: ffff8880637b1190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 237.471035][ C0] 4 locks held by udevd/5844: [ 237.471050][ C0] #0: ffff88807a930790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 237.471177][ C0] #1: ffff88802548e888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 237.471311][ C0] #2: ffff8880652f2008 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 237.471448][ C0] #3: ffff888026342190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 237.471577][ C0] 7 locks held by kworker/0:10/6069: [ 237.471592][ C0] #0: ffff888018aa1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.471719][ C0] #1: ffffc90013867d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.471847][ C0] #2: ffff888022f25190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 237.471977][ C0] #3: ffff8880637b1190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 237.472096][ C0] #4: ffff888021b2e160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 237.472168][ C0] #5: ffffffff8f590948 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x417/0x2100 [ 237.472297][ C0] #6: ffff88802227b168 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_interface+0x35e/0x13b0 [ 237.472434][ C0] 2 locks held by syz.2.394/6753: [ 237.472450][ C0] #0: ffff88806352f678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 237.472585][ C0] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 237.472717][ C0] 1 lock held by syz.1.398/6769: [ 237.472733][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 237.472867][ C0] 4 locks held by syz.4.405/6795: [ 237.472934][ C0] 1 lock held by syz.0.406/6805: [ 237.472950][ C0] 3 locks held by syz.3.407/6802: [ 237.472966][ C0] #0: ffff88807e990d80 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 237.473087][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 237.473155][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 237.473286][ C0] [ 237.473294][ C0] ============================================= [ 237.473294][ C0] [ 237.509774][ T6807] netlink: 'syz.0.406': attribute type 16 has an invalid length. [ 237.509806][ T6807] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.406'. [ 237.513718][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 237.923195][ T6769] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 237.923254][ T6769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.398'. [ 237.923294][ T6769] batadv0: entered promiscuous mode [ 237.923315][ T6769] batadv0: entered allmulticast mode [ 237.924475][ T6769] bridge0: port 3(batadv0) entered blocking state [ 237.924622][ T6769] bridge0: port 3(batadv0) entered disabled state [ 237.929009][ T6769] bridge0: port 3(batadv0) entered blocking state [ 237.929358][ T6769] bridge0: port 3(batadv0) entered forwarding state [ 237.932024][ T6753] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.394'. [ 238.008046][ T4874] usb 3-1: USB disconnect, device number 15 [ 238.204094][ T5152] usb 2-1: can't set config #3, error -71 [ 238.240982][ T6795] tty tty28: ldisc open failed (-12), clearing slot 27 [ 238.426307][ T2420] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 238.897268][ T5151] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.898239][ T2420] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 239.710477][ T5151] usb 4-1: Using ep0 maxpacket: 16 [ 239.991383][ T5152] usb 2-1: USB disconnect, device number 17 [ 240.151107][ T5105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.400167][ T5151] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 240.475207][ T5105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.680300][ T5151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.680336][ T5151] usb 4-1: Product: syz [ 240.680356][ T5151] usb 4-1: Manufacturer: syz [ 240.680375][ T5151] usb 4-1: SerialNumber: syz [ 240.729499][ T5151] usb 4-1: config 0 descriptor?? [ 240.777348][ T5105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.979803][ T5151] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 240.985677][ T5105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.216852][ T5152] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 241.244653][ T5105] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 241.589835][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 241.608040][ T5188] usb 5-1: can't set config #1, error -110 [ 241.654528][ T6069] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 241.729251][ T5151] gp8psk: usb in 146 operation failed. [ 241.794649][ T5233] udevd[5233]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.884879][ T5151] gp8psk: failed to get FW version [ 241.907976][ T6069] usb 1-1: USB disconnect, device number 21 [ 241.920795][ T5105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.034724][ T5152] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 242.034762][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.034785][ T5152] usb 2-1: Product: syz [ 242.034804][ T5152] usb 2-1: Manufacturer: syz [ 242.034823][ T5152] usb 2-1: SerialNumber: syz [ 242.039673][ T5152] usb 2-1: config 0 descriptor?? [ 242.104200][ T5151] gp8psk: FPGA Version = 118 [ 242.530427][ T5113] usb 5-1: USB disconnect, device number 19 [ 242.633535][ T6828] bond0: (slave tunl0): The slave device specified does not support setting the MAC address [ 242.644510][ T6828] bond0: (slave tunl0): Error -95 calling set_mac_address [ 242.719667][ T6813] lo speed is unknown, defaulting to 1000 [ 242.788865][ T6833] netlink: 'syz.1.411': attribute type 16 has an invalid length. [ 242.796812][ T6833] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.411'. [ 242.811822][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 243.617115][ T5151] gp8psk: usb out operation failed. [ 243.622519][ T5151] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 243.639337][ T5151] dvb_usb_gp8psk 4-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 243.661475][ T67] hsr_slave_0: left promiscuous mode [ 243.694782][ T67] hsr_slave_1: left promiscuous mode [ 243.695890][ T5151] usb 4-1: USB disconnect, device number 17 [ 243.728237][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.761248][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.761953][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 244.114095][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.129719][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.161500][ T67] veth1_macvtap: left promiscuous mode [ 244.172400][ T67] veth0_macvtap: left promiscuous mode [ 244.278887][ T5101] Bluetooth: hci5: command tx timeout [ 244.990488][ T5152] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 245.053693][ T5152] usb 2-1: USB disconnect, device number 18 [ 245.268345][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 245.512057][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 245.536983][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.552322][ T9] usb 4-1: config 0 has no interface number 0 [ 245.570524][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xFE has an invalid bInterval 0, changing to 7 [ 245.633618][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.653495][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.666771][ T9] usb 4-1: config 0 descriptor?? [ 245.683816][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 245.770404][ T5152] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 245.987378][ T5152] usb 2-1: Using ep0 maxpacket: 16 [ 245.994676][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 246.047256][ T5152] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 246.056390][ T5152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.126600][ T5152] usb 2-1: config 0 descriptor?? [ 246.153852][ T67] team0 (unregistering): Port device team_slave_1 removed [ 246.337265][ T5101] Bluetooth: hci5: command tx timeout [ 246.373563][ T67] team0 (unregistering): Port device team_slave_0 removed [ 246.815894][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.845568][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.942089][ T6845] NILFS (loop1): device size too small [ 247.005999][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.050445][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.105714][ T5152] hid (null): global environment stack underflow [ 247.124914][ T5152] hid (null): report_id 0 is invalid [ 247.141823][ T5152] hid (null): global environment stack underflow [ 247.155952][ T5152] hid (null): report_id 10502 is invalid [ 247.187874][ T5152] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 247.210528][ T5152] hid-generic 0003:0158:0100.0004: unexpected long global item [ 247.255418][ T5152] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 247.317106][ T5152] usb 2-1: USB disconnect, device number 19 [ 247.600485][ T5116] udevd[5116]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.652417][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 247.857863][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 247.874629][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 247.948611][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.987768][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.044899][ T9] usb 1-1: Product: syz [ 248.065457][ T9] usb 1-1: Manufacturer: syz [ 248.086036][ T5200] usb 4-1: USB disconnect, device number 18 [ 248.095745][ T5200] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 248.121149][ T9] usb 1-1: SerialNumber: syz [ 248.185591][ T9] usb 1-1: bad CDC descriptors [ 248.310106][ T6813] chnl_net:caif_netlink_parms(): no params data found [ 248.407443][ T5101] Bluetooth: hci5: command tx timeout [ 248.756198][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.780680][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.801865][ T6813] bridge_slave_0: entered allmulticast mode [ 248.828867][ T6813] bridge_slave_0: entered promiscuous mode [ 248.855641][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.879611][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.900738][ T6813] bridge_slave_1: entered allmulticast mode [ 248.924340][ T6813] bridge_slave_1: entered promiscuous mode [ 249.128270][ T6813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.143374][ T6813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.193792][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.195184][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'. [ 249.220101][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 249.235514][ T6876] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 249.257766][ T5200] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 249.482314][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.584823][ T6813] team0: Port device team_slave_0 added [ 249.680501][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.725678][ T6813] team0: Port device team_slave_1 added [ 249.833180][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.858593][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.865613][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.891907][ T6813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.914222][ T5200] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 249.925701][ T5200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.943133][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.950268][ T5200] usb 4-1: Product: syz [ 249.954633][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.981143][ T5200] usb 4-1: Manufacturer: syz [ 249.985794][ T5200] usb 4-1: SerialNumber: syz [ 249.993788][ T6813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.006362][ T5200] usb 4-1: config 0 descriptor?? [ 250.202555][ T6813] hsr_slave_0: entered promiscuous mode [ 250.217374][ T6813] hsr_slave_1: entered promiscuous mode [ 250.250853][ T6813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.260888][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 250.272997][ T6813] Cannot create hsr debugfs directory [ 250.508197][ T5101] Bluetooth: hci5: command tx timeout [ 250.669004][ T67] bridge_slave_1: left allmulticast mode [ 250.691961][ T67] bridge_slave_1: left promiscuous mode [ 250.721159][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.797451][ T67] bridge_slave_0: left allmulticast mode [ 250.809965][ T4874] usb 1-1: USB disconnect, device number 22 [ 250.828274][ T67] bridge_slave_0: left promiscuous mode [ 250.858692][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.887274][ T5200] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 251.089592][ T5200] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.104394][ T5200] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 251.143818][ T5200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.164752][ T5200] usb 5-1: config 0 descriptor?? [ 252.314722][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.355635][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.385582][ T67] bond0 (unregistering): Released all slaves [ 252.437543][ T6868] lo speed is unknown, defaulting to 1000 [ 252.681096][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 252.681116][ T29] audit: type=1326 audit(1720221633.129:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 252.778067][ T29] audit: type=1326 audit(1720221633.169:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 252.841880][ T29] audit: type=1326 audit(1720221633.169:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 252.882281][ T29] audit: type=1326 audit(1720221633.169:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 252.926520][ T29] audit: type=1326 audit(1720221633.169:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 252.970402][ T29] audit: type=1326 audit(1720221633.169:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 252.999278][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 253.062992][ T29] audit: type=1326 audit(1720221633.169:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 253.108399][ T29] audit: type=1326 audit(1720221633.169:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 253.137589][ T5188] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 