last executing test programs: 2m41.596888377s ago: executing program 2 (id=202): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr/fscreate\x00') preadv(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x8) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r2, &(0x7f0000000380)=0xfffffffffffff800, 0x12) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syncfs(r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078008001240000000000500050002000000050004000000000013000300686173683a6e65742c696661636500004adb2ef69b71f3c941f718fe11d8484a679aae92589dbf4c23ab572aa94615cbc0fb3ea3e25be866c15c1a08edbf46b2c0bf2820305e49f5d29674e5546931c73642cd8123"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40) 2m40.452457727s ago: executing program 2 (id=207): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x1, 0x4, {0x7, 0x25, 0x1, 0x83, 0x10, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x7, 0x16, {0x7, 0x25, 0x1, 0x2, 0x9, 0x101}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, 0x0) 2m36.682240261s ago: executing program 2 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 2m35.654751848s ago: executing program 2 (id=219): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0xffffffff}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x6, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 2m33.668449942s ago: executing program 2 (id=222): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0x8, &(0x7f0000000340)={0x1, 0x74}, &(0x7f0000000380)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, 0xffffffffffffffff) close(r3) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec", 0x5c}, {0x0}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 2m33.040400543s ago: executing program 2 (id=224): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xa5ab, 0x0, 0x5, 0x3cd}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socket(0x2, 0x80805, 0x0) sync() openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy(0x4005, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0xf6b, &(0x7f0000000000)={0x0, 0xd74, 0x100, 0x0, 0x3d0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000080)=[0xfc8d], 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a20"], 0xb8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x20}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000100), &(0x7f0000000380)=r5}, 0x20) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) io_uring_enter(r3, 0x1102, 0xb2fa, 0x8, 0x0, 0x0) 2m17.099880836s ago: executing program 32 (id=224): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xa5ab, 0x0, 0x5, 0x3cd}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socket(0x2, 0x80805, 0x0) sync() openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy(0x4005, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0xf6b, &(0x7f0000000000)={0x0, 0xd74, 0x100, 0x0, 0x3d0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000080)=[0xfc8d], 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a20"], 0xb8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x20}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000100), &(0x7f0000000380)=r5}, 0x20) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) io_uring_enter(r3, 0x1102, 0xb2fa, 0x8, 0x0, 0x0) 12.131738732s ago: executing program 4 (id=737): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = timerfd_create(0x0, 0x800) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) socket$packet(0x11, 0x2, 0x300) memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) ioctl$KDGKBDIACR(r2, 0x4bfb, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x2, 0x0, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x40, 0x6, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in=@broadcast, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200000000000000}, {0x5, 0xfffffffffffffffd}, {0x0, 0x0, 0x4}, 0x70bd2b, 0x0, 0x2, 0x0, 0x7f, 0x6a}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) 8.964276437s ago: executing program 1 (id=747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x402}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x10) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x7}, 0xe) listen(r4, 0x9) accept4$vsock_stream(r5, 0x0, 0x58, 0x0) 8.877448028s ago: executing program 4 (id=748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x38000000000000, 0xa) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_io_uring_setup(0x1e76, 0x0, &(0x7f0000000180), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') process_madvise(0xffffffffffffffff, &(0x7f0000001740), 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)}, 0x1e) sched_setscheduler(0x0, 0x2, 0x0) 8.255713849s ago: executing program 0 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x48, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x2809}], 0x1, 0x0, 0x0, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$l2tp(0x2, 0x2, 0x73) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000567024e2000000da67ef000001001000000000b2ac0da0cef06a8c"], 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file1\x00', 0x74) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 7.623651459s ago: executing program 1 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000023) 7.288028825s ago: executing program 4 (id=753): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x1, 0x4, {0x7, 0x25, 0x1, 0x83, 0x10, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x7, 0x16, {0x7, 0x25, 0x1, 0x2, 0x9, 0x101}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0xa, @string={0xa, 0x3, "7b17a4cb3b6d6700"}}, 0x0, 0x0, 0x0}, 0x0) 6.894582472s ago: executing program 0 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.872362783s ago: executing program 1 (id=757): socket$inet6(0xa, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x2, 0x7, &(0x7f00000000c0)={0x10, "fe385d991361090495d58c490b6a1ffd1b5343fba6170247e804aefad6fdbba137"}}) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x1ff, 0x1}, 0x1}, 0x20, 0x1, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) 5.936221789s ago: executing program 3 (id=758): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x3a, 0x23, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioprio_set$pid(0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r5, r5, 0x0, 0x40008) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) syz_open_pts(r1, 0x400) 5.84608833s ago: executing program 0 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.355893715s ago: executing program 4 (id=760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x402}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x10) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x7}, 0xe) listen(r4, 0x9) accept4$vsock_stream(r5, 0x0, 0x58, 0x0) 4.249432527s ago: executing program 3 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) 3.674246017s ago: executing program 1 (id=762): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x38000000000000, 0xa) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, 0x0) syz_io_uring_setup(0x1e76, 0x0, &(0x7f0000000180), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') process_madvise(0xffffffffffffffff, &(0x7f0000001740), 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)}, 0x1e) sched_setscheduler(0x0, 0x2, 0x0) 3.551289089s ago: executing program 0 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x200) 3.539257669s ago: executing program 3 (id=764): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xd01, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 3.413662561s ago: executing program 0 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x48, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x2809}], 0x1, 0x0, 0x0, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$l2tp(0x2, 0x2, 0x73) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000567024e2000000da67ef000001001000000000b2ac0da0cef06a8c"], 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file1\x00', 0x74) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 3.357414873s ago: executing program 3 (id=766): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x80a0000, 0x6, 0x6, 0x100, 0x0, [{0x8, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x1}, {0x26, 0x5, 0x0, '\x00', 0x10}, {0xb, 0x1, 0x9, '\x00', 0x9}, {0x5, 0x5, 0x2, '\x00', 0xb6}, {0x3e, 0xc, 0x7, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x7f}, {0x8, 0x80, 0x4, '\x00', 0x81}, {0xfd, 0x4}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0x5, 0x5, '\x00', 0x2}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x40}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x4d, 0x9, 0x9, '\x00', 0x5}, {0xa, 0x5, 0x7, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x5, 0x3, 0x6, '\x00', 0x4}, {0x8, 0xff, 0x8e, '\x00', 0xd1}, {0x7f, 0x7, 0x1, '\x00', 0x8}, {0x4, 0x1, 0x5, '\x00', 0x3}, {0x5, 0x9, 0x8, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 3.047894458s ago: executing program 4 (id=767): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.401350908s ago: executing program 3 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x1e34, 0x0, 0x1, 0x7d, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @NL80211_ATTR_CSA_IES={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1e10, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x110, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x7}, 0x1f, 0x33, @device_a, 0x38b, 0xffff6039}}, @measure_req={0x26, 0xeb, {0x5, 0x6, 0x4, "a22098c742618fe21a32e2c8dac2f1e1d64334b8593aa5da732dbcd62e0d682942081fa8b73696475efec005f9e25136497fe5869ce752f1deab7462b4e13fae0509a4b4be2bebd0c2dcecec58efd1f93f6ee668cc40abe9b6bd2bedbf950b7ab90ae890fef06e9d2db1aeb8b49770d95b25810312387922aa4f73af6f49faf22db789f0dc9137eb19b50a87f4f30333dbea39f4b72d01d7b0926b37122164b08cf1371569e6c085bb35233e2dd176d176bbeafb89ca6641c50fec7df6b7a363c299714423ef14604e8a780782d49fc111ab966102a8a8edea29619b58ec9371d77144cdb1c1cb6c"}}, @mesh_id={0x72, 0x6}]}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x47a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7ff0}, @broadcast, @device_a, @random="d9c7a6da523b", {0x7, 0x9}}, 0x3, @random=0x1, 0x2000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0x2, 0x8, 0xfffd, 0x4}}, @void, @val={0x5, 0x7, {0x4, 0x64, 0x40, "0042cd79"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x7, 0xb, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x7}}, @void, [{0xdd, 0x9e, "329cdf1f677c5292d6120061f9022754f493bbd5a6407e862b6f9ccb5ee5abd436a06021de9b896a5888d96ba3255599153a98fcb2e4f530f292c2daa81e3463920082758e546d48d58d4870ec4cec2c2d6e898ee2e989d3e5aa6587e42dc2c0fc44f0ceb105aaa2ba37774d585cfd18a4bf30b532d05049769eccb177a8167644a7a24b3c0ed9424aed22739c5388b4379cbdfb16dbb34917bb48458bc3"}, {0xdd, 0x96, "3d49adcd200d50ae0795530429d8038a2c5f7aeaf84d1b365acb4d14e6a4bd6597dc5f352a3c6b6e02f2cf2b157cd07cec8ffcb20b4a1c9836f0866a52df950dba8f9a6f1ceccd4304951e78cbcea71d54de5e4b67e1fdcae34c3b5ae18ca4be0e048412fb36fae1e37cc176078725ab55db0cf0dd4ec84ec10e8a2b5f44ed63e010b28d4aa3401f9cb3c0ba7246fa5fafa8e2f57d5d"}, {0xdd, 0x12, "e9dc134c1340c276d5f0e94555cca1366074"}, {0xdd, 0xd6, "d74b1b597b3210e2570c6147d0fe3e9e509d7b09429e37d3650f830591dcea97a3278512cf87f80084dfe249af32f32cd6df4b9983f05152216251a96db30ffabc1c2251c3768e844f87bd5e4ae06dd773e13634da01d989e90251c1926800c0b79551a23c6ecdbaac00b8fe626e029bb46b659d3de85c2bb72f8f97cf8917fe8e8982c5820f356d0ae52a68af10814f57887e201979b2a320de41db61427f61a77c06a670fabac14faed8ded225b9780f1a3e4e04b2272f55614ab787f66189f7935eae2446c45f505cb11e23a019d3c5fcf370767e"}, {0xdd, 0x7d, "b5c2f3e647161d8bcc8e0633ab2dd51fe6618447a349d98f50c9070c90175d07f29a1bc9900678b60d34666d7758360133f9c6a77606e9bd742a3ac0f885a3b9690cc341d3269293e45950b0831cbdffd4ab4f637787bfcd4487a7f06b1062590cb94decd5888c411077484b68e58145b4242b518ce7728cbd9e97df18"}, {0xdd, 0x65, "dcd02d4b97cc9904e26bc416c48bac6e9368d8a6c02bc0bcfc851f5342187075e3780656be6b1a40749c1acf0d38a5a256fc400f77a08d42362bcd0190e978b7f8079d0403993686f4457a37f42cfcbadb26876625f0741ce4c5b37391080b6f56432ce2fc"}, {0xdd, 0xdd, "3c79b939fdff4265af2d97cb6e9a1fef8e6fbee34e832fce524f8149381ce950b18bef2281c9cfe939a6485d3927ac2b455c29764f97fa19247b7ffd1272f1f6e32e275273721527eb3fd576aa1dab37c512b97868ad5317e4afbb3daffd2c941350372b9e464ef27b7797efa11713f674f50bdefa275ddd9c876b09d5bd811e7dec6a9c6ec8ab7948f6956138e8c84fb8e6683191bdb2237c1498c8c517bfbea8161acaf0fa3be3bb24a02c89361d377fecae624d97f0bbf298fab59157cee8420f54a74c429d50572d28384aea41f98b0d1f0a21605a07f3ff6af31f"}, {0xdd, 0x1b, "6487ef44901439ff7557527e71da0c18bd28207b107e15ff0b9db9"}]}}, @NL80211_ATTR_IE={0x58, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0x1b}, @chsw_timing={0x68, 0x4, {0xe5a1, 0x57}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x15, @val="9acf2831ebcd243011e6a8f1024ea4b6"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6f, 