last executing test programs: 13.635475692s ago: executing program 0 (id=1): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.296373311s ago: executing program 2 (id=3): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x5c}]}}}], 0x18}}], 0x1, 0x50008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13.056561152s ago: executing program 3 (id=4): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404e881) syz_clone3(&(0x7f00000036c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x1b}, &(0x7f0000000400)=""/216, 0xd8, 0x0, 0x0}, 0x58) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0xc041) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) dup2(r8, r0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 11.256838045s ago: executing program 3 (id=6): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x50008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 9.321822384s ago: executing program 0 (id=8): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) readv(r1, &(0x7f00000003c0), 0x0) 9.057062227s ago: executing program 1 (id=9): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(0x0, &(0x7f00000000c0), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0xb, 0x3}, 0x20) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@remote, @in=@broadcast, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xc}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0xc4, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1, 0x1, 0x1, 0x4, 0x4, 0x80000001}, {{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x48, 0x4, 0x40dfff, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d4, 0x2b}, 0x6, @in=@rand_addr=0x64010101, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRES8=0x0, @ANYRES32=r2, @ANYRESDEC=r1, @ANYRESOCT=r2], 0x44}}, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xff7f, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) 8.895188915s ago: executing program 2 (id=10): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x96, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e666c"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 7.735722358s ago: executing program 1 (id=11): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441805"], 0x30}, 0x7e8166965e22236a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000001540)=0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xff, @loopback, 0x10}}, 0x2, 0x0, 0x9690, 0x6, 0x2, 0x4, 0x8}, &(0x7f00000005c0)=0x9c) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 7.655077603s ago: executing program 4 (id=12): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) r2 = gettid() ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0xc0, 0x112, 0x27}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELFLOWTABLE={0xb0, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0xf8, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xd6, 0x8, "89de822da3151ec88ae5b2fb121a0e27ba1925c9ecb8eb59a8a0c196a70d4518c53024f74b958c543c1c22e8bd26354e3d3ad167714c121625dd27ecf1ba54c06d80b4bc29f4f3dafe1d1a87b1809c893004eb4699125ca7712dc3bea31801d8da6307c9d58328cadf4442c6d9fd6f62f3392ac67a7e640e5695f6c87661c324d6edd4e74d49fc998b13d3cd600056008e297b28df32b1edb1a85f1f6dae9384e5f2e9247cff2b262491739602718bf6b6332cf304502593ce8780e9233c49316ec4be4ef6e48429cdce377ede3703f5fc2a"}, @NFTA_OBJ_USERDATA={0xa, 0x8, "9a6b1964dc21"}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x288}, 0x1, 0x0, 0x0, 0x48000}, 0x840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(r1, &(0x7f0000000200), 0x0, 0x0, 0x0) close(0x3) 7.588231625s ago: executing program 2 (id=13): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.570040016s ago: executing program 3 (id=14): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30af, 0x0, 0x1, 0x158}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 7.263099291s ago: executing program 4 (id=15): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x96, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e666c"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 7.193846375s ago: executing program 3 (id=16): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00!'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.811358796s ago: executing program 1 (id=17): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000001000)) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000002000)="03") syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 4.655411001s ago: executing program 4 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.542127913s ago: executing program 3 (id=19): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.992933469s ago: executing program 4 (id=20): socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x20006, &(0x7f0000000300)) r0 = eventfd2(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x4, @private1, 0x9}}, 0x7, 0x4, 0x2, 0x3, 0x54, 0x6, 0xf5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000001}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000540)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) socket(0x1e, 0x5, 0x20000005) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000240)) listen(0xffffffffffffffff, 0x3) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x521f) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) timer_settime(r5, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x8) close(0x3) fsync(r3) 3.832587156s ago: executing program 0 (id=21): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) unshare(0x24060400) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.685687514s ago: executing program 2 (id=22): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="40f1ff000000433964c714809ea5bb70f5a605e1f04554b88ddb6f939f60947960a6937e30f04512139d76f6ac3ce4499315ae1eace097896ed69019e6a3b4e8564057fd75bc720ac0dea487e3174d5d19df4ba8cc1a1f0acb9068700aeba1957fcf865e484dfaa2aa46ae2adb6ab01d7d02168c66789202b017c6b1c76a1f2eafbbf925486eeb43c37a6946cb64f567eadce4771b6be331be11376150449e837f55f5e268c3c8f04061fc7dfad3885a8b15c550520fd862666855d3b4070000000c23866fbf160b371a838b021e8393a0d015201ef6f9df6ad4f9b49bd337d1c78163bc9bb15add2f7af1ac74c7cb16a97800000000000000a8b2839cdfd1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) unshare(0x24060400) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.177338719s ago: executing program 4 (id=23): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(0x0, &(0x7f00000000c0), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0xb, 0x3}, 0x20) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@remote, @in=@broadcast, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xc}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0xc4, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1, 0x1, 0x1, 0x4, 0x4, 