last executing test programs: 12.879086711s ago: executing program 1 (id=95): writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x1e0, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x7, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x7f4d, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x0, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x0, 0x5, 0xfffff575, 0x5f32, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x4, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x20000, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x6, 0x400003, 0x20000008, 0x4, 0x6d01, 0xfffffff7, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x6, 0xfffffffc, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x5529, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x2, 0x25], [0x9, 0x0, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x16, 0x7, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0x1, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.876398281s ago: executing program 3 (id=96): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000203032000000000000000000000000008000100010000000900"], 0x28}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x1, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmmsg$inet(r4, 0x0, 0x0, 0x800) 12.360695014s ago: executing program 1 (id=97): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0xc6, 0x0, 0x101, 0xfffffffffffffffd}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 12.219958154s ago: executing program 4 (id=98): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) 11.869979912s ago: executing program 2 (id=100): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00', &(0x7f00000003c0)='}[&]#()[}&&!\\\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 10.994521311s ago: executing program 2 (id=101): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0xce24, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "000001fffbffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10.586938272s ago: executing program 1 (id=102): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0xc8973a6482babc91, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) r0 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 10.398277788s ago: executing program 3 (id=104): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) 10.220392717s ago: executing program 4 (id=105): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x4, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902"], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet(0xa, 0x801, 0x84) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r2, &(0x7f0000000200)=""/168, 0xa8) 7.880762346s ago: executing program 1 (id=106): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x80000) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10, 0x20040080}, 0x0) socket$kcm(0x2, 0x5, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x3) 7.38026589s ago: executing program 3 (id=107): syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) fsmount(r0, 0x0, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0x72, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 7.21804375s ago: executing program 0 (id=108): syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x62840, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x200000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0]) 6.722474615s ago: executing program 2 (id=109): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.456493268s ago: executing program 3 (id=110): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffff9c, 0x0, 0x400, 0x0) r1 = dup(r0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.454422275s ago: executing program 0 (id=120): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) io_setup(0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) dup(r4) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x400000d, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) 6.453972839s ago: executing program 1 (id=111): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.287223949s ago: executing program 2 (id=112): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x1a, 0x2, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r2, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 6.285914918s ago: executing program 4 (id=113): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.007912617s ago: executing program 4 (id=114): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xa, 0x121001) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d0, &(0x7f0000000280)) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59f2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x2]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYBLOB="3d03"], 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000480)={0x18, 0x0, {0x0, @random="a4ece16787d7", 'vcan0\x00'}}, 0x1e) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) bind$tipc(r2, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x2f, 0x0, 0x4, @void, @value}, 0x20) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40c1}, 0x4080) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x4c, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x50, 0x8, 0x5, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x61, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x9, 0x5, 0x3, 0x10, 0x68}, 0xbd, &(0x7f00000000c0)={0x5, 0xf, 0xbd, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xaa, 0x6, 0x4, 0x386, 0x5}, @generic={0x73, 0x10, 0x3, "bcaf26b969d355e7954e97cb6c2f241da64dc67eaa6a082e8e354776752573116af897669986dde0dfea5c85e140e851ff29a3397be1f51a90aea7772bfeeff1bbc29e0ec002399d4dc413e256898c850b43280b1178173b82c6193bd541001619208fcacc4eee2ab9e4d22b33ce1096"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x5, 0x0, 0x6, [0x2070, 0x3f00, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0xfb, 0xf, 0x3ff, 0xe0}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x3, 0x0, 0x0, [0xc0f0, 0xff3f00]}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x380a}}]}) 5.467798612s ago: executing program 0 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}, @RTA_MULTIPATH={0xc, 0x9, {0xa, 0x28, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="080001"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x36, 0xaf, 0xf, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x10, 0x40, 0x80, 0xfffff000}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x6, 0xd, {{0x15, 0x4, 0x0, 0x8, 0x54, 0x68, 0x0, 0x8, 0x2f, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x24, 0x6c, 0x3, 0xc, [{@multicast1, 0x1}, {@multicast1, 0x6}, {@broadcast, 0x80000000}, {@rand_addr=0x64010101, 0x7}]}, @timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x8, [{@loopback, 0x101}]}, @ssrr={0x89, 0xf, 0xbf, [@multicast2, @loopback, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x1fc, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 5.338007201s ago: executing program 0 (id=116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 5.052396848s ago: executing program 3 (id=117): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000980)={0x0, 0x6, 0x1, 'N'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.003717114s ago: executing program 0 (id=118): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) 4.258319479s ago: executing program 4 (id=119): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x9, 0x129001) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050001000400000006001800001000000600190000b5"], 0x4c}}, 0x0) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@arm64={0xfe, 0x75, 0xb}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x2, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)=r9}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000580)={&(0x7f0000000380)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0xf81}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000003c0)='[', 0x1}, {&(0x7f0000000400)="602774081cd54e23eedc2ebb16ebdea0e8a9948b250bb25430c77c62068141567d052278c2bc4e5af712f01b30ea78f33b054b26643bbc73cb373caff7fa3e8e2ac1840daa95821e0565c4c54c5929376d6378002dacad10fa11e5b2b27a", 0x5e}, {&(0x7f0000000480)="c4040231169a30397ae81356eefb511a72e4868c8b66b8dd046017afb1bc011a9ddf26934736dee0f92a3c8bcbb8c760f7539da4060a060f37ecabf966103059102a5fb1a40a80aa0fd1f881a3cdf745c7dacb351e754a8f43c595f6df076504ce358ce959e3651f2ff45f8852e28de823a9c0e12e76af0932bcca4e54224582d54297de", 