0x0, @device_b, 0x4e11, @value=@device_b, 0x3, 0xb5, @device_b, 0xfffffffc}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x1}}]}, @NL80211_ATTR_IE={0x67, 0x2a, [@supported_rates={0x1, 0x4, [{0x36, 0x1}, {0x1b, 0x1}, {0xc}, {0x5}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @erp={0x2a, 0x1}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x3c, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x36, @device_b, 0xfffffffc, @value=@device_b, 0x3, 0x5, @device_b, 0x9}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x3, 0x0, {0x3, 0x9, 0x0, 0x3fe, 0x0, 0x0, 0x1}, 0x6, 0x4, 0xb4}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x56, 0x7f, [@random_vendor={0xdd, 0x26, "f1784e05e96abebe1de18145a531010fd76d6dc9f2bbdde9da6a4313e864e83d96bc8ddddfa3"}, @dsss={0x3, 0x1, 0x8c}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xff, @device_a, 0x400, @value, 0x2, 0x1, @device_a, 0x10000}}]}, @NL80211_ATTR_PROBE_RESP={0x3e1, 0x91, "52e68926e438d905eb45a3c62122c5e7160e9a50a73162c65702644b293a70ce2c2068425fda32e38d7cf779df426299d4d1ea10e5b4e4352787d80218c5ad67f54f47f96334e58dc9253543bf0dd92975e61e1914e7c483e797f191e9dd6f1431dd3719cb91d8c41a17abd1eb628ea2e213245a243af006a0aae148a99292b9cae2549cf6973c91025a912ffebfa02b4fa190a095f79f22704112818f0bfedc1893ecb1a14758e07b6d675b0398b287a932d4da1bd30ad3228935aedb6d0d62d36c0351da6434ea51103540645da4b5b29f58517ed81f3dd3848b8ea9a66934d7edcf24cc6b49d4ec66a2a23a9d7b6673c62e4698b91f52ba679f1f28531be19e807b905727f9d53b3958023b4861c66e03855faa038bb890b3058ae465ded4b6c5e2ce388a097416ebb6093ca8a0e42149ea6ad3307764639813bbe0203ed3d625f6fd81cfb4a4edd623830cbddfaa28cc7c9a6b378e6d7e6dcb4470df5ed00507e53960104fcbab4e0506618b7f595f3dbd259d4dd1bccbd8045439d0a607bd0ab6cae9b2153441526b7acdd83ef6bfcab97a617840016c3e269e9f341614ecbf51f175d44e21da02b5989e25cb010619a25669ea50f1754e4d2d30b514df03fae988c9003268ff5e0a739afa52580547fac1d6c9d065c30e19ade46ecbd91ca9c2fbfed32fa5c0401bdc8df4f275ad17bf44d843129253993e264c3668136c25b0168347ab98a1c0510adee670fd63e326ac9267fe6643042b14df2422cb0a81ecea48e89a48456e93a820bce548e1b209ca5258987fcdb471e527c316a870875c28616edf0ebc3f824708b36b1002959498fd5b56222d51ff0724abc33291b2f360d3443d79b32133ed6635c774dea0578c6ac3d7a6ce109a2f41d25aac7ac7801c00d0315e39c251e3969c6a7ad8a71b9c7fcde73dbc1a55843f7a40334507c31dae46060a27a282e6ab785e8bfb0bd865d8395735b8cb949f760e39fdde3d336ee741af6b09201f3890be57f6f328550dc3b907d213e0a7b4052cb31d3a59e3f159135ad2c0543e186d84991b7bad4a58f39df6a0e7d3c1aae88cd00a089ac8618b31238dffbbf541befebe12464000cce98d1acd21d66e2d77eb49446966350011c6514f777945907284dad56b62d26bc268256dccd1fc3c4e89f1bc35b1d6d5369c2d85e57056ab82a22a896f9ecdf5e181c19a765c5eaa9a23950a917e26ecbff631915b86533a508572313516129e645ffdcd2db8ab1752450a7d3ac16e90177337ed92841ad6d7e2b67cf56431534d783494f74d7e3204d57041a0cfa49c6b3372d514df9d61421f256900c1a12f543cb38477f3e6f2c509496393e044397628050384bed2f52af668983a9b63d1bbb8fe7a430d755909"}, @NL80211_ATTR_FTM_RESPONDER={0x1008, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}, @NL80211_ATTR_BEACON_HEAD={0x316, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @random="b25972e0d06a", {0x5, 0x8}}, 0x7, @random=0x2, 0x8000, @void, @val={0x1, 0x4, [{0x60, 0x1}, {0xc}, {0x60, 0x1}, {0x16, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x45}, @val={0x5, 0x88, {0x9, 0x99, 0x2, "c1e0b04574b62f21ee93832cf8322f0b23a5f7c13945e70e7665ed72822ae7eb95bc81907ae786c5fc1657a24dd354b72d4cd28265e96cf629b028a69ee236a295147004f138466c5064fb03bc477262078dfc26e7f1f7c49344d1e341d050ea2406f84cc51c08a499ccb63f09787569db063b3911b07851f624bd4b3ba99f82cec6820df3"}}, @val={0x25, 0x3, {0x1, 0xb4, 0xfd}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x27, "9ed626babf77cbd2f3e100a1f262c42b55de8ee5652c9fbbffe45323da031971bff3b031f14065"}, {0xdd, 0x81, "4e0f16a2d083faabc847903bea56dc05c3455080a74711d7a46b00465f9879622399d32a778b7abc04769adcad3391f16fcde94f177503d1dfc9a48ed391cbb6edc16e1279ad006c5e053ac680653ee02cf7cdc87b4b3a31e6746144603325c0918e505494ba39036610dc09ae990f4b11af756eeb5cfb3b4f76ccdb171c951081"}, {0xdd, 0xa6, "a5425006ba3c4fb3d21ae53cd1d3ab4ba72afc88e04706b5c1a61cf2ad62c35ec9ff0fa2d232013516118f4607e5e713095082285634c8d42ccbd29cc8876407cd15ac8697cce0638a63203512dea1024e4d313c897634e78b14f6c2fb2cc9a7fe832e9eb1c4112828c984b1915eb6da5caa4da2ffcef80de96b7bd7362cb0bd31f35515db40e9d37d397db09df1de8b1350dc06f0c5b96aa4fee8bf0bc9e2934976e5b1008b"}, {0xdd, 0xf4, "2a89078b2967d1b43b9cb4bb0e92dd558085f3f9e28146802676d68bddd4bb9f411bda33f03c60989528e096b5ae072a3af7839a1a9ccf03677db8f7c72ecc2a4f71ba35ee36ca5cce17d615cd42f50660b00cb331b55dbf02c84b9cb3cc0ee02854538ddf78f52d740cb38815cfdbbf7f098812b4c31d93d78f1c8017653af812166aadfe076981dd695440f56c7606f6d7fc7007fd20e35114a63692bd110757d6ba03d8813feaabc4cd4c5c70044f1f5b264ae18ab9a858ee0cbdd8b9b8ec2a2dd7fe51feb5bfcd75d87ed09ff49c77939200a83c20d6a3818eb45d3a89267bbc894f8bc14b6514098c71da13e2e110a6aa86"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x7, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x2, 0x1, 0x7ff, 0x0, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x4, 0x2, 0x5, 0x6, 0x7fff, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xcc]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0xfff, 0x7, 0xa, 0x9, 0x5, 0x4, 0x1000, 0x6, 0x6, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x9, 0x9]}]}, @chandef_params]}, 0x1e34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaa8aaaabb86dd000186dd06100004aaaaaaaaaabbfc000000000000000000000000000001aaaaaaaaaabbfe8000"/62], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) pread64(r7, &(0x7f0000000200)=""/56, 0x38, 0x100000000) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2.261066071s ago: executing program 0 (id=769): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = timerfd_create(0x0, 0x800) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) socket$packet(0x11, 0x2, 0x300) memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) ioctl$KDGKBDIACR(r2, 0x4bfb, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x2, 0x0, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x40, 0x6, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in=@broadcast, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200000000000000}, {0x5, 0xfffffffffffffffd}, {0x0, 0x0, 0x4}, 0x70bd2b, 0x0, 0x2, 0x0, 0x7f, 0x6a}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) 2.057932605s ago: executing program 4 (id=770): socket$inet6(0xa, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x2, 0x7, &(0x7f00000000c0)={0x10, "fe385d991361090495d58c490b6a1ffd1b5343fba6170247e804aefad6fdbba137"}}) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x1ff, 0x1}, 0x1}, 0x20, 0x1, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) 771.965367ms ago: executing program 3 (id=771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 557.351451ms ago: executing program 1 (id=772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 57.057691][ T5772] cgroup: Unknown subsys name 'net' [ 57.190133][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.544968][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.039553][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.047991][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.050227][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.063425][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.070564][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.071535][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.078704][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.092795][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.100465][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.100741][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.114858][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.122981][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.130910][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.133668][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.139551][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.145297][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.159575][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.159702][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.167852][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.181185][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.188588][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.196499][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.224583][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.231979][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.671495][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 60.699455][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 60.798287][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.805527][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.813070][ T5782] bridge_slave_0: entered allmulticast mode [ 60.821003][ T5782] bridge_slave_0: entered promiscuous mode [ 60.833186][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.840410][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.847939][ T5782] bridge_slave_1: entered allmulticast mode [ 60.855376][ T5782] bridge_slave_1: entered promiscuous mode [ 60.870904][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 60.887046][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 60.931469][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.965708][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.051507][ T5782] team0: Port device team_slave_0 added [ 61.067278][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.074578][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.081696][ T5784] bridge_slave_0: entered allmulticast mode [ 61.088861][ T5784] bridge_slave_0: entered promiscuous mode [ 61.097085][ T5782] team0: Port device team_slave_1 added [ 61.103059][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.111072][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.118441][ T5784] bridge_slave_1: entered allmulticast mode [ 61.126023][ T5784] bridge_slave_1: entered promiscuous mode [ 61.207677][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.215665][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.222940][ T5783] bridge_slave_0: entered allmulticast mode [ 61.229859][ T5783] bridge_slave_0: entered promiscuous mode [ 61.250344][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.259681][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.267095][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.274507][ T5785] bridge_slave_0: entered allmulticast mode [ 61.281242][ T5785] bridge_slave_0: entered promiscuous mode [ 61.288755][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.296638][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.303786][ T5783] bridge_slave_1: entered allmulticast mode [ 61.310495][ T5783] bridge_slave_1: entered promiscuous mode [ 61.319146][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.326392][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.352348][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.365933][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.386391][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.393514][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.401170][ T5785] bridge_slave_1: entered allmulticast mode [ 61.408050][ T5785] bridge_slave_1: entered promiscuous mode [ 61.427067][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.434319][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.460819][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.507550][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.519967][ T5784] team0: Port device team_slave_0 added [ 61.540143][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.552134][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.563195][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.588685][ T5784] team0: Port device team_slave_1 added [ 61.619786][ T5783] team0: Port device team_slave_0 added [ 61.682531][ T5783] team0: Port device team_slave_1 added [ 61.691435][ T5782] hsr_slave_0: entered promiscuous mode [ 61.698912][ T5782] hsr_slave_1: entered promiscuous mode [ 61.706695][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.713652][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.739623][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.753387][ T5785] team0: Port device team_slave_0 added [ 61.762200][ T5785] team0: Port device team_slave_1 added [ 