0x80000001}, {{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x48, 0x4, 0x40dfff, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d4, 0x2b}, 0x6, @in=@rand_addr=0x64010101, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRES8=0x0, @ANYRES32=r2, @ANYRESDEC=r1, @ANYRESOCT=r2], 0x44}}, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xff7f, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) 2.062530187s ago: executing program 4 (id=24): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441805"], 0x30}, 0x7e8166965e22236a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000001540)=0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xff, @loopback, 0x10}}, 0x2, 0x0, 0x9690, 0x6, 0x2, 0x4, 0x8}, &(0x7f00000005c0)=0x9c) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x20002200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0x7fffff00036dfb}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.027060209s ago: executing program 3 (id=25): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441805"], 0x30}, 0x7e8166965e22236a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000001540)=0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xff, @loopback, 0x10}}, 0x2, 0x0, 0x9690, 0x6, 0x2, 0x4, 0x8}, &(0x7f00000005c0)=0x9c) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x20002200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.688626249s ago: executing program 1 (id=26): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30af, 0x0, 0x1, 0x158}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1.63379169s ago: executing program 1 (id=27): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x96, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e666c"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 584.553366ms ago: executing program 0 (id=28): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) socket$xdp(0x2c, 0x3, 0x0) 31.332005ms ago: executing program 1 (id=29): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_ublk_setup_io_uring(0x81b, &(0x7f0000000640)={0x0, 0x30b5, 0x400, 0x4001002, 0x372}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3600, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xfffffffe, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x13) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd2, 0x19, 0x0, 0x0, 0x4, 0x8, 0x26, 0x3, 0x0, 0x8, 0xa, 0x3, 0x0, 0x7, 0x6, 0x6, 0x8d, 0x0, 0x4, '\x00', 0x2, 0x2}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) 0s ago: executing program 2 (id=30): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. [ 78.688412][ T5607] cgroup: Unknown subsys name 'net' [ 78.763533][ T5607] cgroup: Unknown subsys name 'cpuset' [ 78.767176][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.491312][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.876493][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.890966][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.892260][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.894280][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.895423][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.897392][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.898099][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.928311][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.929533][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.937385][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.942691][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.944236][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.946126][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.953728][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.958958][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.959895][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.962297][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.990136][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.007697][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.027986][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.028215][ T4935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.051409][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.069257][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.097944][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.098777][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.120955][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.121082][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.121571][ T5632] bridge_slave_0: entered allmulticast mode [ 84.124783][ T5632] bridge_slave_0: entered promiscuous mode [ 84.186956][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.187065][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.187513][ T5632] bridge_slave_1: entered allmulticast mode [ 84.211900][ T5632] bridge_slave_1: entered promiscuous mode [ 84.321604][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.388509][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.388892][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.389093][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.389199][ T5635] bridge_slave_0: entered allmulticast mode [ 84.390572][ T5635] bridge_slave_0: entered promiscuous mode [ 84.446329][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.446424][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.446792][ T5638] bridge_slave_0: entered allmulticast mode [ 84.448434][ T5638] bridge_slave_0: entered promiscuous mode [ 84.483001][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.483208][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.483315][ T5635] bridge_slave_1: entered allmulticast mode [ 84.484727][ T5635] bridge_slave_1: entered promiscuous mode [ 84.525402][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.525509][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.525869][ T5638] bridge_slave_1: entered allmulticast mode [ 84.527554][ T5638] bridge_slave_1: entered promiscuous mode [ 84.612673][ T5632] team0: Port device team_slave_0 added [ 84.645192][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.647245][ T5632] team0: Port device team_slave_1 added [ 84.666560][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.698099][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.732065][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.800956][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.801063][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.801414][ T5636] bridge_slave_0: entered allmulticast mode [ 84.802920][ T5636] bridge_slave_0: entered promiscuous mode [ 84.811762][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.812075][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.817938][ T5634] bridge_slave_0: entered allmulticast mode [ 