0x84}], 0x3, &(0x7f0000000680)=[@rthdrdstopts={{0x174, 0x29, 0x37, {0x2b, 0x2b, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0x210b, [0x101, 0x664, 0xfff, 0x9, 0xc733, 0x7, 0x7f]}}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0xe9}, @enc_lim={0x4, 0x1, 0x4}, @generic={0xa, 0xf6, "883947bf3104db32a860f7c05f2bedff0e6d5c5ed2b5bbab82dcb766e7e9d177b67dbc5bb6b5e5e63231129c1ae19bf0867c294067a8010c546dcfa7fd3fdf9230dbe8c6bc19717010d52b99d9e22a1aa6df3aa783daae20ea9f7b2c30771484b1f204b734ba9ce71c8d508acf58a94b36911e0e76654f3e53d0dbb4d1706112fdc5c9d859afa3105a904cd92d102bc7534120fb4b3f9f9b8976041d3f1688173da8a378ef9d64ac208c628aa31fe0625f153f973600691bb85554091601f2362ee75d796f31cbdf3ccb3777b66f0527b442e3d6005fa395ae8af36ba9144982ef2465070d6fe2ffe9c837749ae90cbae172c6fbec5c"}]}}}, @rthdr_2292={{0x24, 0x29, 0x39, {0x1d, 0x2, 0x0, 0x10, 0x0, [@dev={0xfe, 0x80, '\x00', 0x11}]}}}, @dstopts={{0x34, 0x29, 0x37, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0xa}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0xffffffff}}, @rthdr_2292={{0x84, 0x29, 0x39, {0x3c, 0xe, 0x0, 0xe5, 0x0, [@local, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1c}, @local, @mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x2, 0xa, 0x1, 0x4, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1]}}}], 0x2c4}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000002c0)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 3.027187737s ago: executing program 1 (id=121): socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000200)=[{0x3, 0x1000, 0x0, 0x0}, {0x8000, 0xa00, 0x0, 0x0}], 0x2}) syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) 2.741967045s ago: executing program 0 (id=122): socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_usb_connect(0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x70, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) 2.643982217s ago: executing program 2 (id=123): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_usb_connect(0x6, 0xe74, &(0x7f0000000980)=ANY=[], 0x0) pipe(&(0x7f0000000380)) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 1.482493626s ago: executing program 4 (id=124): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000002d00)=0x1, 0x4) socket$l2tp6(0xa, 0x2, 0x73) socket$unix(0x1, 0x1, 0x0) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000880) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x4}], 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x4, 0x70000000, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0494c200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x1, 0x100, 0xc6, &(0x7f0000000080)=""/198}) 439.739709ms ago: executing program 2 (id=125): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x4, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902"], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet(0xa, 0x801, 0x84) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r2, &(0x7f0000000200)=""/168, 0xa8) 0s ago: executing program 3 (id=126): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) io_setup(0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) dup(r4) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x400000d, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 82.370710][ T5817] cgroup: Unknown subsys name 'net' [ 82.479111][ T5817] cgroup: Unknown subsys name 'cpuset' [ 82.488775][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.164852][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.815403][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.824999][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.833755][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.841837][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.855422][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.863426][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.878977][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.894257][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.905546][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.913610][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.921610][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.928744][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.938187][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.946628][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.948372][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.962897][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.994808][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.016682][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.033171][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.041886][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.050045][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.058117][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.066382][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.074389][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.103489][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.872157][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.898525][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.911595][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.009880][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.187004][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.198392][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.206325][ T5841] bridge_slave_0: entered allmulticast mode [ 88.213732][ T5841] bridge_slave_0: entered promiscuous mode [ 88.276823][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.283983][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.291803][ T5841] bridge_slave_1: entered allmulticast mode [ 88.299100][ T5841] bridge_slave_1: entered promiscuous mode [ 88.306733][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.337115][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.344304][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.352135][ T5838] bridge_slave_0: entered allmulticast mode [ 88.359723][ T5838] bridge_slave_0: entered promiscuous mode [ 88.411907][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.421826][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.429434][ T5838] bridge_slave_1: entered allmulticast mode [ 88.437586][ T5838] bridge_slave_1: entered promiscuous mode [ 88.493527][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.501186][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.508880][ T5840] bridge_slave_0: entered allmulticast mode [ 88.516951][ T5840] bridge_slave_0: entered promiscuous mode [ 88.539414][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.562900][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.570266][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.577597][ T5844] bridge_slave_0: entered allmulticast mode [ 88.584877][ T5844] bridge_slave_0: entered promiscuous mode [ 88.592249][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.599518][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.606935][ T5840] bridge_slave_1: entered allmulticast mode [ 88.614729][ T5840] bridge_slave_1: entered promiscuous mode [ 88.638674][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.651097][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.681067][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.688353][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.695686][ T5844] bridge_slave_1: entered allmulticast mode [ 88.702941][ T5844] bridge_slave_1: entered promiscuous mode [ 88.728398][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.800038][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.826778][ T5841] team0: Port device team_slave_0 added [ 88.855161][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.867930][ T5838] team0: Port device team_slave_0 added [ 88.876679][ T5841] team0: Port device team_slave_1 added [ 88.898616][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.923736][ T5838] team0: Port device team_slave_1 added [ 88.946367][ T5835] Bluetooth: hci1: command tx timeout [ 88.975524][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.012460][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.019902][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.046659][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.057619][ T5835] Bluetooth: hci0: command tx timeout [ 89.057855][ T5835] Bluetooth: hci2: command tx timeout [ 89.089416][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.096968][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.104125][ T5843] bridge_slave_0: entered allmulticast mode [ 89.112072][ T5843] bridge_slave_0: entered promiscuous mode [ 89.119102][ T5832] Bluetooth: hci3: command tx timeout [ 89.152298][ T5840] team0: Port device team_slave_0 added [ 89.159411][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.166764][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.192894][ T5832] Bluetooth: hci4: command tx timeout [ 89.193221][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.213308][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.220353][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.246404][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.257703][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.265646][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.272859][ T5843] bridge_slave_1: entered allmulticast mode [ 89.280308][ T5843] bridge_slave_1: entered promiscuous mode [ 89.302280][ T5844] team0: Port device team_slave_0 added [ 89.310362][ T5840] team0: Port device team_slave_1 added [ 89.348258][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.355591][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.384809][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.425965][ T5844] team0: Port device team_slave_1 added [ 89.483112][ T5838] hsr_slave_0: entered promiscuous mode [ 89.489690][ T5838] hsr_slave_1: entered promiscuous mode [ 89.518121][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.556586][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.563583][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.589598][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.602770][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.610169][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.636700][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.679504][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.703788][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.710811][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.737177][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.775367][ T5841] hsr_slave_0: entered promiscuous mode [ 89.782016][ T5841] hsr_slave_1: entered promiscuous mode [ 89.788906][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.796795][ T5841] Cannot create hsr debugfs directory [ 89.826677][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.833657][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.860442][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.921936][ T5843] team0: Port device team_slave_0 added [ 89.941354][ T5840] hsr_slave_0: entered promiscuous mode [ 89.948340][ T5840] hsr_slave_1: entered promiscuous mode [ 89.954520][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.962491][ T5840] Cannot create hsr debugfs directory [ 89.983801][ T5843] team0: Port device team_slave_1 added [ 90.061151][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.068515][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.095469][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.161617][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.169025][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.195431][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.253973][ T5844] hsr_slave_0: entered promiscuous mode [ 90.262635][ T5844] hsr_slave_1: entered promiscuous mode [ 90.269213][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.276853][ T5844] Cannot create hsr debugfs directory [ 90.405249][ T5843] hsr_slave_0: entered promiscuous mode [ 90.411715][ T5843] hsr_slave_1: entered promiscuous mode [ 90.418277][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.425921][ T5843] Cannot create hsr debugfs directory [ 90.743000][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.805582][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.832616][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.874022][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.943918][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.963248][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.983282][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.993940][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.025088][ T5832] Bluetooth: hci1: command tx timeout [ 91.064371][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.098029][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.104980][ T5832] Bluetooth: hci2: command tx timeout [ 91.105027][ T5832] Bluetooth: hci0: command tx timeout [ 91.127639][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.142758][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.190213][ T5835] Bluetooth: hci3: command tx timeout [ 91.237134][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.249184][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.259804][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.270466][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.275114][ T5835] Bluetooth: hci4: command tx timeout [ 91.408020][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.420502][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.432900][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.444414][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.493125][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.536010][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.566880][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.594519][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.601795][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.618246][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.625513][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.691573][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.744663][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.751860][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.764083][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.771235][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.787072][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.830615][ T978] cfg80211: failed to load regulatory.db [ 91.858333][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.882662][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.889937][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.907767][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.914973][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.976853][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.994488][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.050799][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.082172][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.117416][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.124557][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.136022][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.143159][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.152982][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.160123][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.179352][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.206652][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.213893][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.261509][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.348539][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.439385][ T5841] veth0_vlan: entered promiscuous mode [ 92.472348][ T5838] veth0_vlan: entered promiscuous mode [ 92.492584][ T5841] veth1_vlan: entered promiscuous mode [ 92.519136][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.541008][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.554538][ T5838] veth1_vlan: entered promiscuous mode [ 92.599857][ T5840] veth0_vlan: entered promiscuous mode [ 92.691171][ T5838] veth0_macvtap: entered promiscuous mode [ 92.700546][ T5840] veth1_vlan: entered promiscuous mode [ 92.708432][ T5843] veth0_vlan: entered promiscuous mode [ 92.719444][ T5838] veth1_macvtap: entered promiscuous mode [ 92.753164][ T5841] veth0_macvtap: entered promiscuous mode [ 92.776241][ T5844] veth0_vlan: entered promiscuous mode [ 92.786597][ T5843] veth1_vlan: entered promiscuous mode [ 92.803230][ T5841] veth1_macvtap: entered