61.784630][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.791597][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.817782][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.890947][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.898231][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.924274][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.952597][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.959914][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.986041][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.998678][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.005866][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.032849][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.064866][ T5784] hsr_slave_0: entered promiscuous mode [ 62.071062][ T5784] hsr_slave_1: entered promiscuous mode [ 62.077188][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.084965][ T5784] Cannot create hsr debugfs directory [ 62.091011][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.098526][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.124621][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.196414][ T5785] hsr_slave_0: entered promiscuous mode [ 62.205246][ T5785] hsr_slave_1: entered promiscuous mode [ 62.211312][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.219824][ T5785] Cannot create hsr debugfs directory [ 62.246312][ T5783] hsr_slave_0: entered promiscuous mode [ 62.252528][ T5783] hsr_slave_1: entered promiscuous mode [ 62.259051][ T5790] Bluetooth: hci1: command tx timeout [ 62.264669][ T5798] Bluetooth: hci0: command tx timeout [ 62.270209][ T5797] Bluetooth: hci3: command tx timeout [ 62.276188][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.283745][ T5783] Cannot create hsr debugfs directory [ 62.338695][ T5797] Bluetooth: hci2: command tx timeout [ 62.600735][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.615539][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.625712][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.635342][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.702234][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.713452][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.726720][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.737465][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.829625][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.840621][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.850779][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.863037][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.920519][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.932104][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.942565][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.953235][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.985678][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.031113][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.059215][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.066537][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.109856][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.117018][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.136811][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.187003][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.223659][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.230821][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.260458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.267614][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.312674][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.360850][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.399971][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.407236][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.438462][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.449936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.457123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.541711][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.579197][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.586365][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.603486][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.610771][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.643192][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.761794][ T5782] veth0_vlan: entered promiscuous mode [ 63.791926][ T5782] veth1_vlan: entered promiscuous mode [ 63.886364][ T5782] veth0_macvtap: entered promiscuous mode [ 63.923580][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.950521][ T5782] veth1_macvtap: entered promiscuous mode [ 64.023011][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.059133][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.075823][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.100355][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.110091][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.119107][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.127942][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.172726][ T5784] veth0_vlan: entered promiscuous mode [ 64.198257][ T5784] veth1_vlan: entered promiscuous mode [ 64.228784][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.297314][ T5784] veth0_macvtap: entered promiscuous mode [ 64.310432][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.320034][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.335068][ T5797] Bluetooth: hci0: command tx timeout [ 64.338295][ T5798] Bluetooth: hci1: command tx timeout [ 64.340467][ T5797] Bluetooth: hci3: command tx timeout [ 64.362562][ T5783] veth0_vlan: entered promiscuous mode [ 64.373669][ T5784] veth1_macvtap: entered promiscuous mode [ 64.414757][ T5797] Bluetooth: hci2: command tx timeout [ 64.420941][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.432611][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.445619][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.456276][ T5783] veth1_vlan: entered promiscuous mode [ 64.465409][ T5785] veth0_vlan: entered promiscuous mode [ 64.472333][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.477162][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.480353][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.499803][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.512551][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.533029][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.542569][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.552933][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.562575][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.577231][ T5785] veth1_vlan: entered promiscuous mode [ 64.652427][ T5783] veth0_macvtap: entered promiscuous mode [ 64.664971][ T5783] veth1_macvtap: entered promiscuous mode [ 64.726823][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.764208][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.777729][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.789040][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.800822][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.810841][ T5785] veth0_macvtap: entered promiscuous mode [ 64.881474][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.882011][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.904862][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.922532][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.953360][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.966084][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.978565][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.989562][ T5785] veth1_macvtap: entered promiscuous mode [ 65.013307][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.034325][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.049502][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.064640][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.140563][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.150944][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.194843][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.206861][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.217887][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.229544][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.239502][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.250399][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.262645][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.295273][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.307297][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.335999][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.350465][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.360599][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.371350][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.382998][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.457041][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.470653][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.480693][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.485554][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.495550][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.508146][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.587142][ T5885] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.625640][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.642451][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.702158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.717846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.767135][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.796755][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.716116][ T5798] Bluetooth: hci0: command tx timeout [ 66.721576][ T5798] Bluetooth: hci3: command tx timeout [ 66.727501][ T5790] Bluetooth: hci2: command tx timeout [ 66.733094][ T5797] Bluetooth: hci1: command tx timeout [ 67.922430][ T5916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14'. [ 68.009626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.112053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.552821][ T5850] IPVS: starting estimator thread 0... [ 68.627163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 68.698706][ T5918] IPVS: using max 17 ests per chain, 40800 per kthread [ 68.734883][ T5797] Bluetooth: hci3: command tx timeout [ 68.740319][ T5797] Bluetooth: hci2: command tx timeout [ 68.745854][ T5798] Bluetooth: hci0: command tx timeout [ 68.794710][ T5921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.814370][ T5797] Bluetooth: hci1: command tx timeout [ 68.917941][ T5921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.454163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.058227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.262871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.721440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.784543][ T5953] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.244103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.253004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.388934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.388958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.468796][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.475337][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.847528][ T5953] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.026907][ T5978] process 'syz.3.32' launched './file0' with NULL argv: empty string added [ 72.103043][ T5953] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.414122][ T5981] netlink: 'syz.0.34': attribute type 15 has an invalid length. [ 72.686015][ T5953] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.965475][ T5953] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.991890][ T5953] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.017099][ T5953] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.040465][ T5953] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.234693][ T5793] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.351981][ T6016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.43'. [ 75.464163][ T5793] usb 2-1: Using ep0 maxpacket: 32 [ 75.524487][ T788] IPVS: starting estimator thread 0... [ 75.548876][ T5793] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.624795][ T6017] IPVS: using max 17 ests per chain, 40800 per kthread [ 75.888905][ T5793] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.023229][ T5793] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 76.041883][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 76.050532][ T5793] usb 2-1: Product: syz [ 76.054989][ T5793] usb 2-1: Manufacturer: syz [ 76.059600][ T5793] usb 2-1: SerialNumber: syz [ 76.089111][ T5793] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 76.396883][ T5906] usb 2-1: USB disconnect, device number 2 [ 76.506976][ T5906] appletouch 