253.138739][ T29] audit: type=1326 audit(1720221633.169:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 253.168387][ T29] audit: type=1326 audit(1720221633.169:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 253.230390][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 253.253652][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 253.273998][ T9] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 253.286097][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.338831][ T5188] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.369664][ T67] hsr_slave_0: left promiscuous mode [ 253.371533][ T9] usb 2-1: config 0 descriptor?? [ 253.382138][ T5188] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.399187][ T67] hsr_slave_1: left promiscuous mode [ 253.410909][ T5188] usb 1-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 253.420909][ T5188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.429123][ T5188] usb 1-1: SerialNumber: syz [ 253.429531][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.455069][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.468819][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.476786][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.514406][ T67] veth1_macvtap: left promiscuous mode [ 253.520508][ T67] veth0_macvtap: left promiscuous mode [ 253.526565][ T67] veth1_vlan: left promiscuous mode [ 253.534261][ T67] veth0_vlan: left promiscuous mode [ 253.686417][ T6921] loop0: detected capacity change from 0 to 512 [ 253.732080][ T6921] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.435: invalid indirect mapped block 256 (level 2) [ 253.751521][ T6921] EXT4-fs (loop0): 2 truncates cleaned up [ 253.813682][ T6921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.896875][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.916887][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.956667][ T6917] NILFS (loop1): device size too small [ 253.982644][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.009699][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.041560][ T6921] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.435: bg 0: block 5: invalid block bitmap [ 254.055992][ T9] hid (null): global environment stack underflow [ 254.075777][ T9] hid (null): report_id 0 is invalid [ 254.105676][ T9] hid (null): global environment stack underflow [ 254.137518][ T9] hid (null): report_id 10502 is invalid [ 254.160642][ T9] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 254.177023][ T5188] usb 1-1: USB disconnect, device number 23 [ 254.184220][ T9] hid-generic 0003:0158:0100.0005: unexpected long global item [ 254.196569][ T9] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 254.268503][ T5152] usb 2-1: USB disconnect, device number 20 [ 254.434725][ T5151] usb 5-1: USB disconnect, device number 20 [ 254.481001][ T5116] udevd[5116]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 254.672165][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 254.684687][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 254.834996][ T5097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.955592][ T67] team0 (unregistering): Port device team_slave_1 removed [ 255.000119][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 255.649640][ T67] team0 (unregistering): Port device team_slave_0 removed [ 256.265860][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.268523][ T5188] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 256.272558][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.459432][ T5188] usb 2-1: Using ep0 maxpacket: 8 [ 256.466910][ T5188] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 256.499530][ T5188] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.509234][ T5188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.521316][ T5188] usb 2-1: Product: syz [ 256.525616][ T5188] usb 2-1: Manufacturer: syz [ 256.532182][ T5188] usb 2-1: SerialNumber: syz [ 256.545205][ T5188] usb 2-1: bad CDC descriptors [ 256.712018][ T6948] netlink: 'syz.4.436': attribute type 10 has an invalid length. [ 256.720462][ T5152] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 256.767553][ T6948] batman_adv: batadv0: Adding interface: team0 [ 256.780087][ T6948] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.822069][ T6948] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 256.909330][ T5152] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.916575][ T5152] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 256.943847][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.974822][ T5152] usb 1-1: config 0 descriptor?? [ 257.057078][ T46] usb 4-1: USB disconnect, device number 19 [ 257.395124][ T5152] video4linux radio32: keene_cmd_main failed (-71) [ 257.427376][ T5152] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 257.474335][ T5152] usb 1-1: USB disconnect, device number 24 [ 258.267299][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 258.267318][ T29] audit: type=1326 audit(1720221638.709:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 258.365514][ T29] audit: type=1326 audit(1720221638.709:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 258.373884][ T6813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.437477][ T29] audit: type=1326 audit(1720221638.759:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 258.491685][ T6813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.535666][ T6813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.543486][ T29] audit: type=1326 audit(1720221638.759:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 258.553488][ T6985] loop0: detected capacity change from 0 to 512 [ 258.587690][ T6813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.604545][ T29] audit: type=1326 audit(1720221638.759:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 258.649691][ T6985] EXT4-fs: Ignoring removed nobh option [ 258.707842][ T6985] EXT4-fs: Mount option(s) incompatible with ext2 [ 258.715561][ T29] audit: type=1326 audit(1720221638.759:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 258.829031][ T29] audit: type=1326 audit(1720221638.759:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 258.894377][ T29] audit: type=1326 audit(1720221638.759:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 258.945970][ T29] audit: type=1326 audit(1720221638.759:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6defd75bd9 code=0x7ffc0000 [ 259.286008][ T6995] smc: net device erspan0 applied user defined pnetid SYZ2 [ 259.497676][ T5152] usb 2-1: USB disconnect, device number 21 [ 259.524788][ T6813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.665310][ T6813] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.825276][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.832538][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.905893][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.913138][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.116558][ T6813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.429166][ T46] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 260.838270][ T7011] loop1: detected capacity change from 0 to 32768 [ 260.942322][ T7011] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.450 (7011) [ 260.965444][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 261.020302][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 261.077500][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.154079][ T7011] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.164453][ T7011] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 261.173243][ T7011] BTRFS info (device loop1): using free-space-tree [ 261.183633][ T46] usb 1-1: config 0 descriptor?? [ 261.227276][ T7018] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 261.256722][ T7018] bridge0: port 4(team0) entered disabled state [ 261.282344][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 261.292139][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 261.347844][ T7018] team0: left allmulticast mode [ 261.376065][ T7018] team_slave_0: left allmulticast mode [ 261.423348][ T7018] team_slave_1: left allmulticast mode [ 261.463117][ T7018] team0: left promiscuous mode [ 261.547461][ T7018] team_slave_0: left promiscuous mode [ 261.583904][ T7018] team_slave_1: left promiscuous mode [ 261.629350][ T7018] bridge0: port 4(team0) entered disabled state [ 261.992568][ T7018] batman_adv: batadv0: Adding interface: team0 [ 262.113727][ T7018] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.350602][ T5104] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.357002][ T7018] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 262.476571][ T6813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.655854][ T6813] veth0_vlan: entered promiscuous mode [ 262.764518][ T6813] veth1_vlan: entered promiscuous mode [ 262.850203][ T29] audit: type=1326 audit(1720221643.299:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf1b75bd9 code=0x7ffc0000 [ 262.939789][ T7060] program syz.4.453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.975503][ T7060] fuse: Bad value for 'rootmode' [ 263.579923][ T6813] veth0_macvtap: entered promiscuous mode [ 263.629535][ T6813] veth1_macvtap: entered promiscuous mode [ 263.730431][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.747511][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.777209][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.977556][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.008259][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.029519][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.039871][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.051569][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.071063][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.082395][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.095306][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.187608][ T6069] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 264.378707][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.408779][ T6069] usb 5-1: Using ep0 maxpacket: 8 [ 264.514561][ T6069] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 264.613601][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.659694][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.670878][ T6069] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.707218][ T6069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.737708][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.757270][ T6069] usb 5-1: Product: syz [ 264.777349][ T6069] usb 5-1: Manufacturer: syz [ 264.782282][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.801876][ T6069] usb 5-1: SerialNumber: syz [ 264.848949][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.868966][ T6069] usb 5-1: bad CDC descriptors [ 264.889201][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.901351][ T7063] netlink: 'syz.3.455': attribute type 4 has an invalid length. [ 264.942199][ T7067] netlink: 'syz.3.455': attribute type 4 has an invalid length. [ 265.059175][ T6813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.090406][ T6813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.107357][ T6813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.116223][ T6813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.154766][ T46] usb 1-1: USB disconnect, device number 25 [ 265.600105][ T2420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.707796][ T7098] program syz.3.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.739535][ T7098] fuse: Bad value for 'rootmode' [ 265.869742][ T2420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.249332][ T7100] loop0: detected capacity change from 0 to 512 [ 266.292717][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.311986][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.320058][ T7100] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.460: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 266.567508][ T7100] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.460: couldn't read orphan inode 15 (err -117) [ 266.701832][ T7100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.755002][ T7100] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.092317][ T5151] usb 5-1: USB disconnect, device number 21 [ 267.911633][ T5097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.984156][ T7127] loop2: detected capacity change from 0 to 8 [ 269.677918][ T7150] netlink: 'syz.2.467': attribute type 4 has an invalid length. [ 269.690889][ T7151] loop0: detected capacity change from 0 to 1024 [ 269.778066][ T7152] netlink: 'syz.2.467': attribute type 4 has an invalid length. [ 269.811057][ T7155] loop1: detected capacity change from 0 to 512 [ 269.848465][ T7155] EXT4-fs: Ignoring removed nobh option [ 269.888063][ T7155] EXT4-fs: Mount option(s) incompatible with ext2 [ 270.315894][ T7165] program syz.4.