84.824116][ T5634] bridge_slave_0: entered promiscuous mode [ 84.844577][ T5638] team0: Port device team_slave_0 added [ 84.850750][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.850766][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.850848][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.912923][ T5635] team0: Port device team_slave_0 added [ 84.913970][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.914076][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.914221][ T5636] bridge_slave_1: entered allmulticast mode [ 84.915680][ T5636] bridge_slave_1: entered promiscuous mode [ 84.917963][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.918059][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.918178][ T5634] bridge_slave_1: entered allmulticast mode [ 84.935893][ T5634] bridge_slave_1: entered promiscuous mode [ 84.960524][ T5638] team0: Port device team_slave_1 added [ 84.994152][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.994169][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.994193][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.034069][ T52] Bluetooth: hci3: command tx timeout [ 85.034778][ T5618] Bluetooth: hci4: command tx timeout [ 85.058950][ T5635] team0: Port device team_slave_1 added [ 85.107053][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.107070][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.107100][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.109018][ T52] Bluetooth: hci1: command tx timeout [ 85.111351][ T5628] Bluetooth: hci0: command tx timeout [ 85.112135][ T5618] Bluetooth: hci2: command tx timeout [ 85.193650][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.194447][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.194462][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.194491][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.197531][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.198283][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.198294][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.198313][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.209195][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.209246][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.209328][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.232126][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.376654][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.403133][ T5632] hsr_slave_0: entered promiscuous mode [ 85.404061][ T5632] hsr_slave_1: entered promiscuous mode [ 85.429089][ T5634] team0: Port device team_slave_0 added [ 85.472910][ T5638] hsr_slave_0: entered promiscuous mode [ 85.473727][ T5638] hsr_slave_1: entered promiscuous mode [ 85.474353][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 85.474424][ T5638] Cannot create hsr debugfs directory [ 85.477126][ T5634] team0: Port device team_slave_1 added [ 85.559418][ T5636] team0: Port device team_slave_0 added [ 85.567727][ T5635] hsr_slave_0: entered promiscuous mode [ 85.570931][ T5635] hsr_slave_1: entered promiscuous mode [ 85.574136][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 85.574200][ T5635] Cannot create hsr debugfs directory [ 85.612956][ T5636] team0: Port device team_slave_1 added [ 85.636208][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.636224][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.636247][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.715653][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.715673][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.715700][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.716714][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.716728][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.716750][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.821057][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.821073][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.821094][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.045413][ T5634] hsr_slave_0: entered promiscuous mode [ 86.046267][ T5634] hsr_slave_1: entered promiscuous mode [ 86.046819][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 86.046839][ T5634] Cannot create hsr debugfs directory [ 86.117209][ T5636] hsr_slave_0: entered promiscuous mode [ 86.118134][ T5636] hsr_slave_1: entered promiscuous mode [ 86.124876][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 86.124904][ T5636] Cannot create hsr debugfs directory [ 86.446330][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.461393][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.491815][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.496076][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.522432][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.526606][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.558307][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.569594][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.640676][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.648153][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.673235][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.676689][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.677588][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.702640][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.703654][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.721637][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.827793][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.838320][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.842828][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.855802][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.856687][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.871475][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.877321][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.896482][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.101047][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.113159][ T52] Bluetooth: hci4: command tx timeout [ 87.113256][ T52] Bluetooth: hci3: command tx timeout [ 87.127017][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.157187][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.175264][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.176321][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.191945][ T5618] Bluetooth: hci1: command tx timeout [ 87.192043][ T5618] Bluetooth: hci2: command tx timeout [ 87.192111][ T5618] Bluetooth: hci0: command tx timeout [ 