2-1:1.0: input: appletouch disconnected [ 76.674765][ T9] cfg80211: failed to load regulatory.db [ 77.861124][ T6030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.144303][ T6030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.363403][ T6030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.102942][ T6030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.427121][ T6030] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.546734][ T6030] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.560060][ T6030] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.573597][ T6030] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.189343][ T6078] syzkaller0: entered promiscuous mode [ 82.207770][ T6078] syzkaller0: entered allmulticast mode [ 82.597425][ T6090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.61'. [ 82.617813][ T9] IPVS: starting estimator thread 0... [ 82.733978][ T6091] IPVS: using max 22 ests per chain, 52800 per kthread [ 84.374497][ T6100] syzkaller0: entered promiscuous mode [ 84.380011][ T6100] syzkaller0: entered allmulticast mode [ 85.611144][ T6167] binder: 6166:6167 ioctl 400c620e 200000000000 returned -22 [ 86.725891][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.759747][ T6183] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.168078][ T6183] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.199973][ T6193] syzkaller0: entered promiscuous mode [ 87.209480][ T6193] syzkaller0: entered allmulticast mode [ 87.279583][ T6183] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.488005][ T6183] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.332384][ T6183] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.377301][ T6183] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.439387][ T6183] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.482984][ T6183] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.791548][ T6225] tipc: Enabling of bearer rejected, failed to enable media [ 88.803594][ T6225] syzkaller0: entered promiscuous mode [ 88.809533][ T6225] syzkaller0: entered allmulticast mode [ 88.837912][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.957993][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.024541][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 89.045179][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.070996][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 89.084993][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.099349][ T9] usb 4-1: config 0 descriptor?? [ 89.166593][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.184972][ T23] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 89.205483][ T23] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 89.221179][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.233466][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.242998][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.251769][ T23] usb 2-1: Product: syz [ 89.256277][ T23] usb 2-1: Manufacturer: syz [ 89.260937][ T23] usb 2-1: SerialNumber: syz [ 89.447617][ T6237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.563199][ T9] apple 0003:05AC:0242.0001: unknown main item tag 0x0 [ 89.580713][ T9] apple 0003:05AC:0242.0001: unknown main item tag 0x0 [ 89.597406][ T9] apple 0003:05AC:0242.0001: unknown main item tag 0x0 [ 89.605587][ T9] apple 0003:05AC:0242.0001: unknown main item tag 0x0 [ 89.612597][ T9] apple 0003:05AC:0242.0001: unknown main item tag 0x0 [ 89.629271][ T6237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.636103][ T9] apple 0003:05AC:0242.0001: hidraw0: USB HID v0.05 Device [HID 05ac:0242] on usb-dummy_hcd.3-1/input0 [ 89.794781][ T9] usb 4-1: USB disconnect, device number 2 [ 89.797897][ T6237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.860918][ T6244] fido_id[6244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 89.900918][ T23] usb 2-1: 0:2 : does not exist [ 89.934267][ T23] usb 2-1: USB disconnect, device number 3 [ 89.990299][ T6237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.011945][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.221585][ T6237] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.275229][ T6237] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.296904][ T6237] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.355288][ T6237] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.677053][ T6255] binder: 6253:6255 ioctl c0306201 200000000080 returned -14 [ 90.792038][ T6259] tipc: Enabling of bearer rejected, failed to enable media [ 91.209743][ T6259] syzkaller0: entered promiscuous mode [ 91.422917][ T6259] syzkaller0: entered allmulticast mode [ 92.347975][ T6277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.193326][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 93.299274][ T6277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.392139][ T6287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.108'. [ 93.656373][ T6277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.060199][ T6306] tipc: Enabling of bearer rejected, failed to enable media [ 94.235660][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 94.270361][ T6277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.291822][ T6310] syzkaller0: entered promiscuous mode [ 94.299718][ T6310] syzkaller0: entered allmulticast mode [ 94.625939][ T6277] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.653140][ T6277] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.709538][ T6324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 95.314562][ T6277] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.450085][ T6277] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.626575][ T6338] syz.3.125 uses obsolete (PF_INET,SOCK_PACKET) [ 95.764686][ T6342] netlink: 32 bytes leftover after parsing attributes in process `syz.0.126'. [ 97.469298][ T6363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.130'. [ 98.274542][ T27] audit: type=1326 audit(1753533150.351:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.1.132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e5f8e9a9 code=0x0 [ 98.983652][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 99.181300][ T6373] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.504420][ T6386] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 101.228214][ T6373] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.856878][ T6401] binder: 6399:6401 ioctl 400c620e 200000000000 returned -22 [ 101.920055][ T6373] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.038477][ T6373] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.257103][ T6373] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.281707][ T6373] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.400354][ T6373] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.447951][ T6373] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.158806][ T6446] nbd0: detected capacity change from 0 to 127 [ 104.177026][ T5797] block nbd0: Receive control failed (result -32) [ 104.183606][ T97] block nbd0: Send control failed (result -32) [ 104.183804][ T97] block nbd0: Request send failed, requeueing [ 104.197417][ T97] block nbd0: Dead connection, failed to find a fallback [ 104.204688][ T97] block nbd0: shutting down sockets [ 104.210051][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 104.219362][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 104.227162][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 104.234949][ T97] Buffer I/O error on dev nbd0, logical block 2, async page read [ 104.242662][ T97] Buffer I/O error on dev nbd0, logical block 3, async page read [ 104.251974][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 104.262341][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 104.270498][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 104.278570][ T97] Buffer I/O error on dev nbd0, logical block 2, async page read [ 104.286591][ T97] Buffer I/O error on dev nbd0, logical block 3, async page read [ 104.295358][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.304732][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 104.313048][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 104.322306][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 104.330677][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.340174][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.352786][ T54] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 104.397834][ T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 104.414059][ T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 104.433283][ T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 104.452984][ T5800] ldm_validate_partition_table(): Disk read failed. [ 104.462333][ T5800] Dev nbd0: unable to read RDB block 0 [ 104.469443][ T5800] nbd0: unable to read partition table [ 104.480089][ T5800] ldm_validate_partition_table(): Disk read failed. [ 104.491866][ T5800] Dev nbd0: unable to read RDB block 0 [ 104.502057][ T5800] nbd0: unable to read partition table [ 105.062759][ T6452] binder: 6450:6452 ioctl 400c620e 200000000000 returned -22 [ 105.296877][ T6460] tipc: Started in network mode [ 105.303486][ T6460] tipc: Node identity daa05063013, cluster identity 4711 [ 105.311855][ T6460] tipc: Enabled bearer , priority 0 [ 105.321648][ T6460] syzkaller0: entered promiscuous mode [ 105.327386][ T6460] syzkaller0: entered allmulticast mode [ 105.362332][ T6459] tipc: Resetting bearer [ 105.411560][ T6459] tipc: Disabling bearer [ 105.493986][ T55] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.764256][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 105.800720][ T55] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.822922][ T55] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.919320][ T55] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 105.946849][ T55] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 105.984847][ T55] usb 3-1: Product: syz [ 106.014253][ T55] usb 3-1: Manufacturer: syz [ 106.044078][ T55] usb 3-1: SerialNumber: syz [ 106.096039][ T55] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 106.490938][ T5867] usb 3-1: USB disconnect, device number 2 [ 106.491131][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 107.494494][ T6468] sched: RT throttling activated [ 107.720745][ T5867] appletouch 3-1:1.0: input: appletouch disconnected [ 108.874237][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.904387][ T55] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.134357][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 109.161438][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.172697][ T55] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 109.182892][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 109.189461][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.215369][ T55] usb 3-1: config 0 descriptor?? [ 109.234122][ T5906] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 109.253402][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.261963][ T5906] usb 4-1: Product: syz [ 109.270048][ T5906] usb 4-1: Manufacturer: syz [ 109.275318][ T5906] usb 4-1: SerialNumber: syz [ 109.287058][ T5906] usb 4-1: config 0 descriptor?? [ 109.355177][ T6488] tipc: Enabling of bearer rejected, failed to enable media [ 109.370798][ T6488] syzkaller0: entered promiscuous mode [ 109.377340][ T6488] syzkaller0: entered allmulticast mode [ 109.527683][ T5906] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 109.546458][ T5906] gspca_sunplus: reg_w_riv err -71 [ 109.558564][ T5906] sunplus: probe of 4-1:0.0 failed with error -71 [ 109.568142][ T5906] usb 4-1: USB disconnect, device number 3 [ 109.692201][ T55] apple 0003:05AC:0242.0002: unknown main item tag 0x0 [ 109.701628][ T55] apple 0003:05AC:0242.0002: unknown main item tag 0x0 [ 109.709152][ T55] apple 0003:05AC:0242.0002: unknown main item tag 0x0 [ 109.718164][ T55] apple 0003:05AC:0242.0002: unknown main item tag 0x0 [ 109.750128][ T55] apple 0003:05AC:0242.0002: unknown main item tag 0x0 [ 109.815179][ T55] apple 0003:05AC:0242.0002: hidraw0: USB HID v0.05 Device [HID 05ac:0242] on usb-dummy_hcd.2-1/input0 [ 110.236965][ T788] usb 3-1: USB disconnect, device number 3 [ 110.319987][ T6498] fido_id[6498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 111.826944][ T6521] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 113.256185][ T6535] Illegal XDP return value 605182464 on prog (id 30) dev N/A, expect packet loss! [ 113.339729][ T6537] Zero length message leads to an empty skb [ 115.614002][ T6552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.188'. [ 116.065791][ T6553] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 116.819864][ T6559] nbd1: detected capacity change from 0 to 127 [ 