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.333909][ T7165] fuse: Bad value for 'rootmode' [ 271.976971][ T7178] netlink: 'syz.1.476': attribute type 10 has an invalid length. [ 272.003895][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 272.020536][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 272.377407][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 272.451712][ T7187] loop0: detected capacity change from 0 to 512 [ 272.481583][ T7187] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.477: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 272.507997][ T5113] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 272.535313][ T7187] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.477: couldn't read orphan inode 15 (err -117) [ 272.581305][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.600519][ T7187] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.622445][ T9] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 272.638637][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.646916][ T9] usb 4-1: Product: syz [ 272.651786][ T9] usb 4-1: Manufacturer: syz [ 272.656536][ T9] usb 4-1: SerialNumber: syz [ 272.664870][ T9] usb 4-1: config 0 descriptor?? [ 272.720931][ T5113] usb 3-1: Using ep0 maxpacket: 8 [ 272.989704][ T5113] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 273.007628][ T5113] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.016857][ T5113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.043919][ T5113] usb 3-1: Product: syz [ 274.021635][ T5113] usb 3-1: Manufacturer: syz [ 274.026321][ T5113] usb 3-1: SerialNumber: syz [ 274.144790][ T5113] usb 3-1: bad CDC descriptors [ 274.199667][ T5097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.331193][ T7172] lo speed is unknown, defaulting to 1000 [ 274.990901][ T5151] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 275.195909][ T5151] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 275.226799][ T5151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.242389][ T5200] usb 4-1: USB disconnect, device number 20 [ 275.262724][ T5151] usb 1-1: Product: syz [ 275.288705][ T5151] usb 1-1: Manufacturer: syz [ 275.316098][ T5151] usb 1-1: SerialNumber: syz [ 275.338401][ T5151] usb 1-1: config 0 descriptor?? [ 275.532359][ T7230] loop4: detected capacity change from 0 to 128 [ 276.426848][ T7221] lo speed is unknown, defaulting to 1000 [ 277.255506][ T7239] program syz.3.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.273071][ T7239] fuse: Bad value for 'rootmode' [ 278.701299][ T7257] loop1: detected capacity change from 0 to 512 [ 278.725858][ T5200] usb 1-1: USB disconnect, device number 26 [ 278.844407][ T7257] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.491: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 278.865804][ T7257] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.491: couldn't read orphan inode 15 (err -117) [ 278.911286][ T7257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.016261][ T7257] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.082013][ T5151] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 279.327809][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.346641][ T5151] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 279.371542][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.391104][ T7269] 9pnet_fd: Insufficient options for proto=fd [ 279.448306][ T5151] usb 4-1: config 0 descriptor?? [ 279.468789][ T7267] loop4: detected capacity change from 0 to 1024 [ 279.786991][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.352991][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.775654][ T5151] video4linux radio32: keene_cmd_set failed (-110) [ 280.783151][ T5151] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 281.126259][ T5151] usb 4-1: USB disconnect, device number 21 [ 281.801556][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.034115][ T5200] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 282.229315][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 282.257058][ T5200] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 282.276766][ T5200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.330489][ T5200] usb 1-1: config 0 descriptor?? [ 282.364379][ T6069] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 282.528659][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.547832][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.564219][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.584420][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.593520][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.602687][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.776680][ T7302] lo speed is unknown, defaulting to 1000 [ 283.096205][ T4874] usb 3-1: USB disconnect, device number 16 [ 283.515953][ T6069] usb 2-1: Using ep0 maxpacket: 32 [ 283.542899][ T6069] usb 2-1: config 1 interface 0 has no altsetting 0 [ 283.569836][ T6069] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 283.769565][ T5200] video4linux radio32: keene_cmd_main failed (-110) [ 283.776349][ T5200] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 283.856242][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.972775][ T6069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.982016][ T6069] usb 2-1: Product: 믃謂邐བྷ砲㨹鄚螹㿝뺻䌎 [ 284.007712][ T6069] usb 2-1: Manufacturer: 㰊 [ 284.017309][ T6069] usb 2-1: SerialNumber: й [ 284.127467][ T5113] usb 1-1: USB disconnect, device number 27 [ 284.128523][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.302584][ T6069] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 284.323127][ T4533] bcm5974 2-1:1.0: could not read from device [ 284.349128][ T4533] bcm5974 2-1:1.0: could not read from device [ 284.364084][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.392851][ T4533] bcm5974 2-1:1.0: could not read from device [ 284.404532][ T6069] usb 2-1: USB disconnect, device number 22 [ 284.423107][ T7321] 9pnet_fd: Insufficient options for proto=fd [ 284.456864][ T4533] bcm5974 2-1:1.0: could not read from device [ 284.582959][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.755481][ T5105] Bluetooth: hci0: command tx timeout [ 285.389153][ T6069] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 285.503707][ T7302] chnl_net:caif_netlink_parms(): no params data found [ 285.688838][ T6069] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.707259][ T6069] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 285.716484][ T7335] loop1: detected capacity change from 0 to 512 [ 285.746441][ T6069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.779187][ T6069] usb 5-1: config 0 descriptor?? [ 285.815951][ T7335] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.511: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 285.927663][ T7335] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.511: couldn't read orphan inode 15 (err -117) [ 286.004571][ T7335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.076845][ T7337] loop0: detected capacity change from 0 to 32768 [ 286.085331][ T7335] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.085348][ T7337] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.512 (7337) [ 286.138312][ T7337] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.148630][ T7337] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 286.157504][ T7337] BTRFS info (device loop0): using free-space-tree [ 286.177307][ T5152] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 286.284728][ T11] bridge_slave_1: left allmulticast mode [ 286.294797][ T11] bridge_slave_1: left promiscuous mode [ 286.315304][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.380266][ T11] bridge_slave_0: left allmulticast mode [ 286.386118][ T11] bridge_slave_0: left promiscuous mode [ 286.397264][ T5152] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.438554][ T5152] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.449541][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.491707][ T5152] usb 4-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 286.533754][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.855480][ T5105] Bluetooth: hci0: command tx timeout [ 287.020698][ T5152] usb 4-1: SerialNumber: syz [ 287.419411][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.433573][ T7333] loop3: detected capacity change from 0 to 512 [ 287.605108][ T7333] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.510: invalid indirect mapped block 256 (level 2) [ 287.736933][ T6069] video4linux radio32: keene_cmd_set failed (-110) [ 287.752070][ T7333] EXT4-fs (loop3): 2 truncates cleaned up [ 287.755063][ T6069] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 287.779912][ T6069] usb 5-1: USB disconnect, device number 22 [ 287.871966][ T7333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.897946][ T5097] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.124891][ T5152] usb 4-1: USB disconnect, device number 22 [ 288.976592][ T5233] udevd[5233]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.047827][ T5105] Bluetooth: hci0: command tx timeout [ 289.499153][ T5110] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.032933][ T5152] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 290.277401][ T5152] usb 1-1: Using ep0 maxpacket: 32 [ 290.306917][ T5152] usb 1-1: config 1 interface 0 has no altsetting 0 [ 290.382776][ T5152] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 290.407427][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.431866][ T5152] usb 1-1: Product: 믃謂邐བྷ砲㨹鄚螹㿝뺻䌎 [ 290.455679][ T5152] usb 1-1: Manufacturer: 㰊 [ 290.471549][ T5152] usb 1-1: SerialNumber: й [ 290.608290][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.631404][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.659809][ T11] bond0 (unregistering): Released all slaves [ 290.682876][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.696393][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.704254][ T7302] bridge_slave_0: entered allmulticast mode [ 290.718832][ T7302] bridge_slave_0: entered promiscuous mode [ 290.808676][ T5152] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 290.843306][ T4533] bcm5974 1-1:1.0: could not read from device [ 290.875543][ T5152] usb 1-1: USB disconnect, device number 28 [ 290.875801][ T4533] bcm5974 1-1:1.0: could not read from device [ 290.921527][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.933670][ T4533] bcm5974 1-1:1.0: could not read from device [ 290.955518][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.976315][ T7302] bridge_slave_1: entered allmulticast mode [ 290.989394][ T5110] syz-executor (5110) used greatest stack depth: 16888 bytes left [ 290.999454][ T7302] bridge_slave_1: entered promiscuous mode [ 291.127542][ T5105] Bluetooth: hci0: command tx timeout [ 291.281306][ T7302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.345371][ T7302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.537337][ T7409] loop1: detected capacity change from 0 to 32768 [ 291.561670][ T7409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.522 (7409) [ 291.627576][ T7409] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.667487][ T7409] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 291.681528][ T7409] BTRFS info (device loop1): using free-space-tree [ 291.749682][ T11] hsr_slave_0: left promiscuous mode [ 291.969375][ T11] hsr_slave_1: left promiscuous mode [ 291.990182][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.041086][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.082897][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.095777][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.106196][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.114600][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.127103][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.129120][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 292.149723][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.221708][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.294968][ T11] veth1_macvtap: left promiscuous mode [ 292.300925][ T11] veth0_macvtap: left promiscuous mode [ 292.306651][ T11] veth1_vlan: left promiscuous mode [ 292.313068][ T11] veth0_vlan: left promiscuous mode [ 292.328912][ T6069] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 292.335616][ T5104] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 292.557293][ T6069] usb 1-1: config 3 has an invalid interface descriptor of length 2, skipping [ 292.566335][ T6069] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 292.586531][ T6069] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 292.598658][ T6069] usb 1-1: config 3 has no interface number 0 [ 292.604967][ T6069] usb 1-1: config 3 interface 1 has no altsetting 0 [ 292.618005][ T6069] usb 1-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice=ee.f1 [ 292.641592][ T6069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.480152][ T11] team0 (unregistering): Port device team_slave_1 removed [ 293.551815][ T11] team0 (unregistering): Port device team_slave_0 removed [ 294.100326][ T5113] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 294.247959][ T5105] Bluetooth: hci4: command tx timeout [ 294.252643][ T7302] team0: Port device team_slave_0 added [ 294.272570][ T7302] team0: Port device team_slave_1 added [ 294.279523][ T7420] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 294.288084][ T7420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'. [ 294.299307][ T7420] batadv0: entered promiscuous mode [ 294.304952][ T7420] batadv0: entered allmulticast mode [ 294.314796][ T5113] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.319385][ T7420] bridge0: port 3(batadv0) entered blocking state [ 294.325212][ T5113] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.343013][ T7420] bridge0: port 3(batadv0) entered disabled state [ 294.343694][ T5113] usb 2-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 294.359035][ T5113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.367194][ T5113] usb 2-1: SerialNumber: syz [ 294.372738][ T7420] bridge0: port 3(batadv0) entered blocking state [ 294.379423][ T7420] bridge0: port 3(batadv0) entered forwarding state [ 294.395031][ T6069] usb 1-1: string descriptor 0 read error: -71 [ 294.413197][ T6069] ftdi_sio 1-1:3.1: FTDI USB Serial Device converter detected [ 294.429426][ T6069] ftdi_sio ttyUSB0: unknown device type: 0xeef1 [ 294.449014][ T6069] usb 1-1: USB disconnect, device number 29 [ 294.495376][ T6069] ftdi_sio 1-1:3.1: device disconnected [ 294.560738][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.575418][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.602927][ T7302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.614341][ T7455] loop1: detected capacity change from 0 to 512 [ 294.626182][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.639589][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.670505][ T7302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.672075][ T7455] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.527: invalid indirect mapped block 256 (level 2) [ 294.704183][ T7440] lo speed is unknown, defaulting to 1000 [ 294.708335][ T7455] EXT4-fs (loop1): 2 truncates cleaned up [ 294.718045][ T7455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.820643][ T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 294.830320][ T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 294.872873][ T5113] usb 2-1: USB disconnect, device number 23 [ 294.950431][ T7302] hsr_slave_0: entered promiscuous mode [ 294.961698][ T7302] hsr_slave_1: entered promiscuous mode [ 294.970163][ T7302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.978084][ T7302] Cannot create hsr debugfs directory [ 295.153601][ T5116] udevd[5116]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.476140][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 295.947052][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.993083][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.327887][ T5105] Bluetooth: hci4: command tx timeout [ 296.498552][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.730543][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.932556][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.947520][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.963469][ T7440] bridge_slave_0: entered allmulticast mode [ 296.972964][ T7440] bridge_slave_0: entered promiscuous mode [ 297.055276][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.261027][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.272299][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.281791][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.291064][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.303396][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.317480][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.383619][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.511395][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.558639][ T7440] bridge_slave_1: entered allmulticast mode [ 297.648656][ T7440] bridge_slave_1: entered promiscuous mode [ 298.242751][ T7490] lo speed is unknown, defaulting to 1000 [ 298.256786][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.289626][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.376694][ T7440] team0: Port device team_slave_0 added [ 298.408557][ T5101] Bluetooth: hci4: command tx timeout [ 298.438188][ T7440] team0: Port device team_slave_1 added [ 298.543493][ T11] bridge0: port 3(batadv0) entered disabled state [ 298.553895][ T11] bridge_slave_1: left allmulticast mode [ 298.560695][ T11] bridge_slave_1: left promiscuous mode [ 298.566643][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.579740][ T11] bridge_slave_0: left allmulticast mode [ 298.585486][ T11] bridge_slave_0: left promiscuous mode [ 298.592269][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.041321][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.072688][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.101636][ T11] bond0 (unregistering): Released all slaves [ 299.260117][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.267261][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.297376][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.347534][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.354968][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.382422][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.441274][ T5105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.450421][ T5106] Bluetooth: hci2: command tx timeout [ 299.473540][ T5106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.491727][ T5106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.500933][ T5106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.519542][ T5106] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 299.527673][ T5106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.606651][ T7302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.635277][ T7440] hsr_slave_0: entered promiscuous mode [ 299.645596][ T7440] hsr_slave_1: entered promiscuous mode [ 299.655382][ T7440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.663540][ T7440] Cannot create hsr debugfs directory [ 299.671223][ T7302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.683702][ T7302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.764629][ T7302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.828568][ T11] hsr_slave_0: left promiscuous mode [ 299.834933][ T11] hsr_slave_1: left promiscuous mode [ 299.846198][ T11] batman_adv: batadv0: Removing interface: team0 [ 299.855026][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.863260][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.871898][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.879479][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.901593][ T11] veth1_macvtap: left promiscuous mode [ 299.907680][ T11] veth0_macvtap: left promiscuous mode [ 300.513753][ T5106] Bluetooth: hci4: command tx timeout [ 300.959055][ T11] team0 (unregistering): Port device team_slave_1 removed [ 301.176622][ T11] team0 (unregistering): Port device team_slave_0 removed [ 301.537613][ T5106] Bluetooth: hci2: command tx timeout [ 301.620448][ T5106] Bluetooth: hci5: command tx timeout [ 301.811462][ T7497] lo speed is unknown, defaulting to 1000 [ 301.899193][ T7490] chnl_net:caif_netlink_parms(): no params data found [ 302.213358][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.229468][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.236925][ T7490] bridge_slave_0: entered allmulticast mode [ 302.261381][ T7490] bridge_slave_0: entered promiscuous mode [ 302.646486][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.715927][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.803049][ T7490] bridge_slave_1: entered allmulticast mode [ 302.886345][ T7490] bridge_slave_1: entered promiscuous mode [ 303.312288][ T7490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.360259][ T7490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.575549][ T7490] team0: Port device team_slave_0 added [ 303.595647][ T7490] team0: Port device team_slave_1 added [ 303.608070][ T5106] Bluetooth: hci2: command tx timeout [ 303.687700][ T5101] Bluetooth: hci5: command tx timeout [ 303.936052][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.962927][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.027367][ T7490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.102714][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.119488][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.176906][ T7490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.239464][ T7497] chnl_net:caif_netlink_parms(): no params data found [ 304.472375][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.742224][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.788369][ T7490] hsr_slave_0: entered promiscuous mode [ 304.807865][ T7490] hsr_slave_1: entered promiscuous mode [ 304.931378][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.060752][ T7302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.106380][ T7440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.188804][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.577391][ T7440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.692052][ T5101] Bluetooth: hci2: command tx timeout [ 305.725015][ T7440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.767572][ T5101] Bluetooth: hci5: command tx timeout [ 305.821230][ T7440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.253692][ T7585] bond0: (slave tunl0): The slave device specified does not support setting the MAC address [ 306.264869][ T7585] bond0: (slave tunl0): Error -95 calling set_mac_address [ 306.333332][ T7302] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.463196][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.471710][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.479296][ T7497] bridge_slave_0: entered allmulticast mode [ 306.486939][ T7497] bridge_slave_0: entered promiscuous mode [ 306.542980][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.550221][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.571174][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.587539][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.594848][ T7497] bridge_slave_1: entered allmulticast mode [ 306.612488][ T7497] bridge_slave_1: entered promiscuous mode [ 306.724437][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.731706][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.769045][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.788456][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.873893][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.916974][ T11] bridge0: port 3(batadv0) entered disabled state [ 306.935571][ T11] bridge_slave_1: left allmulticast mode [ 306.941799][ T11] bridge_slave_1: left promiscuous mode [ 306.955941][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.967518][ T11] bridge_slave_0: left allmulticast mode [ 306.973244][ T11] bridge_slave_0: left promiscuous mode [ 306.982565][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.035757][ T7588] loop0: detected capacity change from 0 to 32768 [ 307.904678][ T5101] Bluetooth: hci5: command tx timeout [ 307.953431][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.970869][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.982674][ T11] bond0 (unregistering): Released all slaves [ 308.196585][ T7497] team0: Port device team_slave_0 added [ 308.212429][ T7497] team0: Port device team_slave_1 added [ 308.361894][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.407463][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.414483][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.451161][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.465132][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.473209][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.502053][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.512749][ T5200] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 308.647071][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.654347][ T4874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.693707][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.700995][ T4874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.724640][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.732021][ T5200] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 308.757407][ T5200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.775884][ T5200] usb 1-1: config 0 descriptor?? [ 308.820375][ T11] hsr_slave_0: left promiscuous mode [ 308.830453][ T11] hsr_slave_1: left promiscuous mode [ 308.858260][ T11] batman_adv: batadv0: Removing interface: team0 [ 308.866361][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.885028][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.897069][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.905733][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.943035][ T11] veth1_macvtap: left promiscuous mode [ 308.960122][ T11] veth0_macvtap: left promiscuous mode [ 309.406072][ T5200] video4linux radio32: keene_cmd_set failed (-71) [ 309.415507][ T5200] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 309.441422][ T5200] usb 1-1: USB disconnect, device number 30 [ 309.458485][ T11] team0 (unregistering): Port device team_slave_1 removed [ 309.551808][ T11] team0 (unregistering): Port device team_slave_0 removed [ 310.226711][ T7497] hsr_slave_0: entered promiscuous mode [ 310.277428][ T7497] hsr_slave_1: entered promiscuous mode [ 310.289508][ T7497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.314481][ T7497] Cannot create hsr debugfs directory [ 310.372736][ T5113] lo speed is unknown, defaulting to 1000 [ 310.894921][ T7440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.966035][ T7490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.140023][ T7490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.171250][ T7490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.272450][ T7490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.333304][ T7302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.501264][ T7497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.707001][ T7497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.735438][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.854958][ T7497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.900760][ T7302] veth0_vlan: entered promiscuous mode [ 311.983114][ T7497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.033358][ T7302] veth1_vlan: entered promiscuous mode [ 312.100228][ T7440] veth0_vlan: entered promiscuous mode [ 312.224235][ T7440] veth1_vlan: entered promiscuous mode [ 312.311595][ T7302] veth0_macvtap: entered promiscuous mode [ 312.320241][ T7497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.358721][ T7497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.380557][ T7497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.403848][ T7497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.442270][ T7302] veth1_macvtap: entered promiscuous mode [ 312.481892][ T7490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.548859][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.560500][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.574062][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.585063][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.598479][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.641231][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.653035][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.666150][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.683426][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.694972][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.707053][ T7440] veth0_macvtap: entered promiscuous mode [ 312.726696][ T7302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.736366][ T7302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.746399][ T7302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.756491][ T7302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.779867][ T7490] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.873938][ T7440] veth1_macvtap: entered promiscuous mode [ 312.924685][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.932145][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.053271][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.060767][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.300335][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.320734][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.332724][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.343618][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.353665][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.364434][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.381328][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.469230][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.493226][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.540262][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.562251][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.582579][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.596785][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.615253][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.626327][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.646057][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.719478][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.005496][ T7440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.053578][ T7440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.106881][ T7440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.157315][ T7440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.316175][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.412171][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.532507][ T7497] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.620301][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.627615][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.703509][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.710853][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.091010][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.111848][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.268916][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.292039][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.301238][ T7490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.518421][ T7490] veth0_vlan: entered promiscuous mode [ 315.571469][ T7490] veth1_vlan: entered promiscuous mode [ 315.708094][ T7490] veth0_macvtap: entered promiscuous mode [ 315.738887][ T7490] veth1_macvtap: entered promiscuous mode [ 315.810056][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.830817][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.857400][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.877222][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.897573][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.917232][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.942494][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.959638][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.985473][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.034105][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.045801][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.057943][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.075959][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.099230][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.124075][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.154643][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.185985][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.226536][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.293834][ T7490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.314526][ T7490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.341756][ T7490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.422268][ T7490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.892986][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.339141][ T2826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.367239][ T2826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.459154][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.477654][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.694244][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.700877][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.087998][ T7680] loop2: detected capacity change from 0 to 32768 [ 318.098307][ T7680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.553 (7680) [ 318.121973][ T7680] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.123448][ T7497] veth0_vlan: entered promiscuous mode [ 318.132322][ T7680] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 318.146860][ T7680] BTRFS info (device loop2): using free-space-tree [ 318.178224][ T7497] veth1_vlan: entered promiscuous mode [ 318.247486][ T7497] veth0_macvtap: entered promiscuous mode [ 318.275691][ T7497] veth1_macvtap: entered promiscuous mode [ 318.587071][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.648816][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.658847][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.669417][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.679509][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.690036][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.700232][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.711088][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.730643][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.013484][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.254280][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.459647][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.514318][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.532344][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.554172][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.565122][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.592050][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.602734][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.615326][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.625431][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.640300][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.652918][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.680161][ T7497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.694183][ T7302] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.706892][ T7497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.717829][ T7497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.726841][ T7497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.777438][ T7712] loop1: detected capacity change from 0 to 4096 [ 320.074919][ T2826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.102124][ T2826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.049156][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 321.610809][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.707399][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.884923][ T7727] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 321.993989][ T7727] batman_adv: batadv0: Adding interface: team0 [ 322.009434][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 322.059442][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 322.097366][ T7727] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.193365][ T7727] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 322.272822][ T7729] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 322.351184][ T7729] netlink: 2 bytes leftover after parsing attributes in process `syz.3.559'. [ 322.464091][ T7729] team0: entered promiscuous mode [ 322.639700][ T7729] team_slave_0: entered promiscuous mode [ 322.645685][ T7729] team_slave_1: entered promiscuous mode [ 322.654671][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.305866][ T7729] batman_adv: batadv0: Interface activated: team0 [ 323.365073][ T7729] batman_adv: batadv0: Interface deactivated: team0 [ 323.409663][ T7729] batman_adv: batadv0: Removing interface: team0 [ 323.468747][ T7729] bridge0: port 3(team0) entered blocking state [ 323.475223][ T7729] bridge0: port 3(team0) entered disabled state [ 323.509883][ T7729] team0: entered allmulticast mode [ 323.599977][ T7729] team_slave_0: entered allmulticast mode [ 323.605796][ T7729] team_slave_1: entered allmulticast mode [ 323.632901][ T7729] bridge0: port 3(team0) entered blocking state [ 323.639427][ T7729] bridge0: port 3(team0) entered forwarding state [ 325.091985][ T7774] loop1: detected capacity change from 0 to 4096 [ 325.638060][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 326.244378][ T7778] loop0: detected capacity change from 0 to 4096 [ 326.459880][ T7764] loop3: detected capacity change from 0 to 32768 [ 326.508027][ T7764] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.566 (7764) [ 326.585683][ T7764] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.637233][ T7764] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 326.645954][ T7764] BTRFS info (device loop3): using free-space-tree [ 326.677802][ T7788] capability: warning: `syz.1.574' uses deprecated v2 capabilities in a way that may be insecure [ 326.694740][ T7788] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.574' sets config #0 [ 327.002346][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 327.122166][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 327.155060][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 327.503530][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 327.538166][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 327.634537][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 327.741354][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 327.751806][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 327.762462][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 327.773433][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 327.798424][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 327.870362][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 327.994813][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 328.463266][ T7764] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 328.697322][ T7764] BTRFS error (device loop3): open_ctree failed [ 328.847730][ T7820] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 328.892595][ T4874] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 329.009229][ T7820] batman_adv: batadv0: Adding interface: team0 [ 329.015466][ T7820] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.047329][ T7820] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 329.217013][ T7822] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 329.266581][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 329.317948][ T7822] netlink: 2 bytes leftover after parsing attributes in process `syz.2.578'. [ 329.340986][ T4874] usb 2-1: Using ep0 maxpacket: 8 [ 329.351373][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 329.365991][ T7822] team0: entered promiscuous mode [ 329.372475][ T7822] team_slave_0: entered promiscuous mode [ 329.379145][ T4874] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 329.483688][ T7822] team_slave_1: entered promiscuous mode [ 329.851603][ T7822] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.924978][ T7822] batman_adv: batadv0: Interface activated: team0 [ 329.967626][ T7822] batman_adv: batadv0: Interface deactivated: team0 [ 330.035542][ T7822] batman_adv: batadv0: Removing interface: team0 [ 330.157823][ T4874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.167190][ T4874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.175232][ T4874] usb 2-1: Product: syz [ 330.185107][ T7822] bridge0: port 3(team0) entered blocking state [ 330.191558][ T4874] usb 2-1: Manufacturer: syz [ 330.196196][ T4874] usb 2-1: SerialNumber: syz [ 330.224296][ T4874] usb 2-1: bad CDC descriptors [ 330.242200][ T7822] bridge0: port 3(team0) entered disabled state [ 330.256989][ T7834] loop3: detected capacity change from 0 to 512 [ 330.284348][ T7822] team0: entered allmulticast mode [ 330.294589][ T7834] EXT4-fs: Ignoring removed nobh option [ 330.307189][ T7822] team_slave_0: entered allmulticast mode [ 330.313770][ T7822] team_slave_1: entered allmulticast mode [ 330.321559][ T7834] EXT4-fs: Mount option(s) incompatible with ext2 [ 330.345599][ T7822] bridge0: port 3(team0) entered blocking state [ 330.352117][ T7822] bridge0: port 3(team0) entered forwarding state [ 332.807756][ T7850] loop3: detected capacity change from 0 to 32768 [ 332.830439][ T7850] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.586 (7850) [ 332.849673][ T7850] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 332.860161][ T7850] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 332.869013][ T7850] BTRFS info (device loop3): using free-space-tree [ 332.912538][ T7852] netlink: 'syz.0.585': attribute type 10 has an invalid length. [ 333.981335][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 333.992239][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 334.009945][ T7852] batman_adv: batadv0: Adding interface: team0 [ 334.026775][ T6069] usb 2-1: USB disconnect, device number 24 [ 334.034763][ T7852] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.118044][ T7852] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 334.236698][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.558679][ T4874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 334.763947][ T4874] usb 3-1: Using ep0 maxpacket: 8 [ 334.907434][ T4874] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 335.004927][ T4874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.057261][ T4874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.126734][ T4874] usb 3-1: Product: syz [ 335.143694][ T7889] loop4: detected capacity change from 0 to 1024 [ 335.157585][ T4874] usb 3-1: Manufacturer: syz [ 335.186731][ T4874] usb 3-1: SerialNumber: syz [ 335.267624][ T4874] usb 3-1: bad CDC descriptors [ 335.289215][ T7440] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.917811][ T6069] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 336.845804][ T6069] usb 5-1: config 0 interface 0 has no altsetting 0 [ 336.894471][ T6069] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 336.955436][ T6069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.051450][ T7887] loop1: detected capacity change from 0 to 32768 [ 337.144048][ T7887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.590 (7887) [ 337.291579][ T4874] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 337.316210][ T6069] usb 5-1: config 0 descriptor?? [ 337.333475][ T7887] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.348970][ T7887] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 337.540931][ T4874] usb 1-1: Using ep0 maxpacket: 8 [ 337.563114][ T7887] BTRFS info (device loop1): using free-space-tree [ 337.624306][ T4874] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 337.827253][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 337.890161][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 337.953760][ T4874] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.011956][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 338.012764][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 338.028110][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 338.056127][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 338.064769][ T4874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.108320][ T4874] usb 1-1: Product: syz [ 338.117240][ T4874] usb 1-1: Manufacturer: syz [ 338.121333][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 338.125163][ T4874] usb 1-1: SerialNumber: syz [ 338.134991][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 338.136223][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 338.179710][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 338.195719][ T4874] usb 1-1: bad CDC descriptors [ 338.225484][ T7887] BTRFS error (device loop1): open_ctree failed [ 339.242979][ T4874] usb 3-1: USB disconnect, device number 17 [ 339.566728][ T6069] video4linux radio32: keene_cmd_main failed (-71) [ 339.586075][ T6069] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 339.596795][ T6069] usb 5-1: USB disconnect, device number 23 [ 339.687467][ T5101] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 339.696675][ T5101] Bluetooth: hci5: Injecting HCI hardware error event [ 339.707555][ T5101] Bluetooth: hci5: hardware error 0x00 [ 339.737455][ T7940] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 339.774445][ T7940] bridge0: port 3(team0) entered disabled state [ 340.069345][ T7940] team0: left allmulticast mode [ 340.352467][ T7940] team_slave_0: left allmulticast mode [ 340.488777][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 340.686570][ T7940] team_slave_1: left allmulticast mode [ 340.692738][ T7940] team0: left promiscuous mode [ 340.697855][ T7940] team_slave_0: left promiscuous mode [ 340.703444][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 340.712847][ T7940] team_slave_1: left promiscuous mode [ 340.733418][ T7940] bridge0: port 3(team0) entered disabled state [ 340.858431][ T7940] batman_adv: batadv0: Adding interface: team0 [ 340.864698][ T7940] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.930720][ T7952] loop4: detected capacity change from 0 to 1024 [ 340.968305][ T7940] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 341.768146][ T5101] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 342.492495][ T58] usb 1-1: USB disconnect, device number 31 [ 344.958127][ T7990] loop1: detected capacity change from 0 to 1024 [ 345.635892][ T7996] Bluetooth: MGMT ver 1.23 [ 345.845534][ T8001] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 345.945064][ T8001] batman_adv: batadv0: Adding interface: team0 [ 345.979208][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 345.979242][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 346.017180][ T8001] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.017224][ T8001] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 347.687873][ T5106] Bluetooth: hci0: command tx timeout [ 347.811221][ T2826] Bluetooth: hci6: Frame reassembly failed (-84) [ 349.673630][ T5106] Bluetooth: hci6: command 0x1003 tx timeout [ 349.683424][ T5101] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 349.817034][ T8029] loop0: detected capacity change from 0 to 4096 [ 350.225612][ T8038] loop1: detected capacity change from 0 to 1024 [ 350.682881][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 353.755749][ T8065] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 353.795819][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 353.864666][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 355.535450][ T8082] loop1: detected capacity change from 0 to 32768 [ 355.545867][ T8082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.645 (8082) [ 356.209650][ T6069] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 356.598096][ T8082] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 356.609897][ T8082] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 356.618705][ T8082] BTRFS info (device loop1): using free-space-tree [ 356.766594][ T6069] usb 5-1: config 0 interface 0 has no altsetting 0 [ 356.781641][ T6069] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 356.839673][ T6069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.897518][ T6069] usb 5-1: config 0 descriptor?? [ 356.905739][ T8102] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 357.316386][ T5101] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 357.322532][ T5106] Bluetooth: hci6: command 0x1003 tx timeout [ 357.358199][ T8102] bridge0: port 3(team0) entered disabled state [ 358.328163][ T8102] team0: left allmulticast mode [ 358.345456][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 358.393561][ T8102] team_slave_0: left allmulticast mode [ 358.437312][ T8102] team_slave_1: left allmulticast mode [ 358.477245][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 358.487534][ T8102] team0: left promiscuous mode [ 358.503992][ T8102] team_slave_0: left promiscuous mode [ 358.510509][ T8102] team_slave_1: left promiscuous mode [ 358.516437][ T8102] bridge0: port 3(team0) entered disabled state [ 358.527364][ T7490] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 358.735250][ T8102] batman_adv: batadv0: Adding interface: team0 [ 358.929616][ T8102] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.086744][ T8102] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 359.736463][ T6069] video4linux radio32: keene_cmd_main failed (-110) [ 359.757015][ T6069] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 359.793349][ T5152] usb 5-1: USB disconnect, device number 24 [ 359.838487][ T8107] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 360.052255][ T8107] netlink: 2 bytes leftover after parsing attributes in process `syz.3.647'. [ 360.750317][ T8107] team0: entered promiscuous mode [ 360.755441][ T8107] team_slave_0: entered promiscuous mode [ 360.843293][ T8107] team_slave_1: entered promiscuous mode [ 360.851964][ T8107] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.860866][ T8107] batman_adv: batadv0: Interface activated: team0 [ 360.878426][ T8107] batman_adv: batadv0: Interface deactivated: team0 [ 360.898771][ T8107] batman_adv: batadv0: Removing interface: team0 [ 360.968154][ T8107] bridge0: port 3(team0) entered blocking state [ 360.974619][ T8107] bridge0: port 3(team0) entered disabled state [ 361.050350][ T8107] team0: entered allmulticast mode [ 361.097226][ T8107] team_slave_0: entered allmulticast mode [ 361.137215][ T8107] team_slave_1: entered allmulticast mode [ 361.204858][ T8107] bridge0: port 3(team0) entered blocking state [ 361.211529][ T8107] bridge0: port 3(team0) entered forwarding state [ 361.256250][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 361.267771][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 361.287234][ T8147] netlink: 'syz.0.654': attribute type 10 has an invalid length. [ 361.593846][ T8161] 9pnet_fd: Insufficient options for proto=fd [ 361.809149][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 361.809169][ T29] audit: type=1326 audit(1720221742.239:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 361.870072][ T29] audit: type=1326 audit(1720221742.239:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 361.981971][ T29] audit: type=1326 audit(1720221742.249:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 362.155399][ T29] audit: type=1326 audit(1720221742.249:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 362.478962][ T29] audit: type=1326 audit(1720221742.249:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 362.501897][ T29] audit: type=1326 audit(1720221742.309:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 362.610689][ T29] audit: type=1326 audit(1720221742.309:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 362.657455][ T8166] loop0: detected capacity change from 0 to 32768 [ 362.666003][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 362.677388][ T8166] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.660 (8166) [ 362.694017][ T29] audit: type=1326 audit(1720221742.309:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 362.716351][ T8166] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 362.726613][ T8166] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 362.734105][ T29] audit: type=1326 audit(1720221742.309:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 362.735441][ T8166] BTRFS info (device loop0): using free-space-tree [ 362.869468][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 362.893730][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.933991][ T29] audit: type=1326 audit(1720221742.329:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4a31175bd9 code=0x7ffc0000 [ 362.959634][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.000338][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 363.062425][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 363.113215][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 363.149066][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.251440][ T25] usb 2-1: Product: syz [ 363.334010][ T25] usb 2-1: Manufacturer: syz [ 363.729171][ T25] usb 2-1: SerialNumber: syz [ 363.739224][ T25] usb 2-1: config 0 descriptor?? [ 363.758527][ T25] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 364.510246][ T5188] usb 2-1: USB disconnect, device number 25 [ 364.670800][ T5097] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 365.102575][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 366.517201][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 366.716890][ T8214] netlink: 'syz.1.669': attribute type 10 has an invalid length. [ 366.749829][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 366.768008][ T8215] netlink: 'syz.2.670': attribute type 10 has an invalid length. [ 366.784394][ T8214] netlink: 'syz.1.669': attribute type 10 has an invalid length. [ 366.792294][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 366.807610][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 366.827223][ T8214] netlink: 2 bytes leftover after parsing attributes in process `syz.1.669'. [ 366.840207][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.855903][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 366.870545][ T25] usb 1-1: config 0 descriptor?? [ 366.878336][ T8214] team0: entered promiscuous mode [ 366.883432][ T8214] team_slave_0: entered promiscuous mode [ 366.893431][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 366.907342][ T8214] team_slave_1: entered promiscuous mode [ 366.915393][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.922621][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 366.957052][ T8214] batman_adv: batadv0: Interface activated: team0 [ 366.983611][ T8214] batman_adv: batadv0: Interface deactivated: team0 [ 367.001636][ T8214] batman_adv: batadv0: Removing interface: team0 [ 367.080415][ T8214] bridge0: port 3(team0) entered blocking state [ 367.128591][ T8214] bridge0: port 3(team0) entered disabled state [ 367.242934][ T8214] team0: entered allmulticast mode [ 367.267506][ T8214] team_slave_0: entered allmulticast mode [ 367.274570][ T8214] team_slave_1: entered allmulticast mode [ 367.305385][ T8214] bridge0: port 3(team0) entered blocking state [ 367.312023][ T8214] bridge0: port 3(team0) entered forwarding state [ 368.017435][ T8236] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 368.186265][ T25] video4linux radio32: keene_cmd_main failed (-110) [ 368.226839][ T8238] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 368.251503][ T25] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 368.306401][ T5188] usb 1-1: USB disconnect, device number 32 [ 368.426866][ T8247] 9pnet_fd: Insufficient options for proto=fd [ 368.711771][ T8245] loop3: detected capacity change from 0 to 32768 [ 368.751672][ T8245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.674 (8245) [ 368.769495][ T8245] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.779860][ T8245] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 368.789957][ T8245] BTRFS info (device loop3): using free-space-tree [ 368.869216][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 368.869236][ T29] audit: type=1326 audit(1720221749.319:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 369.150202][ T29] audit: type=1326 audit(1720221749.349:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 370.080874][ T29] audit: type=1326 audit(1720221749.349:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 370.390162][ T8273] loop2: detected capacity change from 