promiscuous mode [ 92.831178][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.849415][ T5844] veth1_vlan: entered promiscuous mode [ 92.871367][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.882577][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.891721][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.901894][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.910872][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.936278][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.958674][ T5840] veth0_macvtap: entered promiscuous mode [ 92.971401][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.003759][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.014632][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.024579][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.035514][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057898][ T5840] veth1_macvtap: entered promiscuous mode [ 93.106859][ T5835] Bluetooth: hci1: command tx timeout [ 93.142224][ T5843] veth0_macvtap: entered promiscuous mode [ 93.184298][ T5843] veth1_macvtap: entered promiscuous mode [ 93.190445][ T5835] Bluetooth: hci0: command tx timeout [ 93.191395][ T5832] Bluetooth: hci2: command tx timeout [ 93.206315][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.223712][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.233129][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.251333][ T5844] veth0_macvtap: entered promiscuous mode [ 93.283422][ T5832] Bluetooth: hci3: command tx timeout [ 93.290783][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.303441][ T5844] veth1_macvtap: entered promiscuous mode [ 93.326190][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.335649][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344448][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.354499][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.364789][ T5832] Bluetooth: hci4: command tx timeout [ 93.374094][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.390972][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.405110][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.413086][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.440368][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.483337][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.503252][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.512625][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.522247][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.531917][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.563450][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.580933][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.583339][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.601982][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.610863][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.620576][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.651381][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.669104][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.741438][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.812666][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.835187][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.993902][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.011243][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.104681][ T30] audit: type=1326 audit(1747693203.979:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x0 [ 94.104875][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.183977][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.296926][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.328704][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.340002][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.367229][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.471728][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.482579][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.592244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.702115][ T5907] trusted_key: syz.3.4 sent an empty control message without MSG_MORE. [ 94.789320][ T5910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.985071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.105459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.152190][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.169798][ T5891] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.216048][ T5832] Bluetooth: hci1: command tx timeout [ 95.264913][ T5832] Bluetooth: hci0: command tx timeout [ 95.270461][ T5832] Bluetooth: hci2: command tx timeout [ 95.306408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.345542][ T5832] Bluetooth: hci3: command tx timeout [ 95.426278][ T5832] Bluetooth: hci4: command tx timeout [ 95.472086][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 95.477725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.486920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.495559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.504296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.616415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.636262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.697438][ T5891] usb 4-1: config 8 has an invalid interface number: 72 but max is 0 [ 95.742483][ T5891] usb 4-1: config 8 has no interface number 0 [ 95.756147][ T5891] usb 4-1: config 8 interface 72 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 95.766810][ T5891] usb 4-1: config 8 interface 72 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 95.778420][ T5891] usb 4-1: config 8 interface 72 has no altsetting 0 [ 95.794327][ T5891] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=b7.98 [ 95.803774][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.828129][ T5891] usb 4-1: Product: syz [ 95.832343][ T5891] usb 4-1: Manufacturer: syz [ 95.847175][ T5891] usb 4-1: SerialNumber: syz [ 96.010494][ T5907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.403613][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10'. [ 98.741028][ T5891] smsc75xx v1.0.0 [ 98.764842][ T5891] smsc75xx 4-1:8.72 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 98.805207][ T5891] smsc75xx 4-1:8.72: probe with driver smsc75xx failed with error -22 [ 98.901267][ T5891] usb 4-1: USB disconnect, device number 2 [ 99.151116][ T5958] syz_tun: entered allmulticast mode [ 99.192154][ T5957] syz_tun: left allmulticast mode [ 99.442131][ T5962] netlink: 'syz.4.18': attribute type 2 has an invalid length. [ 99.561390][ T5968] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 99.583483][ T5962] : entered promiscuous mode [ 99.713237][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 99.841918][ T5971] veth3: entered promiscuous mode [ 101.014756][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.191936][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.242122][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.254878][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.268761][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.278185][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.302782][ T10] usb 1-1: config 0 descriptor?? [ 101.346810][ T5988] Zero length message leads to an empty skb [ 101.730060][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.740359][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.827353][ T10] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 101.872698][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 102.189066][ T5891] usb 1-1: USB disconnect, device number 2 [ 102.496637][ T5998] kvm: user requested TSC rate below hardware speed [ 102.554979][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.724831][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 102.739416][ T5884] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 102.769521][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.814740][ T5884] usb 3-1: Product: syz [ 102.818961][ T5884] usb 3-1: Manufacturer: syz [ 102.832785][ T6002] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 102.853369][ T5884] usb 3-1: SerialNumber: syz [ 102.872199][ T5884] usb 3-1: config 0 descriptor?? [ 102.884648][ T6002] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.912505][ T6002] bond0: (slave team0): Enslaving as an active interface with an up link [ 102.923839][ T5884] usb 3-1: MBOX3: Invalid descriptor size=18. [ 103.210813][ T5995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 103.217455][ T5995] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.264707][ T5995] vhci_hcd vhci_hcd.0: Device attached [ 103.456092][ T5884] vhci_hcd: vhci_device speed not set [ 103.516413][ T5884] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 104.851431][ T5889] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.398918][ T5889] usb 5-1: config 0 has no interfaces? [ 105.424973][ T5889] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 105.434038][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.524937][ T6010] vhci_hcd: connection reset by peer [ 105.551595][ T5889] usb 5-1: Product: syz [ 105.564863][ T12] vhci_hcd: stop threads [ 105.564985][ T5889] usb 5-1: Manufacturer: syz [ 105.569580][ T12] vhci_hcd: release socket [ 105.584317][ T5889] usb 5-1: SerialNumber: syz [ 105.613679][ T10] usb 3-1: USB disconnect, device number 2 [ 105.698767][ T5889] usb 5-1: config 0 descriptor?? [ 105.826648][ T12] vhci_hcd: disconnect device [ 107.389970][ T6043] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 107.396602][ T6043] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.463978][ T6043] vhci_hcd vhci_hcd.0: Device attached [ 108.099242][ T6054] syz.0.41 (6054): drop_caches: 0 [ 108.179209][ T6045] vhci_hcd: connection closed [ 108.215718][ T1154] vhci_hcd: stop threads [ 108.279286][ T1154] vhci_hcd: release socket [ 108.284282][ T1154] vhci_hcd: disconnect device [ 108.922157][ T5889] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.959193][ T5890] usb 5-1: USB disconnect, device number 2 [ 109.044904][ T5884] vhci_hcd: vhci_device speed not set [ 109.276085][ T5889] usb 2-1: not running at top speed; connect to a high speed hub [ 109.321382][ T5889] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 109.405416][ T5889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.452962][ T6064] netlink: 'syz.4.44': attribute type 4 has an invalid length. [ 109.468763][ T6064] netlink: 'syz.4.44': attribute type 4 has an invalid length. [ 109.537004][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.678993][ T6070] tipc: Started in network mode [ 109.684235][ T6070] tipc: Node identity 2, cluster identity 6 [ 109.706541][ T6070] tipc: Node number set to 2 [ 109.771286][ T5889] usb 2-1: Product: syz [ 109.834735][ T5889] usb 2-1: Manufacturer: syz [ 109.842317][ T5889] usb 2-1: SerialNumber: syz [ 109.875019][ T5889] usb 2-1: bad CDC descriptors [ 109.943234][ T6073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.152795][ T6071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.46'. [ 110.268457][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 110.314926][ T6073] bridge_slave_1: left allmulticast mode [ 110.325031][ T6073] bridge_slave_1: left promiscuous mode [ 110.391732][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.411246][ T6073] bridge_slave_0: left allmulticast mode [ 110.427286][ T6073] bridge_slave_0: left promiscuous mode [ 110.436675][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.600875][ T5890] usb 2-1: USB disconnect, device number 2 [ 111.817552][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 111.998320][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.031008][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.057684][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.078813][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.321902][ T24] usb 4-1: usb_control_msg returned -32 [ 112.342879][ T24] usbtmc 4-1:16.0: can't read capabilities [ 112.736260][ T6106] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 112.751927][ T6105] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 112.758473][ T6105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.801136][ T6105] vhci_hcd vhci_hcd.0: Device attached [ 112.823082][ T6108] vhci_hcd: connection closed [ 112.823402][ T12] vhci_hcd: stop threads [ 112.833945][ T12] vhci_hcd: release socket [ 112.839600][ T12] vhci_hcd: disconnect device [ 114.346746][ T5889] usb 4-1: USB disconnect, device number 3 [ 117.575512][ T6127] syz.4.57 (6127): drop_caches: 2 [ 118.510455][ T6169] netlink: 'syz.3.68': attribute type 4 has an invalid length. [ 118.533717][ T6169] netlink: 'syz.3.68': attribute type 4 has an invalid length. [ 118.725324][ T6171] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 118.731896][ T6171] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.764075][ T6171] vhci_hcd vhci_hcd.0: Device attached [ 118.996443][ T5889] vhci_hcd: vhci_device speed not set [ 119.054835][ T5889] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 119.619036][ T6172] vhci_hcd: connection reset by peer [ 119.629535][ T13] vhci_hcd: stop threads [ 119.633853][ T13] vhci_hcd: release socket [ 119.638726][ T13] vhci_hcd: disconnect device [ 120.441728][ T6190] lo: entered allmulticast mode [ 120.466132][ T6190] tunl0: entered allmulticast mode [ 120.492914][ T6190] gre0: entered allmulticast mode [ 120.743943][ T6190] gretap0: entered allmulticast mode [ 120.871781][ T6190] erspan0: entered allmulticast mode [ 120.954247][ T6190] ip_vti0: entered allmulticast mode [ 120.972987][ T6190] ip6_vti0: entered allmulticast mode [ 121.010469][ T6190] sit0: entered allmulticast mode [ 121.060203][ T6190] ip6tnl0: entered allmulticast mode [ 121.111254][ T6190] ip6gre0: entered allmulticast mode [ 121.251859][ T6190] syz_tun: entered allmulticast mode [ 121.328871][ T6190] ip6gretap0: entered allmulticast mode [ 121.352238][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.360124][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.526154][ T6190] bridge0: entered allmulticast mode [ 121.565977][ T6190] vcan0: entered allmulticast mode [ 121.597678][ T6190] bond0: entered allmulticast mode [ 121.612993][ T6190] bond_slave_0: entered allmulticast mode [ 121.628386][ T6190] bond_slave_1: entered allmulticast mode [ 121.674060][ T6190] team0: entered allmulticast mode [ 121.693801][ T6190] team_slave_0: entered allmulticast mode [ 121.710087][ T6190] team_slave_1: entered allmulticast mode [ 121.716357][ T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 121.751840][ T6190] dummy0: entered allmulticast mode [ 121.779477][ T6190] nlmon0: entered allmulticast mode [ 121.795437][ T978] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.807917][ T6190] caif0: entered allmulticast mode [ 121.818407][ T6190] batadv0: entered allmulticast mode [ 121.843211][ T6190] vxcan0: entered allmulticast mode [ 121.881007][ T6190] vxcan1: entered allmulticast mode [ 121.888994][ T6190] veth0: entered allmulticast mode [ 121.899057][ T6190] veth1: entered allmulticast mode [ 121.930420][ T10] usb 1-1: config 32 has an invalid descriptor of length 102, skipping remainder of the config [ 121.942531][ T10] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 121.952836][ T6190] wg0: entered allmulticast mode [ 121.961896][ T6190] wg1: entered allmulticast mode [ 121.968375][ T10] usb 1-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.982486][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 121.988846][ T6190] wg2: entered allmulticast mode [ 121.995773][ T978] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 122.011947][ T978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.022159][ T6190] veth0_to_bridge: entered allmulticast mode [ 122.028325][ T10] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 122.047478][ T978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.059799][ T6190] veth1_to_bridge: entered allmulticast mode [ 122.066282][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.075213][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.085783][ T978] usb 5-1: Product: syz [ 122.104170][ T6190] veth0_to_bond: entered allmulticast mode [ 122.110311][ T978] usb 5-1: Manufacturer: syz [ 122.119870][ T978] usb 5-1: SerialNumber: syz [ 122.131310][ T6190] veth1_to_bond: entered allmulticast mode [ 122.217316][ T6190] veth0_to_team: entered allmulticast mode [ 122.282241][ T6190] veth1_to_team: entered allmulticast mode [ 122.323213][ T6190] veth0_to_batadv: entered allmulticast mode [ 122.334404][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.340183][ T978] usb 5-1: 0:2 : does not exist [ 122.349880][ T6190] batadv_slave_0: entered allmulticast mode [ 122.371925][ T6190] veth1_to_batadv: entered allmulticast mode [ 122.386588][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.395403][ T6190] batadv_slave_1: entered allmulticast mode [ 122.406883][ T6190] xfrm0: entered allmulticast mode [ 122.419999][ T6190] veth0_to_hsr: entered allmulticast mode [ 122.431868][ T978] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 122.433248][ T6190] hsr_slave_0: entered allmulticast mode [ 122.457497][ T6190] veth1_to_hsr: entered allmulticast mode [ 122.490890][ T6190] hsr_slave_1: entered allmulticast mode [ 122.504325][ T6190] hsr0: entered allmulticast mode [ 122.520287][ T6190] veth1_virt_wifi: entered allmulticast mode [ 122.576692][ T6190] veth0_virt_wifi: entered allmulticast mode [ 122.583667][ T978] usb 5-1: USB disconnect, device number 3 [ 122.603001][ T6190] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 122.625662][ T6190] veth1_vlan: entered allmulticast mode [ 122.645742][ T6190] veth0_vlan: entered allmulticast mode [ 122.651273][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.696935][ T6190] vlan0: entered allmulticast mode [ 122.712996][ T6190] vlan1: entered allmulticast mode [ 122.721823][ T6190] macvlan0: entered allmulticast mode [ 122.733749][ T6190] macvlan1: entered allmulticast mode [ 122.743636][ T6190] ipvlan0: entered allmulticast mode [ 122.750164][ T6190] ipvlan1: entered allmulticast mode [ 122.758305][ T6190] veth1_macvtap: entered allmulticast mode [ 122.769501][ T6190] veth0_macvtap: entered allmulticast mode [ 122.780268][ T6190] macvtap0: entered allmulticast mode [ 122.791482][ T6190] macsec0: entered allmulticast mode [ 122.802389][ T6190] geneve0: entered allmulticast mode [ 122.814082][ T6190] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.823553][ T6190] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.833872][ T6190] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.849365][ T6190] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.860660][ T6190] geneve1: entered allmulticast mode [ 122.873256][ T6190] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 122.887215][ T6190] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 122.900986][ T6190] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 122.912819][ T6190] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 122.954243][ T6190] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 123.003143][ T6190] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 123.034038][ T6203] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 123.083804][ T6203] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 123.139468][ T6204] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 123.409074][ T6204] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 123.726812][ T10] usb 1-1: string descriptor 0 read error: -71 [ 124.381595][ T10] usb 1-1: USB disconnect, device number 3 [ 124.391524][ T5889] vhci_hcd: vhci_device speed not set [ 124.654849][ T5884] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 124.976893][ T5884] usb 3-1: config 0 has no interfaces? [ 124.988322][ T5884] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 125.037454][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.074682][ T5884] usb 3-1: Product: syz [ 125.078914][ T5884] usb 3-1: Manufacturer: syz [ 125.132136][ T5884] usb 3-1: SerialNumber: syz [ 125.165489][ T5884] usb 3-1: config 0 descriptor?? [ 125.259619][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.610707][ T6241] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 125.695191][ T5845] usb 3-1: USB disconnect, device number 3 [ 126.102001][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 126.120874][ T6250] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 126.130342][ T6250] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 128.613131][ T6276] fuse: root generation should be zero [ 131.184831][ T5884] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 131.411866][ T5845] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.427762][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.454163][ T5884] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.537394][ T5884] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.564782][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.579139][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 131.709188][ T5845] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 131.719751][ T5884] usb 3-1: config 0 descriptor?? [ 131.737797][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.761248][ T5884] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.774835][ T5884] dvb-usb: bulk message failed: -22 (3/0) [ 131.806066][ T5845] usb 2-1: Product: syz [ 131.838653][ T5845] usb 2-1: Manufacturer: syz [ 131.839979][ T5884] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.863294][ T5845] usb 2-1: SerialNumber: syz [ 131.900106][ T5845] r8152-cfgselector 2-1: Unknown version 0x0000 [ 131.906661][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.915752][ T5845] r8152-cfgselector 2-1: config 0 descriptor?? [ 132.065573][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 132.074948][ T5889] usb 5-1: config 0 has no interfaces? [ 132.102234][ T5889] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 132.111741][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.119837][ T5889] usb 5-1: Product: syz [ 132.124188][ T5889] usb 5-1: Manufacturer: syz [ 132.128921][ T5889] usb 5-1: SerialNumber: syz [ 132.137168][ T5884] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 132.214813][ T5884] usb 3-1: media controller created [ 132.233251][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.534981][ T5889] usb 5-1: config 0 descriptor?? [ 132.620547][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 132.628573][ T5884] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 132.641079][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 132.664693][ T5884] dvb-usb: schedule remote query interval to 150 msecs. [ 132.674822][ T5884] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 132.714069][ T5845] r8152-cfgselector 2-1: Unknown version 0x0000 [ 132.759840][ T5845] r8152-cfgselector 2-1: bad CDC descriptors [ 132.788605][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.795242][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.811213][ T5845] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 132.838093][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 133.014842][ T5884] dvb-usb: error while querying for an remote control event. [ 133.215196][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 133.228451][ T5884] dvb-usb: error while querying for an remote control event. [ 133.448762][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 133.455550][ T5884] dvb-usb: error while querying for an remote control event. [ 133.663244][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 133.708181][ T5884] dvb-usb: error while querying for an remote control event. [ 133.891935][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 133.906723][ T5884] dvb-usb: error while querying for an remote control event. [ 134.095222][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 134.101935][ T5891] dvb-usb: error while querying for an remote control event. [ 134.264855][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 134.273180][ T5891] dvb-usb: error while querying for an remote control event. [ 134.534737][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 134.684882][ T5891] dvb-usb: error while querying for an remote control event. [ 134.759812][ T5891] usb 3-1: USB disconnect, device number 4 [ 134.872938][ T6333] program syz.0.