116.857566][ T5797] block nbd1: Receive control failed (result -104) [ 120.214089][ T6586] input: syz0 as /devices/virtual/input/input7 [ 122.688230][ T27] audit: type=1800 audit(1753533174.711:3): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.204" name="bus" dev="overlay" ino=300 res=0 errno=0 [ 123.750276][ T5867] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.976873][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.986382][ T5867] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.007877][ T5867] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 124.093887][ T6619] binder: 6618:6619 ioctl 400c620e 200000000000 returned -22 [ 124.101389][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.103778][ T6616] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.135053][ T5867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.144404][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.152404][ T5867] usb 3-1: Product: syz [ 124.163954][ T5867] usb 3-1: Manufacturer: syz [ 124.180488][ T5867] usb 3-1: SerialNumber: syz [ 125.002767][ T5867] usb 3-1: 0:2 : does not exist [ 125.062669][ T5867] usb 3-1: USB disconnect, device number 4 [ 125.089897][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.669512][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'. [ 128.766570][ T27] audit: type=1800 audit(1753533180.851:4): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="bus" dev="overlay" ino=232 res=0 errno=0 [ 129.333188][ T6648] binder: 6647:6648 ioctl 400c620e 200000000000 returned -22 [ 130.431918][ T6663] ALSA: mixer_oss: invalid OSS volume '' [ 130.843954][ T788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.047740][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.063378][ T788] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 131.088360][ T788] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 131.116631][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.130640][ T788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.133450][ T6667] fuse: Bad value for 'user_id' [ 131.144335][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.575612][ T788] usb 1-1: Product: syz [ 131.579839][ T788] usb 1-1: Manufacturer: syz [ 131.586751][ T788] usb 1-1: SerialNumber: syz [ 132.658486][ T788] usb 1-1: 0:2 : does not exist [ 132.688970][ T788] usb 1-1: USB disconnect, device number 2 [ 132.899133][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.128431][ T6681] binder: 6680:6681 ioctl 400c620e 200000000000 returned -22 [ 133.350949][ T27] audit: type=1800 audit(1753533185.431:5): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name="bus" dev="overlay" ino=385 res=0 errno=0 [ 135.096759][ T6693] syzkaller0: entered promiscuous mode [ 135.131136][ T6693] syzkaller0: entered allmulticast mode [ 135.480307][ T6703] binder: 6702:6703 ioctl 400c620e 200000000000 returned -22 [ 137.779924][ T6728] syzkaller0: entered promiscuous mode [ 137.824590][ T6728] syzkaller0: entered allmulticast mode [ 141.294779][ T6757] tipc: Started in network mode [ 141.305415][ T6757] tipc: Node identity be90327f451, cluster identity 4711 [ 141.331514][ T6757] tipc: Enabled bearer , priority 0 [ 141.340074][ T6757] syzkaller0: entered promiscuous mode [ 141.347981][ T6757] syzkaller0: entered allmulticast mode [ 141.366091][ T6757] tipc: Resetting bearer [ 141.376769][ T6756] tipc: Resetting bearer [ 141.384090][ T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.417773][ T6756] tipc: Disabling bearer [ 141.574027][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 141.598539][ T788] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 141.648416][ T788] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 141.672303][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.681664][ T788] usb 4-1: Product: syz [ 141.689284][ T788] usb 4-1: Manufacturer: syz [ 141.694740][ T788] usb 4-1: SerialNumber: syz [ 142.172901][ T788] usb 4-1: config 0 descriptor?? [ 142.181974][ T788] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 142.204476][ T788] usb 4-1: Detected FT232R [ 142.381154][ T6764] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.401552][ T788] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 142.410131][ T788] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 142.449275][ T788] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 142.474593][ T788] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 142.506616][ T788] usb 4-1: USB disconnect, device number 4 [ 142.568148][ T788] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 142.605209][ T788] ftdi_sio 4-1:0.0: device disconnected [ 142.669406][ T6771] binder: 6770:6771 ioctl 400c620e 200000000000 returned -22 [ 142.718802][ T6764] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.808889][ T6764] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.871252][ T6764] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.977063][ T6764] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.998063][ T6764] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.023980][ T6764] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.071409][ T6764] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.158846][ T6782] tipc: Started in network mode [ 143.167645][ T6782] tipc: Node identity 5a325d938c5d, cluster identity 4711 [ 143.177150][ T6782] tipc: Enabled bearer , priority 0 [ 143.185277][ T6782] syzkaller0: entered promiscuous mode [ 143.190768][ T6782] syzkaller0: entered allmulticast mode [ 143.207205][ T6782] tipc: Resetting bearer [ 143.216284][ T6781] tipc: Resetting bearer [ 143.236704][ T6781] tipc: Disabling bearer [ 144.335192][ T5831] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.574310][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 144.642778][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 144.764271][ T5831] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 144.885392][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.981700][ T5831] usb 1-1: Product: syz [ 145.031873][ T5831] usb 1-1: Manufacturer: syz [ 145.072070][ T5831] usb 1-1: SerialNumber: syz [ 145.185793][ T5831] usb 1-1: config 0 descriptor?? [ 145.340854][ T5831] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 145.489428][ T5831] usb 1-1: Detected FT232R [ 147.000231][ T97] block nbd1: Possible stuck request ffff888021be0000: control (read@0,1024B). Runtime 30 seconds [ 147.011415][ T97] block nbd1: Possible stuck request ffff888021be0200: control (read@1024,1024B). Runtime 30 seconds [ 147.022627][ T97] block nbd1: Possible stuck request ffff888021be0400: control (read@2048,1024B). Runtime 30 seconds [ 147.033711][ T97] block nbd1: Possible stuck request ffff888021be0600: control (read@3072,1024B). Runtime 30 seconds [ 147.055834][ T5831] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 147.333024][ T5831] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 147.354545][ T5831] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 147.994239][ T5831] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.011298][ T5831] usb 1-1: USB disconnect, device number 3 [ 148.091283][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.105995][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.113718][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.123378][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.134358][ T5798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.136044][ T5831] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.141984][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.250422][ T5831] ftdi_sio 1-1:0.0: device disconnected [ 148.639090][ T6817] binder: 6816:6817 ioctl 400c620e 200000000000 returned -22 [ 148.850884][ T6820] tipc: Enabled bearer , priority 0 [ 148.857955][ T6822] syzkaller0: entered promiscuous mode [ 148.863424][ T6822] syzkaller0: entered allmulticast mode [ 148.885605][ T6812] tipc: Resetting bearer [ 148.899742][ T6811] tipc: Resetting bearer [ 148.918984][ T6811] tipc: Disabling bearer [ 149.010400][ T6809] chnl_net:caif_netlink_parms(): no params data found [ 149.176429][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.183579][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.192795][ T6809] bridge_slave_0: entered allmulticast mode [ 149.200843][ T6809] bridge_slave_0: entered promiscuous mode [ 149.210118][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.219684][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.227013][ T6809] bridge_slave_1: entered allmulticast mode [ 149.234795][ T6809] bridge_slave_1: entered promiscuous mode [ 149.274666][ T6809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.287450][ T6809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.335051][ T6809] team0: Port device team_slave_0 added [ 149.344368][ T6809] team0: Port device team_slave_1 added [ 149.400991][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.408281][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.463293][ T6809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.477788][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.488333][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.582543][ T6809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.642482][ T6809] hsr_slave_0: entered promiscuous mode [ 149.649201][ T6809] hsr_slave_1: entered promiscuous mode [ 149.655685][ T6809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.663253][ T6809] Cannot create hsr debugfs directory [ 149.764386][ T6838] syzkaller0: entered promiscuous mode [ 149.798424][ T6838] syzkaller0: entered allmulticast mode [ 150.147207][ T6852] tipc: Enabled bearer , priority 0 [ 150.155456][ T6852] syzkaller0: entered promiscuous mode [ 150.161016][ T6852] syzkaller0: entered allmulticast mode [ 150.174019][ T5798] Bluetooth: hci4: command tx timeout [ 150.185911][ T6852] tipc: Resetting bearer [ 150.193625][ T6850] tipc: Resetting bearer [ 150.215024][ T6850] tipc: Disabling bearer [ 150.240388][ T6809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.259657][ T6809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.276962][ T6809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.292590][ T6809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.161772][ T6809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.237674][ T6865] binder: 6863:6865 ioctl 400c620e 200000000000 returned -22 [ 151.249753][ T6809] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.269089][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.276812][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.293361][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.300553][ T6143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.638892][ T6809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.969597][ T6809] veth0_vlan: entered promiscuous mode [ 151.985606][ T6809] veth1_vlan: entered promiscuous mode [ 152.023697][ T6809] veth0_macvtap: entered promiscuous mode [ 152.034874][ T6809] veth1_macvtap: entered promiscuous mode [ 152.081823][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.114181][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.134009][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.153023][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.187014][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.198114][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.208917][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.225113][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.242871][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.258591][ T5798] Bluetooth: hci4: command tx timeout [ 152.284047][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.320233][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.338824][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.350055][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.360344][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.371146][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.382077][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.394758][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.486153][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.535942][ T6809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.569029][ T6809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.596338][ T6809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.605218][ T6809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.194605][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.236710][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.356157][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.386529][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.842192][ T6916] binder: 6915:6916 ioctl 400c620e 200000000000 returned -22 [ 154.254936][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.335287][ T5798] Bluetooth: hci4: command tx timeout [ 154.454030][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 154.460907][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.475192][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.502524][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 154.512889][ T23] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 154.528023][ T23] usb 2-1: Product: syz [ 154.535656][ T23] usb 2-1: Manufacturer: syz [ 154.547174][ T23] usb 2-1: SerialNumber: syz [ 154.567804][ T23] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 154.654513][ T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.781382][ T23] usb 2-1: USB disconnect, device number 4 [ 154.807470][ T23] appletouch 2-1:1.0: input: appletouch disconnected [ 154.866716][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 154.875774][ T788] usb 1-1: config 251 has an invalid interface number: 117 but max is 0 [ 154.891637][ T788] usb 1-1: config 251 has no interface number 0 [ 154.914961][ T788] usb 1-1: config 251 interface 117 has no altsetting 0 [ 154.935538][ T788] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= d.3e [ 154.949295][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.958053][ T788] usb 1-1: Product: syz [ 154.962272][ T788] usb 1-1: Manufacturer: syz [ 154.969409][ T788] usb 1-1: SerialNumber: syz [ 155.275821][ T788] gspca_main: spca500-2.14.0 probing 046d:0900 [ 155.292920][ T788] gspca_spca500: reg write: error -71 [ 155.336812][ T788] gspca_spca500: reg write: error -71 [ 155.436794][ T788] gspca_spca500: reg write: error -71 [ 155.481602][ T788] gspca_spca500: reg write: error -71 [ 155.550045][ T788] gspca_spca500: reg write: error -71 [ 155.618238][ T788] gspca_spca500: reg write: error -71 [ 155.910154][ T788] gspca_spca500: reg write: error -71 [ 156.000519][ T788] gspca_spca500: reg write: error -71 [ 156.007455][ T788] gspca_spca500: reg write: error -71 [ 156.028175][ T788] gspca_spca500: reg write: error -71 [ 156.055914][ T788] gspca_spca500: reg write: error -71 [ 156.119467][ T788] gspca_spca500: reg write: error -71 [ 156.135328][ T788] gspca_spca500: reg write: error -71 [ 156.150179][ T6939] comedi comedi3: pcl726: I/O port conflict (0xd4,16) [ 156.159417][ T788] gspca_spca500: reg write: error -71 [ 156.165451][ T6936] syzkaller0: entered promiscuous mode [ 156.199032][ T788] usb 1-1: USB disconnect, device number 4 [ 156.202405][ T6936] syzkaller0: entered allmulticast mode [ 156.424646][ T5798] Bluetooth: hci4: command tx timeout [ 157.595535][ T6961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.324'. [ 157.939385][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.179589][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 158.248469][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.265688][ T5906] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.286989][ T5906] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 158.296331][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 158.304838][ T5906] usb 2-1: Product: syz [ 158.309097][ T5906] usb 2-1: Manufacturer: syz [ 158.313793][ T5906] usb 2-1: SerialNumber: syz [ 158.373723][ T5906] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 158.624261][ T788] usb 2-1: USB disconnect, device number 5 [ 158.695418][ T788] appletouch 2-1:1.0: input: appletouch disconnected [ 158.969369][ T6972] tipc: Started in network mode [ 158.995416][ T6972] tipc: Node identity 22e54fb18616, cluster identity 4711 [ 159.039241][ T6972] tipc: Enabled bearer , priority 0 [ 159.075847][ T6973] syzkaller0: entered promiscuous mode [ 159.103971][ T6973] syzkaller0: entered allmulticast mode [ 159.147409][ T6972] tipc: Resetting bearer [ 159.189957][ T6971] tipc: Resetting bearer [ 159.433486][ T6971] tipc: Disabling bearer [ 160.550484][ T6994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.336'. [ 162.614007][ T5867] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.856946][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 162.863758][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.250364][ T5867] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.455750][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 163.526619][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 163.610829][ T5867] usb 2-1: Product: syz [ 163.625074][ T7020] syzkaller0: entered promiscuous mode [ 163.633929][ T5867] usb 2-1: Manufacturer: syz [ 163.638554][ T5867] usb 2-1: SerialNumber: syz [ 163.651950][ T7020] syzkaller0: entered allmulticast mode [ 163.687803][ T5867] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10 [ 163.918327][ T5867] usb 2-1: USB disconnect, device number 6 [ 163.945060][ T5867] appletouch 2-1:1.0: input: appletouch disconnected [ 164.005554][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.346'. [ 165.743801][ T7052] tipc: Enabled bearer , priority 0 [ 165.773963][ T7052] syzkaller0: entered promiscuous mode [ 165.789696][ T7052] syzkaller0: entered allmulticast mode [ 165.832639][ T7052] tipc: Resetting bearer [ 165.852477][ T7051] tipc: Resetting bearer [ 165.914778][ T7051] tipc: Disabling bearer [ 166.477631][ T7060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.356'. [ 166.668898][ T7067] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.677172][ T7069] binder: 7068:7069 ioctl 400c620e 200000000000 returned -22 [ 166.700038][ T7067] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.594434][ T7079] tipc: Enabled bearer , priority 0 [ 167.602317][ T7079] syzkaller0: entered promiscuous mode [ 167.615921][ T7079] syzkaller0: entered allmulticast mode [ 167.677843][ T7079] tipc: Resetting bearer [ 167.696832][ T7078] tipc: Resetting bearer [ 168.138213][ T7078] tipc: Disabling bearer [ 168.367679][ T7092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.367'. [ 170.814123][ T5797] Bluetooth: hci5: command 0x1003 tx timeout [ 170.944009][ T5798] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 172.774266][ T7133] syzkaller0: entered promiscuous mode [ 172.779774][ T7133] syzkaller0: entered allmulticast mode [ 172.941900][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.378'. [ 175.560430][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.390'. [ 175.864481][ T5867] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 175.984254][ T7176] tipc: Enabled bearer , priority 0 [ 176.011112][ T7176] tipc: Resetting bearer [ 176.039489][ T7175] tipc: Disabling bearer [ 176.094084][ T5798] Bluetooth: hci5: command 0x1003 tx timeout [ 176.100698][ T5797] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 176.114604][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 176.139685][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.171739][ T5867] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.187814][ T5867] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 176.207066][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 176.227308][ T5867] usb 5-1: Product: syz [ 176.234606][ T5867] usb 5-1: Manufacturer: syz [ 176.239445][ T5867] usb 5-1: SerialNumber: syz [ 176.255164][ T5867] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 176.472814][ T5867] usb 5-1: USB disconnect, device number 2 [ 176.506372][ T5867] appletouch 5-1:1.0: input: appletouch disconnected [ 176.774010][ T5906] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.020497][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 177.029659][ T7187] netlink: set zone limit has 8 unknown bytes [ 177.066590][ T97] block nbd1: Possible stuck request ffff888021be0000: control (read@0,1024B). Runtime 60 seconds [ 177.077594][ T97] block nbd1: Possible stuck request ffff888021be0200: control (read@1024,1024B). Runtime 60 seconds [ 177.088942][ T97] block nbd1: Possible stuck request ffff888021be0400: control (read@2048,1024B). Runtime 60 seconds [ 177.102981][ T97] block nbd1: Possible stuck request ffff888021be0600: control (read@3072,1024B). Runtime 60 seconds [ 177.865903][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.882902][ T7191] tipc: Enabled bearer , priority 0 [ 177.896796][ T5906] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 177.896819][ T5906] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 177.896836][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.910210][ T7191] tipc: Disabling bearer [ 177.914951][ T5906] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.169706][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.178265][ T5906] usb 2-1: Product: syz [ 178.182505][ T5906] usb 2-1: Manufacturer: syz [ 178.187239][ T5906] usb 2-1: SerialNumber: syz [ 178.586774][ T7194] block nbd4: not configured, cannot reconfigure [ 178.706674][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.404'. [ 178.807555][ T7204] tipc: Enabled bearer , priority 0 [ 178.825447][ T7204] tipc: Resetting bearer [ 178.842723][ T7203] tipc: Disabling bearer [ 178.866335][ T5906] usb 2-1: 0:2 : does not exist [ 179.730143][ T5906] usb 2-1: USB disconnect, device number 7 [ 180.843060][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 181.491345][ T7230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 181.506136][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.514089][ T7230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.984433][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.004102][ T55] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.213326][ T55] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.232897][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 182.248015][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.269052][ T5906] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 182.278770][ T55] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 182.289295][ T5906] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 182.300960][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.309302][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.339380][ T55] usb 5-1: config 0 descriptor?? [ 182.373404][ T5906] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.423340][ T55] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 182.434684][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.447201][ T5906] usb 2-1: Product: syz [ 182.465029][ T5906] usb 2-1: Manufacturer: syz [ 182.469703][ T5906] usb 2-1: SerialNumber: syz [ 182.929330][ T5906] usb 2-1: 0:2 : does not exist [ 182.958701][ T5906] usb 2-1: USB disconnect, device number 8 [ 183.130781][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.427090][ T5774] usb 5-1: USB disconnect, device number 3 [ 185.434529][ T7287] tipc: Enabled bearer , priority 0 [ 185.444868][ T7287] syzkaller0: entered promiscuous mode [ 185.450449][ T7287] syzkaller0: entered allmulticast mode [ 185.572888][ T7286] tipc: Resetting bearer [ 185.642089][ T7286] tipc: Disabling bearer [ 186.143963][ T5774] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 186.182494][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 186.189053][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 186.195475][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 186.201540][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 186.346471][ T5774] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.355949][ T5774] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 186.373861][ T5774] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 186.388238][ T7306] tipc: Enabled bearer , priority 0 [ 186.405286][ T7306] syzkaller0: entered promiscuous mode [ 186.410780][ T7306] syzkaller0: entered allmulticast mode [ 186.422929][ T5774] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.434978][ T5774] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.450822][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.470663][ T5774] usb 5-1: Product: syz [ 186.479275][ T5774] usb 5-1: Manufacturer: syz [ 186.492781][ T7306] tipc: Resetting bearer [ 186.500698][ T5774] usb 5-1: SerialNumber: syz [ 186.507732][ T7305] tipc: Resetting bearer [ 186.531272][ T7305] tipc: Disabling bearer [ 186.951098][ T5774] usb 5-1: 0:2 : does not exist [ 186.989450][ T5774] usb 5-1: USB disconnect, device number 4 [ 193.046912][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.478'. [ 193.658646][ T7388] netlink: set zone limit has 8 unknown bytes [ 193.707860][ T7391] binder: 7390:7391 ioctl 400c620e 200000000000 returned -22 [ 194.344241][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.915877][ T7414] netlink: 36 bytes leftover after parsing attributes in process `syz.3.483'. [ 198.683990][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.798353][ T7444] binder: 7443:7444 ioctl 400c620e 200000000000 returned -22 [ 198.937577][ T5867] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 199.003900][ T5867] usb 4-1: config 0 has no interface number 1 [ 199.010069][ T5867] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 199.077660][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 199.116874][ T5867] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 199.683597][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.716081][ T5867] usb 4-1: SerialNumber: syz [ 199.753183][ T5867] usb 4-1: config 0 descriptor?? [ 199.765627][ T5867] usb 4-1: Found UVC 0.00 device (0002:0000) [ 199.772489][ T5867] usb 4-1: No valid video chain found. [ 199.971913][ T55] usb 4-1: USB disconnect, device number 5 [ 200.199009][ T7466] binder: 7465:7466 ioctl 400c620e 200000000000 returned -22 [ 200.613543][ T7471] Cannot find set identified by id 0 to match [ 201.255454][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.484318][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 201.509405][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.524194][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.566507][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 201.584085][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 201.592499][ T5906] usb 5-1: Product: syz [ 201.597202][ T5906] usb 5-1: Manufacturer: syz [ 201.601948][ T5906] usb 5-1: SerialNumber: syz [ 201.986424][ T5906] appletouch 5-1:1.0: Could not find int-in endpoint [ 201.993287][ T5906] appletouch: probe of 5-1:1.0 failed with error -5 [ 202.005085][ T5906] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 202.211325][ T788] usb 5-1: USB disconnect, device number 5 [ 202.438845][ T7488] binder: 7487:7488 ioctl 400c620e 200000000000 returned -22 [ 203.162570][ T7495] netlink: 76 bytes leftover after parsing attributes in process `syz.0.512'. [ 204.287531][ T7504] tipc: Enabled bearer , priority 0 [ 204.315674][ T7504] syzkaller0: entered promiscuous mode [ 204.321252][ T7504] syzkaller0: entered allmulticast mode [ 204.452747][ T7504] tipc: Resetting bearer [ 204.519814][ T7503] tipc: Resetting bearer [ 204.623893][ T7503] tipc: Disabling bearer [ 205.672821][ T7525] fuse: Bad value for 'fd' [ 206.488320][ T7532] tipc: Enabled bearer , priority 0 [ 206.510963][ T7532] syzkaller0: entered promiscuous mode [ 206.525082][ T7532] syzkaller0: entered allmulticast mode [ 206.706521][ T7531] tipc: Resetting bearer [ 207.245470][ T97] block nbd1: Possible stuck request ffff888021be0000: control (read@0,1024B). Runtime 90 seconds [ 207.275326][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.525'. [ 207.308021][ T97] block nbd1: Possible stuck request ffff888021be0200: control (read@1024,1024B). Runtime 90 seconds [ 207.367765][ T97] block nbd1: Possible stuck request ffff888021be0400: control (read@2048,1024B). Runtime 90 seconds [ 207.380038][ T97] block nbd1: Possible stuck request ffff888021be0600: control (read@3072,1024B). Runtime 90 seconds [ 207.400572][ T7531] tipc: Disabling bearer [ 208.987898][ T5798] Bluetooth: hci3: unexpected event for opcode 0x6d65 [ 209.694008][ T7569] Bluetooth: MGMT ver 1.22 [ 210.127959][ T7577] 9pnet_fd: Insufficient options for proto=fd [ 210.154949][ T7579] tipc: Enabled bearer , priority 0 [ 210.164925][ T7579] syzkaller0: entered promiscuous mode [ 210.170508][ T7579] syzkaller0: entered allmulticast mode [ 210.251630][ T7578] tipc: Resetting bearer [ 210.354382][ T7578] tipc: Disabling bearer [ 210.904121][ T5798] Bluetooth: hci0: unexpected event for opcode 0x6d65 [ 211.831574][ T7607] tipc: Enabled bearer , priority 0 [ 211.839300][ T7607] syzkaller0: entered promiscuous mode [ 211.908562][ T7608] autofs4:pid:7608:autofs_fill_super: called with bogus options [ 212.487282][ T7607] syzkaller0: entered allmulticast mode [ 212.827151][ T5867] tipc: Node number set to 4219482751 [ 212.888864][ T7606] tipc: Resetting bearer [ 213.195388][ T7606] tipc: Disabling bearer [ 213.362929][ T5798] Bluetooth: hci3: unexpected event for opcode 0x6d65 [ 213.898216][ T7634] autofs4:pid:7634:autofs_fill_super: called with bogus options [ 215.998830][ T5798] Bluetooth: hci3: unexpected event for opcode 0x6d28 [ 217.905526][ T7668] autofs4:pid:7668:autofs_fill_super: called with bogus options [ 218.508097][ T7666] binder: 7663:7666 ioctl c0306201 0 returned -14 [ 218.946253][ T5798] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 218.986549][ T5798] Bluetooth: hci3: unexpected event for opcode 0x6d28 [ 223.098269][ T5798] Bluetooth: hci3: unexpected event for opcode 0x6d28 [ 223.420070][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.592'. [ 226.616398][ T7755] mmap: syz.1.598 (7755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 231.887774][ T5831] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 232.802284][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.821521][ T5831] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 232.842270][ T5831] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 232.862707][ T5831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.884585][ T5831] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.901207][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.909357][ T5831] usb 1-1: Product: syz [ 232.913528][ T5831] usb 1-1: Manufacturer: syz [ 232.918554][ T5831] usb 1-1: SerialNumber: syz [ 233.872795][ T5831] usb 1-1: 0:2 : does not exist [ 233.909824][ T5831] usb 1-1: USB disconnect, device number 5 [ 233.979591][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.363989][ T55] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.574111][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 234.593325][ T55] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 234.623984][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.632005][ T55] usb 2-1: Product: syz [ 234.663840][ T55] usb 2-1: Manufacturer: syz [ 234.668471][ T55] usb 2-1: SerialNumber: syz [ 234.689410][ T55] usb 2-1: config 0 descriptor?? [ 234.714291][ T55] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 235.317649][ T55] gspca_zc3xx: reg_w_i err -71 [ 236.123894][ T55] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 236.130258][ T55] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 236.236428][ T55] usb 2-1: USB disconnect, device number 9 [ 237.949801][ T97] block nbd1: Possible stuck request ffff888021be0000: control (read@0,1024B). Runtime 120 seconds [ 237.999641][ T97] block nbd1: Possible stuck request ffff888021be0200: control (read@1024,1024B). Runtime 120 seconds [ 238.013844][ T97] block nbd1: Possible stuck request ffff888021be0400: control (read@2048,1024B). Runtime 120 seconds [ 238.028758][ T97] block nbd1: Possible stuck request ffff888021be0600: control (read@3072,1024B). Runtime 120 seconds [ 238.617473][ T7874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 239.711491][ T7883] tipc: Enabled bearer , priority 0 [ 239.742695][ T7883] syzkaller0: entered promiscuous mode [ 239.755662][ T7883] syzkaller0: entered allmulticast mode [ 239.772269][ T7883] tipc: Resetting bearer [ 239.780214][ T7882] tipc: Resetting bearer [ 239.834753][ T7882] tipc: Disabling bearer [ 239.896756][ T7889] binder: 7886:7889 ioctl 400c620e 200000000000 returned -22 [ 240.081325][ T7894] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 240.089166][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.639'. [ 244.310230][ T7926] tipc: Enabled bearer , priority 0 [ 244.335666][ T7926] syzkaller0: entered promiscuous mode [ 244.350201][ T7926] syzkaller0: entered allmulticast mode [ 244.385432][ T7926] tipc: Resetting bearer [ 244.405880][ T7925] tipc: Resetting bearer [ 244.462504][ T7925] tipc: Disabling bearer [ 244.541204][ T7929] binder: 7928:7929 ioctl 400c620e 200000000000 returned -22 [ 247.462356][ T7953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.660'. [ 249.325862][ T7976] binder: 7975:7976 ioctl 400c620e 200000000000 returned -22 [ 253.156898][ T8017] tipc: Enabled bearer , priority 0 [ 253.167448][ T8017] syzkaller0: entered promiscuous mode [ 253.173145][ T8017] syzkaller0: entered allmulticast mode [ 253.203283][ T8017] tipc: Resetting bearer [ 253.216253][ T8016] tipc: Resetting bearer [ 253.239614][ T8016] tipc: Disabling bearer [ 254.313202][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 255.055984][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 255.373058][ T8045] tipc: Enabled bearer , priority 0 [ 255.386387][ T8045] syzkaller0: entered promiscuous mode [ 255.391877][ T8045] syzkaller0: entered allmulticast mode [ 255.453976][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 255.466024][ T8045] tipc: Resetting bearer [ 255.483732][ T8044] tipc: Resetting bearer [ 255.500894][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 255.513621][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.528101][ T9] usb 5-1: Product: syz [ 255.532285][ T9] usb 5-1: Manufacturer: syz [ 255.562341][ T9] usb 5-1: SerialNumber: syz [ 255.572188][ T8044] tipc: Disabling bearer [ 255.640418][ T9] usb 5-1: config 0 descriptor?? [ 255.743996][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 255.779388][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.785677][ T9] gspca_zc3xx: reg_w_i err -71 [ 257.910556][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 257.923358][ T9] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 257.964456][ T9] usb 5-1: USB disconnect, device number 6 [ 258.431649][ T8075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.698'. [ 259.800478][ T8080] tipc: Enabled bearer , priority 0 [ 260.186526][ T8085] syzkaller0: entered promiscuous mode [ 260.208229][ T8085] syzkaller0: entered allmulticast mode [ 260.319387][ T8080] tipc: Resetting bearer [ 260.342467][ T8078] tipc: Resetting bearer [ 260.379211][ T8078] tipc: Disabling bearer [ 261.832499][ T8118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.711'. [ 263.168786][ T8127] tipc: Enabled bearer , priority 0 [ 263.197020][ T8127] syzkaller0: entered promiscuous mode [ 263.212772][ T8127] syzkaller0: entered allmulticast mode [ 263.328108][ T8127] tipc: Resetting bearer [ 263.844133][ T8126] tipc: Resetting bearer [ 263.880224][ T8126] tipc: Disabling bearer [ 265.501871][ T5159] udevd[5159]: worker [5800] /devices/virtual/block/nbd1 is taking a long time [ 266.260784][ T8151] syz.0.721[8151]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 267.594270][ T8154] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 267.601125][ T8154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 267.624365][ T8158] vhci_hcd: connection closed [ 267.627111][ T8154] vhci_hcd vhci_hcd.0: Device attached [ 267.678820][ T6129] vhci_hcd: stop threads [ 267.683400][ T6129] vhci_hcd: release socket [ 267.707968][ T6129] vhci_hcd: disconnect device [ 268.103992][ T5906] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 268.225982][ T5868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 268.263929][ T5906] usb 1-1: device descriptor read/64, error -71 [ 268.434137][ T5868] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 268.453967][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.468496][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.482265][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.503669][ T5868] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 268.515735][ T5868] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 268.526289][ T5868] usb 2-1: Manufacturer: syz [ 268.544780][ T5906] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 268.609466][ T5868] usb 2-1: config 0 descriptor?? [ 268.613958][ T97] block nbd1: Possible stuck request ffff888021be0000: control (read@0,1024B). Runtime 150 seconds [ 268.628491][ T97] block nbd1: Possible stuck request ffff888021be0200: control (read@1024,1024B). Runtime 150 seconds [ 268.639935][ T97] block nbd1: Possible stuck request ffff888021be0400: control (read@2048,1024B). Runtime 150 seconds [ 268.652707][ T97] block nbd1: Possible stuck request ffff888021be0600: control (read@3072,1024B). Runtime 150 seconds [ 268.744494][ T5906] usb 1-1: device descriptor read/64, error -71 [ 268.906664][ T5906] usb usb1-port1: attempt power cycle [ 269.167725][ T5868] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 269.182331][ T5868] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 269.204934][ T5868] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 269.494085][ T5906] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 269.537469][ T5906] usb 1-1: device descriptor read/8, error -71 [ 269.546496][ T5868] usb 2-1: USB disconnect, device number 10 [ 269.736074][ T8193] tipc: Enabled bearer , priority 0 [ 269.745486][ T8193] syzkaller0: entered promiscuous mode [ 269.750967][ T8193] syzkaller0: entered allmulticast mode [ 269.775108][ T8193] tipc: Resetting