0 to 512 [ 370.468286][ T8273] EXT4-fs: Ignoring removed nobh option [ 370.494996][ T29] audit: type=1326 audit(1720221749.349:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 370.554216][ T8273] EXT4-fs: Mount option(s) incompatible with ext2 [ 370.652259][ T29] audit: type=1326 audit(1720221749.349:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 370.686759][ T29] audit: type=1326 audit(1720221749.349:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 370.709186][ T29] audit: type=1326 audit(1720221749.349:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 370.733731][ T5152] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 370.741594][ T29] audit: type=1326 audit(1720221749.349:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 370.767999][ T29] audit: type=1326 audit(1720221749.379:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 371.056296][ T29] audit: type=1326 audit(1720221749.379:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8487d75bd9 code=0x7ffc0000 [ 371.069659][ T7440] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.579547][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 371.614868][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 371.641780][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 371.658298][ T5152] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.831867][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 371.847179][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 371.875811][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 371.878940][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 371.945202][ T5152] usb 5-1: string descriptor 0 read error: -71 [ 371.951765][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.959133][ T9] usb 2-1: config 0 descriptor?? [ 372.030481][ T5152] usb 5-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 372.047052][ T5152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.104774][ T8295] netlink: 'syz.2.682': attribute type 10 has an invalid length. [ 372.114197][ T5152] usb 5-1: config 0 descriptor?? [ 372.167907][ T5152] usb 5-1: can't set config #0, error -71 [ 372.234379][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.682'. [ 372.257499][ T5152] usb 5-1: USB disconnect, device number 25 [ 372.406216][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 373.144483][ T9] video4linux radio32: keene_cmd_main failed (-71) [ 373.157922][ T8315] 9pnet_fd: Insufficient options for proto=fd [ 373.160580][ T9] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 373.202638][ T9] usb 2-1: USB disconnect, device number 26 [ 373.301889][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 374.025501][ T6069] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 374.384227][ T6069] usb 1-1: config 0 interface 0 has no altsetting 0 [ 374.407305][ T6069] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 374.467308][ T6069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.677811][ T5101] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 374.688126][ T5101] Bluetooth: hci2: Injecting HCI hardware error event [ 374.699695][ T5101] Bluetooth: hci2: hardware error 0x00 [ 374.716006][ T5152] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 374.774594][ T8333] loop2: detected capacity change from 0 to 512 [ 374.782870][ T6069] usb 1-1: config 0 descriptor?? [ 374.827473][ T8333] EXT4-fs: Ignoring removed nobh option [ 374.846532][ T8333] EXT4-fs: Mount option(s) incompatible with ext2 [ 375.018073][ T5152] usb 4-1: Using ep0 maxpacket: 32 [ 375.128206][ T5152] usb 4-1: config 1 interface 0 has no altsetting 0 [ 375.640567][ T5152] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 375.653533][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.667537][ T5152] usb 4-1: Product: 믃謂邐བྷ砲㨹鄚螹㿝뺻䌎 [ 375.674885][ T5152] usb 4-1: Manufacturer: 㰊 [ 375.707315][ T5152] usb 4-1: SerialNumber: й [ 376.510882][ T6069] video4linux radio32: keene_cmd_main failed (-110) [ 376.518278][ T6069] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 376.590194][ T5152] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 376.601566][ T4533] bcm5974 4-1:1.0: could not read from device [ 376.652286][ T4533] bcm5974 4-1:1.0: could not read from device [ 376.704896][ T4533] bcm5974 4-1:1.0: could not read from device [ 376.711401][ T5152] usb 4-1: USB disconnect, device number 23 [ 376.863476][ T5101] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 376.994615][ T8351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 377.000782][ T8351] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 377.091478][ T8351] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.097842][ T8351] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 377.802808][ T8344] loop1: detected capacity change from 0 to 32768 [ 379.234772][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.246949][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.791993][ T8368] loop2: detected capacity change from 0 to 32768 [ 381.670520][ T58] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 381.909375][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 381.924047][ T58] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 381.937159][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.955830][ T58] usb 2-1: Product: syz [ 381.965677][ T58] usb 2-1: Manufacturer: syz [ 381.988571][ T58] usb 2-1: SerialNumber: syz [ 381.999255][ T58] usb 2-1: config 0 descriptor?? [ 382.612753][ T8394] netlink: 'syz.1.702': attribute type 16 has an invalid length. [ 382.620774][ T8394] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.702'. [ 382.642273][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 384.471968][ T58] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 384.483658][ T58] usb 2-1: USB disconnect, device number 27 [ 384.783534][ T5116] udevd[5116]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.369302][ T8415] program syz.2.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.037252][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 388.239471][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 388.275162][ T25] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 388.294021][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.312445][ T25] usb 3-1: Product: syz [ 388.326909][ T25] usb 3-1: Manufacturer: syz [ 388.337158][ T25] usb 3-1: SerialNumber: syz [ 388.355101][ T25] usb 3-1: config 0 descriptor?? [ 389.457545][ T8421] netlink: 'syz.2.718': attribute type 16 has an invalid length. [ 389.465390][ T8421] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.718'. [ 389.505716][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 389.950849][ T8427] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 389.977168][ T8427] bridge0: port 3(team0) entered disabled state [ 390.006167][ T8427] team0: left allmulticast mode [ 390.026914][ T8427] team_slave_0: left allmulticast mode [ 390.037031][ T8427] team_slave_1: left allmulticast mode [ 390.046370][ T8427] team0: left promiscuous mode [ 390.056840][ T8427] team_slave_0: left promiscuous mode [ 390.076978][ T8427] team_slave_1: left promiscuous mode [ 390.098013][ T8427] bridge0: port 3(team0) entered disabled state [ 390.118520][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 390.138261][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 390.169089][ T8427] batman_adv: batadv0: Adding interface: team0 [ 390.175327][ T8427] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.248377][ T8427] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 390.271772][ T8428] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 390.287314][ T8428] netlink: 2 bytes leftover after parsing attributes in process `syz.1.721'. [ 390.326826][ T8428] team0: entered promiscuous mode [ 390.355981][ T8428] team_slave_0: entered promiscuous mode [ 390.372281][ T8428] team_slave_1: entered promiscuous mode [ 390.397705][ T8428] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.415844][ T8428] batman_adv: batadv0: Interface activated: team0 [ 390.441432][ T8428] batman_adv: batadv0: Interface deactivated: team0 [ 390.461962][ T8428] batman_adv: batadv0: Removing interface: team0 [ 390.506056][ T8428] bridge0: port 3(team0) entered blocking state [ 390.517501][ T8428] bridge0: port 3(team0) entered disabled state [ 390.535094][ T8428] team0: entered allmulticast mode [ 390.549012][ T8428] team_slave_0: entered allmulticast mode [ 390.565903][ T8428] team_slave_1: entered allmulticast mode [ 390.591269][ T8428] bridge0: port 3(team0) entered blocking state [ 390.597916][ T8428] bridge0: port 3(team0) entered forwarding state [ 390.872578][ T25] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 390.908366][ T25] usb 3-1: USB disconnect, device number 18 [ 391.427181][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 391.469770][ T8434] loop1: detected capacity change from 0 to 32768 [ 392.459446][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 392.467209][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 392.476300][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.509673][ T25] usb 3-1: config 0 descriptor?? [ 394.437458][ T25] video4linux radio33: keene_cmd_main failed (-110) [ 394.449285][ T25] radio-keene 3-1:0.0: V4L2 device registered as radio33 [ 394.472625][ T5116] udevd[5116]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.573155][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.593556][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.012289][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.025502][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.847469][ T30] INFO: task kworker/0:8:5188 blocked for more than 143 seconds. [ 521.855288][ T30] Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 521.872222][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.881013][ T30] task:kworker/0:8 state:D stack:21392 pid:5188 tgid:5188 ppid:2 flags:0x00004000 [ 521.891248][ T30] Workqueue: events rfkill_global_led_trigger_worker SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 521.899011][ T30] Call Trace: [ 521.902484][ T30] [ 521.906222][ T30] __schedule+0x1800/0x4a60 [ 521.911044][ T30] ? __pfx___schedule+0x10/0x10 [ 521.915932][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.922063][ T30] ? __pfx_lock_release+0x10/0x10 [ 521.957129][ T30] ? kick_pool+0x45c/0x620 [ 521.961734][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.977569][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 521.982844][ T30] ? schedule+0x90/0x320 [ 521.987171][ T30] schedule+0x14b/0x320 [ 521.991372][ T30] schedule_preempt_disabled+0x13/0x30 [ 521.996835][ T30] __mutex_lock+0x6a4/0xd70 [ 522.001572][ T30] ? __mutex_lock+0x527/0xd70 [ 522.006286][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 522.013779][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 522.018955][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 522.025056][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 522.031466][ T30] ? process_scheduled_works+0x945/0x1830 [ 522.040646][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 522.046771][ T30] ? process_scheduled_works+0x945/0x1830 [ 522.052568][ T30] process_scheduled_works+0xa2c/0x1830 [ 522.058240][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.064265][ T30] ? assign_work+0x364/0x3d0 [ 522.068945][ T30] worker_thread+0x86d/0xd40 [ 522.073571][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 522.080865][ T30] ? __kthread_parkme+0x169/0x1d0 [ 522.085946][ T30] ? __pfx_worker_thread+0x10/0x10 [ 522.091275][ T30] kthread+0x2f0/0x390 [ 522.095362][ T30] ? __pfx_worker_thread+0x10/0x10 [ 522.100544][ T30] ? __pfx_kthread+0x10/0x10 [ 522.105187][ T30] ret_from_fork+0x4b/0x80 [ 522.109669][ T30] ? __pfx_kthread+0x10/0x10 [ 522.114273][ T30] ret_from_fork_asm+0x1a/0x30 [ 522.120224][ T30] [ 522.123319][ T30] INFO: task syz.0.691:8322 blocked for more than 143 seconds. [ 522.131499][ T30] Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 522.138699][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.147665][ T30] task:syz.0.691 state:D stack:24672 pid:8322 tgid:8322 ppid:5097 flags:0x00004004 [ 522.161016][ T30] Call Trace: [ 522.164432][ T30] [ 522.167439][ T30] __schedule+0x1800/0x4a60 [ 522.171972][ T30] ? __pfx___schedule+0x10/0x10 [ 522.176826][ T30] ? __pfx_lock_release+0x10/0x10 [ 522.181918][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 522.187582][ T30] ? schedule+0x90/0x320 [ 522.191874][ T30] schedule+0x14b/0x320 [ 522.196070][ T30] schedule_preempt_disabled+0x13/0x30 [ 522.201834][ T30] __mutex_lock+0x6a4/0xd70 [ 522.206385][ T30] ? kobject_put+0x443/0x480 [ 522.211057][ T30] ? __mutex_lock+0x527/0xd70 [ 522.215743][ T30] ? rfkill_unregister+0xd0/0x230 [ 522.220934][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 522.225999][ T30] ? __pfx_device_del+0x10/0x10 [ 522.230947][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 522.237148][ T30] rfkill_unregister+0xd0/0x230 [ 522.242069][ T30] nfc_unregister_device+0x96/0x2a0 [ 522.247517][ T30] virtual_ncidev_close+0x59/0x90 [ 522.252582][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 522.258501][ T30] __fput+0x24a/0x8a0 [ 522.262531][ T30] task_work_run+0x24f/0x310 [ 522.267222][ T30] ? __pfx_task_work_run+0x10/0x10 [ 522.272377][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 522.278199][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 522.283850][ T30] do_syscall_64+0x100/0x230 [ 522.288516][ T30] ? clear_bhb_loop+0x35/0x90 [ 522.293250][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.299274][ T30] RIP: 0033:0x7f6defd75bd9 [ 522.303714][ T30] RSP: 002b:00007ffd7c59a0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 522.312274][ T30] RAX: 0000000000000000 RBX: 00007f6deff05a60 RCX: 00007f6defd75bd9 [ 522.320372][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 522.328531][ T30] RBP: 00007f6deff05a60 R08: 0000000000000006 R09: 000000197c59a3df [ 522.336530][ T30] R10: 00000000005e87f4 R11: 0000000000000246 R12: 000000000005c9bf [ 522.344614][ T30] R13: 0000000000000032 