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.901126][ T5891] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 135.230800][ T5889] usb 5-1: USB disconnect, device number 4 [ 135.455485][ T5845] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.616889][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.638501][ T5845] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 135.650593][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.668313][ T5845] usb 2-1: config 0 descriptor?? [ 135.699124][ T5845] pwc: Askey VC010 type 2 USB webcam detected. [ 135.889641][ T5845] pwc: send_video_command error -71 [ 135.897684][ T5845] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 135.913725][ T5845] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 135.985040][ T5842] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 136.019486][ T5845] usb 2-1: USB disconnect, device number 4 [ 136.169647][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 136.187444][ T5842] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 136.197958][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.229704][ T5842] usb 5-1: config 0 descriptor?? [ 136.416900][ T5845] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.440473][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.452513][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.589345][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.599975][ T5845] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 136.779831][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.815779][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.828883][ T5845] usb 2-1: config 0 descriptor?? [ 136.848769][ T5845] pwc: Askey VC010 type 2 USB webcam detected. [ 136.994848][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 137.019580][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 137.058612][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 137.081841][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.173230][ T5891] usb 4-1: Product: syz [ 137.187507][ T5842] ath6kl: Failed to submit usb control message: -71 [ 137.193862][ T5891] usb 4-1: Manufacturer: syz [ 137.221032][ T5891] usb 4-1: SerialNumber: syz [ 137.228542][ T5842] ath6kl: unable to send the bmi data to the device: -71 [ 137.245430][ T5842] ath6kl: Unable to send get target info: -71 [ 137.253085][ T5845] pwc: recv_control_msg error -32 req 02 val 2b00 [ 137.261059][ T5845] pwc: recv_control_msg error -32 req 02 val 2700 [ 137.269729][ T5845] pwc: recv_control_msg error -32 req 02 val 2c00 [ 137.271096][ T5891] usb 4-1: config 0 descriptor?? [ 137.278774][ T5845] pwc: recv_control_msg error -32 req 04 val 1000 [ 137.291543][ T5845] pwc: recv_control_msg error -32 req 04 val 1300 [ 137.303851][ T5845] pwc: recv_control_msg error -32 req 04 val 1400 [ 137.314480][ T5845] pwc: recv_control_msg error -32 req 02 val 2000 [ 137.323374][ T5845] pwc: recv_control_msg error -32 req 02 val 2100 [ 137.335554][ T5845] pwc: recv_control_msg error -32 req 04 val 1500 [ 137.342962][ T5845] pwc: recv_control_msg error -32 req 02 val 2500 [ 137.357264][ T5845] pwc: recv_control_msg error -32 req 02 val 2400 [ 137.365967][ T5891] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 137.372941][ T5845] pwc: recv_control_msg error -32 req 02 val 2600 [ 137.417225][ T5842] ath6kl: Failed to init ath6kl core: -71 [ 137.489673][ T5842] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 137.570842][ T5842] usb 5-1: USB disconnect, device number 5 [ 137.616248][ T5845] pwc: recv_control_msg error -71 req 02 val 2800 [ 137.671297][ T5845] pwc: recv_control_msg error -71 req 04 val 1100 [ 137.965831][ T6374] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 137.989040][ T5845] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.002909][ T5845] pwc: Registered as video103. [ 138.033950][ T6374] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 138.048221][ T5845] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 138.121107][ T5845] usb 2-1: USB disconnect, device number 5 [ 138.270898][ T6376] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 138.407938][ T6376] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 139.054782][ T5845] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.435075][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 139.448772][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.470838][ T5845] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.487588][ T5845] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 139.498975][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.569430][ T5845] usb 2-1: Product: syz [ 139.573755][ T5845] usb 2-1: Manufacturer: syz [ 139.606738][ T5845] usb 2-1: SerialNumber: syz [ 139.637022][ T5845] usb 2-1: config 0 descriptor?? [ 139.715019][ T5842] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.884776][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 139.899349][ T5842] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 139.924567][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.010304][ T5842] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.067754][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.151043][ T5842] usb 3-1: Product: syz [ 140.151595][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 140.165578][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.124'. [ 140.182740][ T6390] geneve2: entered promiscuous mode [ 140.187681][ T5842] usb 3-1: Manufacturer: syz [ 140.188536][ T6390] geneve2: entered allmulticast mode [ 140.200022][ T5842] usb 3-1: SerialNumber: syz [ 140.447616][ T5842] usb 3-1: 0:2 : does not exist [ 140.519245][ T5884] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.539864][ T5842] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 140.589470][ T5842] usb 3-1: USB disconnect, device number 5 [ 140.700344][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.722878][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.759203][ T5891] gspca_zc3xx: reg_w_i err -71 [ 140.785436][ T5891] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 140.808867][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 140.828445][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.840187][ T5891] usb 4-1: USB disconnect, device number 4 [ 140.884088][ T5884] usb 5-1: config 0 descriptor?? [ 141.312624][ T5884] logitech 0003:046D:C294.0002: unknown main item tag 0x0 [ 141.320052][ T5884] logitech 0003:046D:C294.0002: unknown main item tag 0x7 [ 141.345131][ T5884] logitech 0003:046D:C294.0002: unknown main item tag 0x0 [ 141.352725][ T5884] logitech 0003:046D:C294.0002: unknown main item tag 0x0 [ 141.476657][ T5884] logitech 0003:046D:C294.0002: unknown main item tag 0x0 [ 141.521704][ T5884] logitech 0003:046D:C294.0002: unknown main item tag 0x0 [ 141.566713][ T5884] logitech 0003:046D:C294.0002: unknown main item tag 0x0 [ 141.642106][ T5884] logitech 0003:046D:C294.0002: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.4-1/input0 [ 141.714773][ T5889] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 141.764455][ T5884] logitech 0003:046D:C294.0002: no inputs found [ 141.858595][ T24] usb 2-1: USB disconnect, device number 6 [ 141.868658][ T6403] ================================================================== [ 141.876752][ T6403] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 141.884996][ T6403] Read of size 7 at addr ffff888141e8b860 by task fido_id/6403 [ 141.892536][ T6403] [ 141.894876][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: fido_id Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 141.894893][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.894906][ T6403] Call Trace: [ 141.894915][ T6403] [ 141.894922][ T6403] dump_stack_lvl+0x189/0x250 [ 141.894944][ T6403] ? rcu_is_watching+0x15/0xb0 [ 141.894956][ T6403] ? __kasan_check_byte+0x12/0x40 [ 141.894975][ T6403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.894994][ T6403] ? rcu_is_watching+0x15/0xb0 [ 141.895006][ T6403] ? lock_release+0x4b/0x3e0 [ 141.895026][ T6403] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 141.895043][ T6403] ? __virt_addr_valid+0x18c/0x540 [ 141.895061][ T6403] ? __virt_addr_valid+0x469/0x540 [ 141.895081][ T6403] print_report+0xb4/0x290 [ 141.895098][ T6403] ? report_descriptor_read+0xb5/0x100 [ 141.895117][ T6403] kasan_report+0x118/0x150 [ 141.895135][ T6403] ? report_descriptor_read+0xb5/0x100 [ 141.895158][ T6403] kasan_check_range+0x29a/0x2b0 [ 141.895176][ T6403] ? report_descriptor_read+0xb5/0x100 [ 141.895196][ T6403] __asan_memcpy+0x29/0x70 [ 141.895211][ T6403] report_descriptor_read+0xb5/0x100 [ 141.895231][ T6403] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 141.895250][ T6403] kernfs_fop_read_iter+0x3fb/0x640 [ 141.895268][ T6403] vfs_read+0x4cd/0x980 [ 141.895288][ T6403] ? __pfx_vfs_read+0x10/0x10 [ 141.895313][ T6403] ? do_sys_openat2+0x154/0x1c0 [ 141.895329][ T6403] ksys_read+0x145/0x250 [ 141.895346][ T6403] ? __pfx_ksys_read+0x10/0x10 [ 141.895363][ T6403] ? do_syscall_64+0xba/0x210 [ 141.895384][ T6403] do_syscall_64+0xf6/0x210 [ 141.895403][ T6403] ? clear_bhb_loop+0x60/0xb0 [ 141.895420][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.895434][ T6403] RIP: 0033:0x7f36ea4a7407 [ 141.895449][ T6403] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 141.895462][ T6403] RSP: 002b:00007ffce69c2920 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 141.895482][ T6403] RAX: ffffffffffffffda RBX: 00007f36eac33880 RCX: 00007f36ea4a7407 [ 141.895493][ T6403] RDX: 0000000000001000 RSI: 00007ffce69c2970 RDI: 0000000000000004 [ 141.895502][ T6403] RBP: 000055a610f99730 R08: 0000000000000000 R09: 0000000000000000 [ 141.895510][ T6403] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a610f98930 [ 141.895519][ T6403] R13: 00007ffce69c2970 R14: 0000000000000004 R15: 000055a5f85f34d8 [ 141.895535][ T6403] [ 141.895540][ T6403] [ 142.136250][ T6403] Allocated by task 5884: [ 142.140580][ T6403] kasan_save_track+0x3e/0x80 [ 142.145265][ T6403] __kasan_kmalloc+0x93/0xb0 [ 142.149857][ T6403] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 142.156271][ T6403] kmemdup_noprof+0x2b/0x70 [ 142.160770][ T6403] hid_open_report+0x208/0xee0 [ 142.165529][ T6403] lg_probe+0x270/0x7d0 [ 142.169678][ T6403] hid_device_probe+0x397/0x710 [ 142.174523][ T6403] really_probe+0x26a/0x9a0 [ 142.179027][ T6403] __driver_probe_device+0x18c/0x2f0 [ 142.184305][ T6403] driver_probe_device+0x4f/0x430 [ 142.189326][ T6403] __device_attach_driver+0x2ce/0x530 [ 142.194698][ T6403] bus_for_each_drv+0x251/0x2e0 [ 142.199541][ T6403] __device_attach+0x2b8/0x400 [ 142.204296][ T6403] bus_probe_device+0x185/0x260 [ 142.209142][ T6403] device_add+0x7b6/0xb50 [ 142.213467][ T6403] hid_add_device+0x398/0x540 [ 142.218143][ T6403] usbhid_probe+0xe13/0x12a0 [ 142.222731][ T6403] usb_probe_interface+0x641/0xbc0 [ 142.227834][ T6403] really_probe+0x26a/0x9a0 [ 142.232333][ T6403] __driver_probe_device+0x18c/0x2f0 [ 142.237613][ T6403] driver_probe_device+0x4f/0x430 [ 142.242635][ T6403] __device_attach_driver+0x2ce/0x530 [ 142.248005][ T6403] bus_for_each_drv+0x251/0x2e0 [ 142.252848][ T6403] __device_attach+0x2b8/0x400 [ 142.257603][ T6403] bus_probe_device+0x185/0x260 [ 142.262437][ T6403] device_add+0x7b6/0xb50 [ 142.266756][ T6403] usb_set_configuration+0x1a87/0x20e0 [ 142.272210][ T6403] usb_generic_driver_probe+0x8d/0x150 [ 142.277666][ T6403] usb_probe_device+0x1c1/0x390 [ 142.282506][ T6403] really_probe+0x26a/0x9a0 [ 142.287031][ T6403] __driver_probe_device+0x18c/0x2f0 [ 142.292310][ T6403] driver_probe_device+0x4f/0x430 [ 142.297331][ T6403] __device_attach_driver+0x2ce/0x530 [ 142.302696][ T6403] bus_for_each_drv+0x251/0x2e0 [ 142.307624][ T6403] __device_attach+0x2b8/0x400 [ 142.312386][ T6403] bus_probe_device+0x185/0x260 [ 142.317235][ T6403] device_add+0x7b6/0xb50 [ 142.321565][ T6403] usb_new_device+0xa39/0x16c0 [ 142.326326][ T6403] hub_event+0x2941/0x4a00 [ 142.330740][ T6403] process_scheduled_works+0xadb/0x17a0 [ 142.336279][ T6403] worker_thread+0x8a0/0xda0 [ 142.340861][ T6403] kthread+0x70e/0x8a0 [ 142.344928][ T6403] ret_from_fork+0x4b/0x80 [ 142.349348][ T6403] ret_from_fork_asm+0x1a/0x30 [ 142.354102][ T6403] [ 142.356422][ T6403] The buggy address belongs to the object at ffff888141e8b860 [ 142.356422][ T6403] which belongs to the cache kmalloc-8 of size 8 [ 142.370131][ T6403] The buggy address is located 0 bytes inside of [ 142.370131][ T6403] freed 8-byte region [ffff888141e8b860, ffff888141e8b868) [ 142.383592][ T6403] [ 142.385920][ T6403] The buggy address belongs to the physical page: [ 142.392317][ T6403] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888141e8bfc0 pfn:0x141e8b [ 142.402486][ T6403] anon flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 142.410215][ T6403] page_type: f5(slab) [ 142.414203][ T6403] raw: 057ff00000000000 ffff88801a041500 0000000000000000 dead000000000001 [ 142.422794][ T6403] raw: ffff888141e8bfc0 0000000080800074 00000000f5000000 0000000000000000 [ 142.431382][ T6403] page dumped because: kasan: bad access detected [ 142.437800][ T6403] page_owner tracks the page as allocated [ 142.443594][ T6403] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2549677368, free_ts 0 [ 142.461142][ T6403] post_alloc_hook+0x1d8/0x230 [ 142.465925][ T6403] get_page_from_freelist+0x21ce/0x22b0 [ 142.471480][ T6403] __alloc_frozen_pages_noprof+0x181/0x370 [ 142.477317][ T6403] alloc_pages_mpol+0x232/0x4a0 [ 142.482172][ T6403] allocate_slab+0x8a/0x3b0 [ 142.486671][ T6403] ___slab_alloc+0xbfc/0x1480 [ 142.491350][ T6403] __kmalloc_noprof+0x305/0x4f0 [ 142.496228][ T6403] security_sb_alloc+0x48/0x330 [ 142.501078][ T6403] alloc_super+0x20c/0x970 [ 142.505502][ T6403] sget_fc+0x329/0xa40 [ 142.509581][ T6403] get_tree_single+0x2f/0x150 [ 142.514340][ T6403] vfs_get_tree+0x8f/0x2b0 [ 142.518759][ T6403] vfs_kern_mount+0xbe/0x160 [ 142.523350][ T6403] simple_pin_fs+0xe1/0x160 [ 142.527850][ T6403] start_creating+0xbc/0x310 [ 142.532435][ T6403] debugfs_create_dir+0x28/0x420 [ 142.537463][ T6403] page_owner free stack trace missing [ 142.542838][ T6403] [ 142.545156][ T6403] Memory state around the buggy address: [ 142.550782][ T6403] ffff888141e8b700: 04 fc fc fc 04 fc fc fc 05 fc fc fc 06 fc fc fc [ 142.558841][ T6403] ffff888141e8b780: 05 fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 142.566900][ T6403] >ffff888141e8b800: fa fc fc fc fa fc fc fc fa fc fc fc fb fc fc fc [ 142.574960][ T6403] ^ [ 142.582148][ T6403] ffff888141e8b880: fa fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 142.590198][ T6403] ffff888141e8b900: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 142.598252][ T6403] ================================================================== [ 142.669419][ T5884] usb 5-1: USB disconnect, device number 6 [ 142.705939][ T6403] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.713191][ T6403] CPU: 1 UID: 0 PID: 6403 Comm: fido_id Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 142.723195][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.733402][ T6403] Call Trace: [ 142.736705][ T6403] [ 142.739659][ T6403] dump_stack_lvl+0x99/0x250 [ 142.744290][ T6403] ? __asan_memcpy+0x40/0x70 [ 142.748916][ T6403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.754151][ T6403] ? __pfx__printk+0x10/0x10 [ 142.758789][ T6403] panic+0x2db/0x790 [ 142.762721][ T6403] ? __pfx_preempt_schedule+0x10/0x10 [ 142.768129][ T6403] ? __pfx_panic+0x10/0x10 [ 142.772583][ T6403] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 142.778505][ T6403] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.784850][ T6403] ? report_descriptor_read+0xb5/0x100 [ 142.790340][ T6403] check_panic_on_warn+0x89/0xb0 [ 142.795301][ T6403] ? report_descriptor_read+0xb5/0x100 [ 142.800792][ T6403] end_report+0x78/0x160 [ 142.805063][ T6403] kasan_report+0x129/0x150 [ 142.809591][ T6403] ? report_descriptor_read+0xb5/0x100 [ 142.815101][ T6403] kasan_check_range+0x29a/0x2b0 [ 142.820075][ T6403] ? report_descriptor_read+0xb5/0x100 [ 142.825565][ T6403] __asan_memcpy+0x29/0x70 [ 142.830019][ T6403] report_descriptor_read+0xb5/0x100 [ 142.835352][ T6403] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 142.840825][ T6403] kernfs_fop_read_iter+0x3fb/0x640 [ 142.846035][ T6403] vfs_read+0x4cd/0x980 [ 142.850208][ T6403] ? __pfx_vfs_read+0x10/0x10 [ 142.854919][ T6403] ? do_sys_openat2+0x154/0x1c0 [ 142.859798][ T6403] ksys_read+0x145/0x250 [ 142.864058][ T6403] ? __pfx_ksys_read+0x10/0x10 [ 142.868854][ T6403] ? do_syscall_64+0xba/0x210 [ 142.873582][ T6403] do_syscall_64+0xf6/0x210 [ 142.878102][ T6403] ? clear_bhb_loop+0x60/0xb0 [ 142.882791][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.888703][ T6403] RIP: 0033:0x7f36ea4a7407 [ 142.893130][ T6403] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 142.912750][ T6403] RSP: 002b:00007ffce69c2920 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 142.921175][ T6403] RAX: ffffffffffffffda RBX: 00007f36eac33880 RCX: 00007f36ea4a7407 [ 142.929153][ T6403] RDX: 0000000000001000 RSI: 00007ffce69c2970 RDI: 0000000000000004 [ 142.937128][ T6403] RBP: 000055a610f99730 R08: 0000000000000000 R09: 0000000000000000 [ 142.945120][ T6403] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a610f98930 [ 142.953105][ T6403] R13: 00007ffce69c2970 R14: 0000000000000004 R15: 000055a5f85f34d8 [ 142.961098][ T6403] [ 142.964473][ T6403] Kernel Offset: disabled [ 142.968810][ T6403] Rebooting in 86400 seconds..