bearer [ 269.782847][ T8192] tipc: Resetting bearer [ 269.799882][ T8192] tipc: Disabling bearer [ 269.813871][ T5906] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 269.857548][ T5906] usb 1-1: device descriptor read/8, error -71 [ 269.974046][ T5906] usb usb1-port1: unable to enumerate USB device [ 272.651897][ T8218] binder: 8216:8218 ioctl c0306201 0 returned -14 [ 273.162225][ T8223] tipc: Enabled bearer , priority 0 [ 273.255046][ T8223] syzkaller0: entered promiscuous mode [ 273.260551][ T8223] syzkaller0: entered allmulticast mode [ 273.341085][ T8223] tipc: Resetting bearer [ 273.353418][ T8222] tipc: Resetting bearer [ 273.407114][ T8222] tipc: Disabling bearer [ 273.874004][ T5774] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 274.089465][ T8236] binder: 8235:8236 ioctl 400c620e 200000000000 returned -22 [ 274.137322][ T5774] usb 4-1: Using ep0 maxpacket: 32 [ 274.165914][ T5774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.181001][ T5774] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 274.200748][ T5774] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 274.210811][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 274.224131][ T5774] usb 4-1: Product: syz [ 274.229728][ T5774] usb 4-1: Manufacturer: syz [ 274.237000][ T5774] usb 4-1: SerialNumber: syz [ 274.507207][ T5774] usb 4-1: USB disconnect, device number 6 [ 276.003867][ T5906] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 276.054212][ T8249] binder: 8248:8249 ioctl c0306201 0 returned -14 [ 276.196643][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 276.207340][ T5906] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 276.216636][ T5906] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 276.228280][ T5906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.241737][ T5906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.262115][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.272234][ T5906] usb 5-1: Product: syz [ 276.282541][ T5906] usb 5-1: Manufacturer: syz [ 276.288993][ T5906] usb 5-1: SerialNumber: syz [ 276.920733][ T5906] usb 5-1: 0:2 : does not exist [ 276.959949][ T5906] usb 5-1: USB disconnect, device number 7 [ 277.080821][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.570797][ T8280] tipc: Enabling of bearer rejected, failed to enable media [ 282.593772][ T8329] tipc: Enabled bearer , priority 0 [ 282.681730][ T8329] syzkaller0: entered promiscuous mode [ 282.724657][ T8329] syzkaller0: entered allmulticast mode [ 282.876018][ T8329] tipc: Resetting bearer [ 282.887629][ T8328] tipc: Resetting bearer [ 282.913275][ T8328] tipc: Disabling bearer [ 283.294832][ T29] INFO: task syz.2.224:6659 blocked for more than 144 seconds. [ 283.302656][ T29] Not tainted 6.6.100-syzkaller #0 [ 283.513934][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.538947][ T29] task:syz.2.224 state:D stack:26256 pid:6659 ppid:5783 flags:0x00004004 [ 283.554252][ T29] Call Trace: [ 283.558820][ T29] [ 283.573835][ T29] __schedule+0x14d2/0x44d0 [ 283.598992][ T29] ? asan.module_dtor+0x20/0x20 [ 283.631313][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 283.637276][ T29] ? __mutex_trylock_common+0x84/0x250 [ 283.652982][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 283.673283][ T29] schedule+0xbd/0x170 [ 283.677747][ T29] schedule_preempt_disabled+0x13/0x20 [ 283.690051][ T29] __mutex_lock+0x6b7/0xcc0 [ 283.696635][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 283.707012][ T29] ? sync_bdevs+0x1af/0x330 [ 283.712852][ T29] ? mutex_lock_nested+0x20/0x20 [ 283.717970][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 283.723645][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 283.732445][ T29] sync_bdevs+0x1af/0x330 [ 283.737742][ T29] ksys_sync+0xba/0x150 [ 283.742124][ T29] ? sync_filesystem+0x220/0x220 [ 283.749942][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 283.756698][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 283.763085][ T29] __ia32_sys_sync+0xe/0x20 [ 283.769275][ T29] do_syscall_64+0x55/0xb0 [ 283.774327][ T29] ? clear_bhb_loop+0x40/0x90 [ 283.779045][ T29] ? clear_bhb_loop+0x40/0x90 [ 283.784076][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.790005][ T29] RIP: 0033:0x7f370e58e9a9 [ 283.794907][ T29] RSP: 002b:00007f370f3b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 283.803462][ T29] RAX: ffffffffffffffda RBX: 00007f370e7b5fa0 RCX: 00007f370e58e9a9 [ 283.817137][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.826037][ T29] RBP: 00007f370e7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 283.837526][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.848694][ T29] R13: 0000000000000000 R14: 00007f370e7b5fa0 R15: 00007ffe5ac11c18 [ 283.856825][ T29] [ 283.860227][ T29] [ 283.860227][ T29] Showing all locks held in the system: [ 283.870473][ T29] 1 lock held by khungtaskd/29: [ 283.876019][ T29] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 283.891654][ T29] 2 locks held by kworker/u4:5/79: [ 283.897061][ T29] 1 lock held by klogd/5148: [ 283.902765][ T29] #0: ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 283.913608][ T29] 2 locks held by getty/5550: [ 283.918686][ T29] #0: ffff88814cd4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 283.929422][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 283.942570][ T29] 1 lock held by udevd/5800: [ 283.947606][ T29] #0: ffff888021adb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 283.963795][ T29] 1 lock held by syz.2.224/6659: [ 283.968902][ T29] #0: ffff888021adb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 283.979310][ T29] [ 283.981754][ T29] ============================================= [ 283.981754][ T29] [ 284.000906][ T29] NMI backtrace for cpu 1 [ 284.005264][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.100-syzkaller #0 [ 284.013153][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.023211][ T29] Call Trace: [ 284.026479][ T29] [ 284.029395][ T29] dump_stack_lvl+0x16c/0x230 [ 284.034061][ T29] ? show_regs_print_info+0x20/0x20 [ 284.039246][ T29] ? load_image+0x3b0/0x3b0 [ 284.043752][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 284.048686][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 284.054844][ T29] ? _printk+0xd0/0x110 [ 284.058993][ T29] ? load_image+0x3b0/0x3b0 [ 284.063489][ T29] ? load_image+0x3b0/0x3b0 [ 284.067983][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 284.074046][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 284.080017][ T29] watchdog+0xf41/0xf80 [ 284.084164][ T29] ? watchdog+0x1e1/0xf80 [ 284.088492][ T29] kthread+0x2fa/0x390 [ 284.092545][ T29] ? hungtask_pm_notify+0x90/0x90 [ 284.097560][ T29] ? kthread_blkcg+0xd0/0xd0 [ 284.102138][ T29] ret_from_fork+0x48/0x80 [ 284.106547][ T29] ? kthread_blkcg+0xd0/0xd0 [ 284.111124][ T29] ret_from_fork_asm+0x11/0x20 [ 284.115885][ T29] [ 284.120160][ T29] Sending NMI from CPU 1 to CPUs 0: [ 284.125710][ C0] NMI backtrace for cpu 0 [ 284.125726][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted 6.6.100-syzkaller #0 [ 284.125741][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.125750][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 284.125772][ C0] RIP: 0010:unwind_next_frame+0x8a/0x2970 [ 284.125795][ C0] Code: 24 68 42 80 3c 28 00 74 08 4c 89 f7 e8 4f 38 a2 00 49 8b 44 24 38 48 89 84 24 90 00 00 00 4c 89 e3 48 c1 eb 03 42 0f b6 04 2b <84> c0 0f 85 df 21 00 00 41 8b 2c 24 31 ff 89 ee e8 d1 f5 4a 00 89 [ 284.125808][ C0] RSP: 0018:ffffc90000106d58 EFLAGS: 00000a06 [ 284.125820][ C0] RAX: 0000000000000000 RBX: 1ffff92000020dc5 RCX: ffff888019e7bc00 [ 284.125831][ C0] RDX: 0000000000000000 RSI: ffffffff8157e235 RDI: ffffc90000106e28 [ 284.125841][ C0] RBP: ffffc90000106eb0 R08: ffffc90000106ef0 R09: 000000000000000d [ 284.125851][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90000106e28 [ 284.125860][ C0] R13: dffffc0000000000 R14: ffffc90000106e60 R15: ffffffff8157e235 [ 284.125870][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 284.125883][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.125893][ C0] CR2: 00005555651245c8 CR3: 00000000269ea000 CR4: 00000000003506f0 [ 284.125906][ C0] Call Trace: [ 284.125918][ C0] [ 284.125929][ C0] ? worker_thread+0xa55/0xfc0 [ 284.125947][ C0] ? worker_thread+0xa55/0xfc0 [ 284.125963][ C0] ? stack_trace_save+0xe0/0xe0 [ 284.125979][ C0] arch_stack_walk+0x144/0x190 [ 284.125996][ C0] ? worker_thread+0xa55/0xfc0 [ 284.126014][ C0] stack_trace_save+0x9c/0xe0 [ 284.126031][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 284.126051][ C0] kasan_set_track+0x4e/0x70 [ 284.126066][ C0] ? kasan_set_track+0x4e/0x70 [ 284.126079][ C0] ? kasan_save_free_info+0x2e/0x50 [ 284.126095][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 284.126110][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 284.126123][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 284.126141][ C0] ? ieee80211_inform_bss+0xba9/0x1060 [ 284.126161][ C0] ? rdev_inform_bss+0x106/0x410 [ 284.126177][ C0] ? cfg80211_inform_bss_frame_data+0xb33/0x12b0 [ 284.126193][ C0] ? ieee80211_bss_info_update+0x70b/0x930 [ 284.126213][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x17c9/0x2ac0 [ 284.126231][ C0] ? ieee80211_iface_work+0x717/0xc70 [ 284.126248][ C0] ? cfg80211_wiphy_work+0x225/0x260 [ 284.126264][ C0] ? process_scheduled_works+0xa45/0x15b0 [ 284.126280][ C0] ? worker_thread+0xa55/0xfc0 [ 284.126315][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 284.126333][ C0] kasan_save_free_info+0x2e/0x50 [ 284.126350][ C0] ____kasan_slab_free+0x126/0x1e0 [ 284.126367][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 284.126382][ C0] ? ieee80211_inform_bss+0xba9/0x1060 [ 284.126403][ C0] __kmem_cache_free+0xba/0x1f0 [ 284.126424][ C0] ieee80211_inform_bss+0xba9/0x1060 [ 284.126448][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 284.126474][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 284.126495][ C0] rdev_inform_bss+0x106/0x410 [ 284.126512][ C0] cfg80211_inform_bss_frame_data+0xb33/0x12b0 [ 284.126538][ C0] ? cfg80211_parse_ml_sta_data+0x19f0/0x19f0 [ 284.126575][ C0] ? ieee80211_bss_info_update+0x361/0x930 [ 284.126597][ C0] ieee80211_bss_info_update+0x70b/0x930 [ 284.126621][ C0] ? ieee80211_inform_bss+0x1060/0x1060 [ 284.126647][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 284.126669][ C0] ieee80211_ibss_rx_queued_mgmt+0x17c9/0x2ac0 [ 284.126695][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xe05/0x2ac0 [ 284.126714][ C0] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 284.126736][ C0] ? mark_lock+0x94/0x320 [ 284.126753][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 284.126770][ C0] ? lock_chain_count+0x20/0x20 [ 284.126784][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 284.126809][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 284.126829][ C0] ? skb_dequeue+0x10e/0x140 [ 284.126850][ C0] ieee80211_iface_work+0x717/0xc70 [ 284.126869][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 284.126891][ C0] cfg80211_wiphy_work+0x225/0x260 [ 284.126910][ C0] ? process_scheduled_works+0x957/0x15b0 [ 284.126932][ C0] process_scheduled_works+0xa45/0x15b0 [ 284.126962][ C0] ? assign_work+0x400/0x400 [ 284.126981][ C0] ? assign_work+0x39e/0x400 [ 284.127000][ C0] worker_thread+0xa55/0xfc0 [ 284.127028][ C0] kthread+0x2fa/0x390 [ 284.127041][ C0] ? pr_cont_work+0x560/0x560 [ 284.127057][ C0] ? kthread_blkcg+0xd0/0xd0 [ 284.127070][ C0] ret_from_fork+0x48/0x80 [ 284.127086][ C0] ? kthread_blkcg+0xd0/0xd0 [ 284.127099][ C0] ret_from_fork_asm+0x11/0x20 [ 284.127125][ C0] [ 284.596395][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 284.603269][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.100-syzkaller #0 [ 284.611160][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.621198][ T29] Call Trace: [ 284.624461][ T29] [ 284.627376][ T29] dump_stack_lvl+0x16c/0x230 [ 284.632039][ T29] ? show_regs_print_info+0x20/0x20 [ 284.637216][ T29] ? load_image+0x3b0/0x3b0 [ 284.641709][ T29] panic+0x2c0/0x710 [ 284.645587][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 284.651200][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 284.655685][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 284.661214][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 284.667350][ T29] watchdog+0xf80/0xf80 [ 284.671485][ T29] ? watchdog+0x1e1/0xf80 [ 284.675801][ T29] kthread+0x2fa/0x390 [ 284.679845][ T29] ? hungtask_pm_notify+0x90/0x90 [ 284.684853][ T29] ? kthread_blkcg+0xd0/0xd0 [ 284.689430][ T29] ret_from_fork+0x48/0x80 [ 284.693830][ T29] ? kthread_blkcg+0xd0/0xd0 [ 284.698396][ T29] ret_from_fork_asm+0x11/0x20 [ 284.703143][ T29] [ 284.706361][ T29] Kernel Offset: disabled [ 284.710666][ T29] Rebooting in 86400 seconds..