R14: 00007f6deff05a60 R15: 00007f6deff04110 [ 522.352667][ T30] [ 522.355720][ T30] INFO: task syz.4.698:8351 blocked for more than 143 seconds. [ 522.364403][ T30] Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 522.371603][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.380375][ T30] task:syz.4.698 state:D stack:24624 pid:8351 tgid:8345 ppid:7497 flags:0x00004006 [ 522.390653][ T30] Call Trace: [ 522.393956][ T30] [ 522.396910][ T30] __schedule+0x1800/0x4a60 [ 522.401537][ T30] ? __pfx___schedule+0x10/0x10 [ 522.406422][ T30] ? __pfx_lock_release+0x10/0x10 [ 522.411644][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 522.417226][ T30] ? schedule+0x90/0x320 [ 522.421510][ T30] schedule+0x14b/0x320 [ 522.425720][ T30] schedule_preempt_disabled+0x13/0x30 [ 522.431267][ T30] __mutex_lock+0x6a4/0xd70 [ 522.435808][ T30] ? __mutex_lock+0x527/0xd70 [ 522.440592][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 522.445912][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 522.451098][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 522.456356][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 522.462806][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 522.469258][ T30] nfc_rfkill_set_block+0x50/0x310 [ 522.474420][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 522.480256][ T30] rfkill_set_block+0x1f1/0x440 [ 522.485157][ T30] rfkill_fop_write+0x5bb/0x790 [ 522.490622][ T30] ? common_file_perm+0x1a6/0x210 [ 522.495683][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 522.501201][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 522.506616][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 522.511540][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 522.516945][ T30] vfs_write+0x2a2/0xc90 [ 522.521311][ T30] ? __pfx_vfs_write+0x10/0x10 [ 522.526121][ T30] ? do_futex+0x33b/0x560 [ 522.530532][ T30] ? __fget_files+0x29/0x470 [ 522.535154][ T30] ? __fget_files+0x3f6/0x470 [ 522.539957][ T30] ? __fget_files+0x29/0x470 [ 522.544585][ T30] ksys_write+0x1a0/0x2c0 [ 522.549064][ T30] ? __pfx_ksys_write+0x10/0x10 [ 522.553955][ T30] ? do_syscall_64+0x100/0x230 [ 522.558842][ T30] ? do_syscall_64+0xb6/0x230 [ 522.563552][ T30] do_syscall_64+0xf3/0x230 [ 522.568129][ T30] ? clear_bhb_loop+0x35/0x90 [ 522.572846][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.578855][ T30] RIP: 0033:0x7f8487d75bd9 [ 522.583309][ T30] RSP: 002b:00007f8488a66048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 522.591819][ T30] RAX: ffffffffffffffda RBX: 00007f8487f04038 RCX: 00007f8487d75bd9 [ 522.599901][ T30] RDX: 0000000000000008 RSI: 00000000200004c0 RDI: 0000000000000005 [ 522.608009][ T30] RBP: 00007f8487de4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 522.616103][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.624197][ T30] R13: 000000000000006e R14: 00007f8487f04038 R15: 00007ffd0cb837b8 [ 522.632248][ T30] [ 522.635312][ T30] [ 522.635312][ T30] Showing all locks held in the system: [ 522.643154][ T30] 1 lock held by khungtaskd/30: [ 522.648432][ T30] #0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 522.658564][ T30] 3 locks held by kworker/u8:3/52: [ 522.663695][ T30] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 522.673753][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 522.685293][ T30] #2: ffff8880b942a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 522.694755][ T30] 4 locks held by udevd/4548: [ 522.699551][ T30] #0: ffff88806c118d58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 522.708477][ T30] #1: ffff88802489a088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 522.718018][ T30] #2: ffff8880296380f8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 522.727546][ T30] #3: ffff888063f91100 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 522.736759][ T30] 2 locks held by getty/4854: [ 522.741553][ T30] #0: ffff88802a95f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 522.751459][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 522.761733][ T30] 3 locks held by kworker/0:8/5188: [ 522.766948][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 522.778160][ T30] #1: ffffc9000435fd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 522.791736][ T30] #2: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 522.803211][ T30] 1 lock held by syz-executor/7490: [ 522.808567][ T30] #0: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 522.818814][ T30] 1 lock held by kworker/u8:6/8049: [ 522.824036][ T30] 2 locks held by syz.0.691/8322: [ 522.829123][ T30] #0: ffff88802bce1100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 522.839042][ T30] #1: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 522.849290][ T30] 2 locks held by syz.4.698/8351: [ 522.854339][ T30] #0: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 522.864567][ T30] #1: ffff88802bce1100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 522.874338][ T30] 1 lock held by syz.3.710/8392: [ 522.879445][ T30] #0: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 522.891016][ T30] 2 locks held by syz-executor/8406: [ 522.896699][ T30] #0: ffff88807d2b1118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 522.907633][ T30] #1: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 522.918120][ T30] 2 locks held by syz-executor/8418: [ 522.923444][ T30] #0: ffff888067a93918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 522.933558][ T30] #1: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 522.943876][ T30] 3 locks held by syz.2.722/8432: [ 522.949000][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 522.957583][ T30] #1: ffff888063f91100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x9c/0x320 [ 522.970498][ T30] #2: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 522.980697][ T30] 2 locks held by syz-executor/8440: [ 522.986007][ T30] #0: ffff888023986118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 522.996262][ T30] #1: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 523.006821][ T30] 1 lock held by syz-executor/8451: [ 523.012249][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.021017][ T30] 1 lock held by syz-executor/8453: [ 523.026243][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.034824][ T30] 1 lock held by syz-executor/8455: [ 523.040126][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.048740][ T30] 1 lock held by syz-executor/8457: [ 523.053967][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.062529][ T30] 1 lock held by syz-executor/8459: [ 523.067821][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.076353][ T30] 1 lock held by syz-executor/8461: [ 523.081697][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.090250][ T30] 1 lock held by syz-executor/8463: [ 523.095444][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.104014][ T30] 1 lock held by syz-executor/8468: [ 523.109320][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.117922][ T30] 1 lock held by syz-executor/8470: [ 523.123232][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.132073][ T30] 1 lock held by syz-executor/8472: [ 523.137781][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.146433][ T30] 1 lock held by syz-executor/8474: [ 523.151723][ T30] #0: ffffffff8eb3a788 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 523.160312][ T30] [ 523.162650][ T30] ============================================= [ 523.162650][ T30] [ 523.171176][ T30] NMI backtrace for cpu 1 [ 523.175533][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 523.185550][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 523.195622][ T30] Call Trace: [ 523.198902][ T30] [ 523.201833][ T30] dump_stack_lvl+0x241/0x360 [ 523.206527][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.211753][ T30] ? __pfx__printk+0x10/0x10 [ 523.216351][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 523.221378][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 523.226318][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 523.231794][ T30] ? _printk+0xd5/0x120 [ 523.235993][ T30] ? __pfx__printk+0x10/0x10 [ 523.240608][ T30] ? __wake_up_klogd+0x109/0x140 [ 523.245548][ T30] ? __pfx__printk+0x10/0x10 [ 523.250145][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 523.255171][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 523.261155][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 523.267162][ T30] watchdog+0xfee/0x1030 [ 523.271413][ T30] ? watchdog+0x1ea/0x1030 [ 523.275851][ T30] ? __pfx_watchdog+0x10/0x10 [ 523.280582][ T30] kthread+0x2f0/0x390 [ 523.284690][ T30] ? __pfx_watchdog+0x10/0x10 [ 523.289414][ T30] ? __pfx_kthread+0x10/0x10 [ 523.294020][ T30] ret_from_fork+0x4b/0x80 [ 523.298452][ T30] ? __pfx_kthread+0x10/0x10 [ 523.303081][ T30] ret_from_fork_asm+0x1a/0x30 [ 523.307871][ T30] [ 523.311062][ T30] Sending NMI from CPU 1 to CPUs 0: [ 523.316326][ C0] NMI backtrace for cpu 0 [ 523.316339][ C0] CPU: 0 UID: 0 PID: 8049 Comm: kworker/u8:6 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 523.316361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 523.316373][ C0] Workqueue: events_unbound toggle_allocation_gate [ 523.316400][ C0] RIP: 0010:text_poke_loc_init+0x35d/0x870 [ 523.316424][ C0] Code: 70 5e 00 89 de 48 c7 c7 40 8a 16 8e e8 fc 13 b6 03 eb 92 e8 f5 6f 5e 00 eb 45 e8 ee 6f 5e 00 eb 3e 48 8d 44 24 60 48 8d 78 52 <48> 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 70 04 00 00 0f b6 [ 523.316440][ C0] RSP: 0018:ffffc900036278c0 EFLAGS: 00000287 [ 523.316455][ C0] RAX: ffffc90003627920 RBX: 000000000000000f RCX: ffff88801c799e00 [ 523.316468][ C0] RDX: 0000000000000003 RSI: ffffffff8e168c40 RDI: ffffc90003627972 [ 523.316480][ C0] RBP: ffffc90003627a10 R08: 0000000000000001 R09: ffffffff813512fd [ 523.316493][ C0] R10: 0000000000000003 R11: ffff88801c799e00 R12: ffffffff929dbb00 [ 523.316505][ C0] R13: 000000000000000f R14: dffffc0000000000 R15: 0000000000000005 [ 523.316518][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 523.316533][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.316545][ C0] CR2: 00007f4b149b8000 CR3: 000000000e132000 CR4: 00000000003506f0 [ 523.316562][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 523.316573][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.316584][ C0] Call Trace: [ 523.316591][ C0] [ 523.316598][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 523.316620][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 523.316645][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 523.316665][ C0] ? nmi_handle+0x2a/0x5a0 [ 523.316691][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 523.316712][ C0] ? nmi_handle+0x14f/0x5a0 [ 523.316728][ C0] ? nmi_handle+0x2a/0x5a0 [ 523.316745][ C0] ? text_poke_loc_init+0x35d/0x870 [ 523.316765][ C0] ? default_do_nmi+0x63/0x160 [ 523.316787][ C0] ? exc_nmi+0x123/0x1f0 [ 523.316807][ C0] ? end_repeat_nmi+0xf/0x53 [ 523.316831][ C0] ? text_poke_loc_init+0x25d/0x870 [ 523.316853][ C0] ? text_poke_loc_init+0x35d/0x870 [ 523.316874][ C0] ? text_poke_loc_init+0x35d/0x870 [ 523.316895][ C0] ? text_poke_loc_init+0x35d/0x870 [ 523.316915][ C0] [ 523.316922][ C0] [ 523.316932][ C0] ? __pfx_text_poke_loc_init+0x10/0x10 [ 523.316958][ C0] ? static_key_disable_cpuslocked+0x9b/0x1c0 [ 523.316986][ C0] ? text_poke_queue+0x12c/0x180 [ 523.317012][ C0] arch_jump_label_transform_queue+0x8f/0x100 [ 523.317040][ C0] __jump_label_update+0x177/0x3a0 [ 523.317075][ C0] static_key_disable_cpuslocked+0xce/0x1c0 [ 523.317103][ C0] static_key_disable+0x1a/0x20 [ 523.317127][ C0] toggle_allocation_gate+0x1b8/0x250 [ 523.317149][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 523.317171][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 523.317197][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 523.317219][ C0] ? process_scheduled_works+0x945/0x1830 [ 523.317240][ C0] process_scheduled_works+0xa2c/0x1830 [ 523.317279][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 523.317306][ C0] ? assign_work+0x364/0x3d0 [ 523.317337][ C0] worker_thread+0x86d/0xd40 [ 523.317364][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 523.317388][ C0] ? __kthread_parkme+0x169/0x1d0 [ 523.317413][ C0] ? __pfx_worker_thread+0x10/0x10 [ 523.317435][ C0] kthread+0x2f0/0x390 [ 523.317460][ C0] ? __pfx_worker_thread+0x10/0x10 [ 523.317481][ C0] ? __pfx_kthread+0x10/0x10 [ 523.317507][ C0] ret_from_fork+0x4b/0x80 [ 523.317531][ C0] ? __pfx_kthread+0x10/0x10 [ 523.317555][ C0] ret_from_fork_asm+0x1a/0x30 [ 523.317588][ C0] [ 523.318325][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 523.318342][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 523.318370][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 523.318385][ T30] Call Trace: [ 523.318395][ T30] [ 523.318406][ T30] dump_stack_lvl+0x241/0x360 [ 523.318448][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.318485][ T30] ? __pfx__printk+0x10/0x10 [ 523.318517][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 523.318556][ T30] ? vscnprintf+0x5d/0x90 [ 523.318585][ T30] panic+0x349/0x870 [ 523.318621][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 523.318651][ T30] ? __pfx_panic+0x10/0x10 [ 523.318682][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 523.318711][ T30] ? __irq_work_queue_local+0x137/0x410 [ 523.318747][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 523.318772][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 523.318800][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 523.318831][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 523.318864][ T30] watchdog+0x102d/0x1030 [ 523.318901][ T30] ? watchdog+0x1ea/0x1030 [ 523.318942][ T30] ? __pfx_watchdog+0x10/0x10 [ 523.318974][ T30] kthread+0x2f0/0x390 [ 523.319007][ T30] ? __pfx_watchdog+0x10/0x10 [ 523.319040][ T30] ? __pfx_kthread+0x10/0x10 [ 523.319080][ T30] ret_from_fork+0x4b/0x80 [ 523.319113][ T30] ? __pfx_kthread+0x10/0x10 [ 523.319148][ T30] ret_from_fork_asm+0x1a/0x30 [ 523.319197][ T30] [ 523.829512][ T30] Kernel Offset: disabled [ 523.833858][ T30] Rebooting in 86400 seconds..