87.204260][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.234380][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.251890][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.334141][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.400668][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.404997][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.405905][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.425864][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.431312][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.449905][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.465109][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.477385][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.488984][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.516187][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.555919][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.556039][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.596571][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.613207][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.613294][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.645607][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.645775][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.664559][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.695575][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.695666][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.795783][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.836288][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.852731][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.852808][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.896478][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.896588][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.942769][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.978379][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.978457][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.024759][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.024871][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.113146][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.155449][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.166970][ T5632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.214350][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.247312][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.247388][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.266169][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.266244][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.287061][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.330656][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.439864][ T5638] veth0_vlan: entered promiscuous mode [ 88.479689][ T5635] veth0_vlan: entered promiscuous mode [ 88.480901][ T5638] veth1_vlan: entered promiscuous mode [ 88.524426][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.543692][ T5632] veth0_vlan: entered promiscuous mode [ 88.548277][ T5635] veth1_vlan: entered promiscuous mode [ 88.588268][ T5632] veth1_vlan: entered promiscuous mode [ 88.663364][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.666428][ T5638] veth0_macvtap: entered promiscuous mode [ 88.691209][ T5635] veth0_macvtap: entered promiscuous mode [ 88.709919][ T5638] veth1_macvtap: entered promiscuous mode [ 88.718291][ T5635] veth1_macvtap: entered promiscuous mode [ 88.757537][ T5632] veth0_macvtap: entered promiscuous mode [ 88.767584][ T5636] veth0_vlan: entered promiscuous mode [ 88.780161][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.811380][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.811837][ T5632] veth1_macvtap: entered promiscuous mode [ 88.852171][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.855696][ T5636] veth1_vlan: entered promiscuous mode [ 88.877574][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.907807][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.952875][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.000055][ T5634] veth0_vlan: entered promiscuous mode [ 89.087651][ T5634] veth1_vlan: entered promiscuous mode [ 89.131622][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131821][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131865][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131904][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131944][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131981][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.132020][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.132058][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.132097][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.132134][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.132172][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.147848][ T5636] veth0_macvtap: entered promiscuous mode [ 89.183159][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.197583][ T52] Bluetooth: hci3: command tx timeout [ 89.197619][ T52] Bluetooth: hci4: command tx timeout [ 89.272092][ T5618] Bluetooth: hci0: command tx timeout [ 89.272129][ T5618] Bluetooth: hci2: command tx timeout [ 89.272153][ T5618] Bluetooth: hci1: command tx timeout [ 89.305629][ T5636] veth1_macvtap: entered promiscuous mode [ 89.354330][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.354354][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.422000][ T5634] veth0_macvtap: entered promiscuous mode [ 89.425484][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.442180][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.442244][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.477371][ T5634] veth1_macvtap: entered promiscuous mode [ 89.504585][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.538342][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.538363][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.581232][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.581296][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.581336][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.635525][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.635547][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.656966][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.684435][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.771787][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.771809][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.771823][ T5638] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.779163][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.779212][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.779251][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.779289][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.779328][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.892481][ T5638] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 89.897444][ T5638] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 89.897839][ T5638] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 89.898443][ T5638] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 90.021980][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.022002][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.119567][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.119592][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.232388][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.232412][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.337770][ T5682] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.368733][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.368758][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.508096][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.508119][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.531476][ T5682] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 90.576136][ T5682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.576175][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.037494][ T5682] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 91.162151][ T5682] wwan wwan0: port wwan0qmi0 attached [ 91.268925][ T52] Bluetooth: hci4: command tx timeout [ 91.268962][ T52] Bluetooth: hci3: command tx timeout [ 91.350753][ T5618] Bluetooth: hci1: command tx timeout [ 91.350783][ T5618] Bluetooth: hci2: command tx timeout [ 91.350801][ T5618] Bluetooth: hci0: command tx timeout [ 91.958435][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.984823][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.009807][ T44] cfg80211: failed to load regulatory.db [ 92.336533][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.338125][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.000506][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.040171][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.640430][ T5745] syz.4.7 uses obsolete (PF_INET,SOCK_PACKET) [ 93.824981][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 93.825009][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 94.242448][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.242503][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.242843][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.365953][ T5682] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 0e:3a:0d:12:ef:92 [ 94.418399][ T5682] usb 1-1: USB disconnect, device number 2 [ 94.513538][ T5682] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 94.541122][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.542932][ T5750] ±ÿ)”ëfl: renamed from lo (while UP) [ 94.681431][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 94.719713][ T5760] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 94.874447][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.875202][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.373525][ T5742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.388965][ T5742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.729566][ T5759] ±ÿ)”ëfl: renamed from lo [ 95.763403][ T774] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.796193][ T5682] wwan wwan0: port wwan0qmi0 disconnected [ 95.983388][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.983776][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.179535][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.189029][ T5682] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.300455][ T5695] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.359448][ T5682] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.360822][ T5682] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.360857][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.360883][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.360907][ T5682] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.360951][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.367060][ T5682] usb 1-1: config 0 descriptor?? [ 96.437891][ T5714] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.459310][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 96.462743][ T5695] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 96.471393][ T5695] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.471432][ T5695] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.471461][ T5695] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.471498][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.555687][ T5695] usb 2-1: config 0 descriptor?? [ 96.609411][ T5714] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 96.610982][ T5714] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.611114][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.239884][ T5696] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.359471][ T5714] qmi_wwan 3-1:1.0: cdc-wdm1: USB WDM device [ 97.365907][ T5682] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 97.420487][ T5696] usb 4-1: Using ep0 maxpacket: 8 [ 97.423677][ T5696] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 97.425086][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 97.425120][ T5696] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 97.425192][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.513639][ T5767] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.588980][ T5696] usb 4-1: config 0 descriptor?? [ 97.594338][ T5714] wwan wwan0: port wwan0qmi0 attached [ 97.791910][ T5695] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0B05:18C6.0002/input/input6 [ 98.005516][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.037685][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.038302][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.081091][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.123345][ T5695] asus 0003:0B05:18C6.0002: input,hiddev2,hidraw1: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.1-1/input0 [ 98.176652][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.194876][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.195497][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.196111][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.210489][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.229415][ T5695] usb 2-1: USB disconnect, device number 2 [ 98.267219][ T5778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.378054][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 98.378181][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 98.427231][ T5786] fido_id[5786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 98.462050][ T5696] usb 4-1: USB disconnect, device number 2 [ 99.096123][ T5791] syzkaller0: entered promiscuous mode [ 99.096149][ T5791] syzkaller0: entered allmulticast mode [ 99.189653][ T5695] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.326032][ T5714] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 4e:7d:aa:58:54:6d [ 99.344261][ T5695] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 99.346621][ T5714] usb 3-1: USB disconnect, device number 2 [ 99.366071][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.366102][ T5695] usb 2-1: Product: syz [ 99.366118][ T5695] usb 2-1: Manufacturer: syz [ 99.366134][ T5695] usb 2-1: SerialNumber: syz [ 99.369301][ T5714] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 99.388847][ T979] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.493686][ T5695] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 99.539958][ T979] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 99.541815][ T5714] wwan wwan0: port wwan0qmi0 disconnected [ 99.565530][ T979] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.565578][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.666173][ T5029] usb 1-1: USB disconnect, device number 3 [ 99.891794][ T979] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 99.942428][ T979] wwan wwan0: port wwan0qmi0 attached [ 100.150625][ T5714] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.178662][ T5029] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.199375][ T5695] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.301365][ T5714] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 100.302690][ T5714] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.302749][ T5714] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 100.302779][ T5714] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 100.302823][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.368656][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 100.368817][ T5029] usb 1-1: Using ep0 maxpacket: 8 [ 100.369476][ T5695] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 100.371166][ T5029] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 100.374637][ T5029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.376391][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.430015][ T5695] usb 3-1: config 0 descriptor?? [ 100.432141][ T5029] usb 1-1: config 0 descriptor?? [ 100.461419][ T5029] usb 1-1: probing VID:PID(0424:012C) [ 100.463082][ T5695] usb 3-1: probing VID:PID(0424:012C) [ 100.485394][ T5695] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 100.485448][ T5695] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 100.485469][ T5695] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 100.485488][ T5695] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 100.486456][ T5029] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 100.486480][ T5029] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 100.486500][ T5029] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 100.486518][ T5029] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 100.486537][ T5029] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 100.486802][ T5695] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 100.596538][ T5714] cxacru 5-1:1.0: invalid response length to cm 0x90: 0 [ 100.638460][ T5803] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 100.638486][ T5803] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 100.825103][ T25] usb 5-1: USB disconnect, device number 2 [ 100.869430][ T5695] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 100.887887][ T5029] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 100.888128][ T979] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 9e:3e:84:bf:f7:05 [ 100.916124][ T979] usb 4-1: USB disconnect, device number 3 [ 100.928202][ T979] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 100.981141][ T979] wwan wwan0: port wwan0qmi0 disconnected [ 101.097696][ T5029] usb 1-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 101.125116][ T5695] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 101.444852][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 101.460236][ T5808] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 101.788661][ T5682] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.852156][ T5714] usb 2-1: USB disconnect, device number 3 [ 101.948639][ T5682] usb 4-1: Using ep0 maxpacket: 16 [ 101.951216][ T5682] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 101.952703][ T5682] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.952737][ T5682] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.952763][ T5682] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.952798][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.015289][ T5682] usb 4-1: config 0 descriptor?? [ 102.904374][ T5695] usb 1-1: USB disconnect, device number 4 [ 102.906201][ T979] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 102.924888][ T979] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 102.926435][ T979] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 103.024715][ T5682] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0B05:18C6.0003/input/input7 [ 103.033252][ T5696] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-110 [ 103.067476][ T5696] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 103.071660][ T5696] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 103.146919][ T5816] ±ÿ)”ëfl: renamed from lo (while UP) [ 103.164589][ T5682] asus 0003:0B05:18C6.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.3-1/input0 [ 103.553273][ T5714] usb 3-1: USB disconnect, device number 3 [ 103.637603][ T5695] USB vub300 remote SDIO host controller[0] now disconnected [ 103.744061][ T5714] USB vub300 remote SDIO host controller[0] now disconnected [ 103.745339][ T59] ================================================================== [ 103.745353][ T59] BUG: KASAN: slab-use-after-free in mmc_host_classdev_release+0x7c/0x100 [ 103.745387][ T59] Read of size 8 at addr ffff88807f7dc4c8 by task kworker/u8:4/59 [ 103.745400][ T59] [ 103.745413][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 103.745430][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.745440][ T59] Workqueue: kvub300d vub300_deadwork_thread [ 103.745468][ T59] Call Trace: [ 103.745477][ T59] [ 103.745484][ T59] dump_stack_lvl+0xe8/0x150 [ 103.745508][ T59] print_address_description+0x55/0x1e0 [ 103.745529][ T59] ? mmc_host_classdev_release+0x7c/0x100 [ 103.745549][ T59] print_report+0x58/0x70 [ 103.745574][ T59] kasan_report+0x117/0x150 [ 103.745597][ T59] ? mmc_host_classdev_release+0x7c/0x100 [ 103.745620][ T59] mmc_host_classdev_release+0x7c/0x100 [ 103.745640][ T59] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 103.745660][ T59] device_release+0xc4/0x1f0 [ 103.745684][ T59] kobject_put+0x222/0x550 [ 103.745700][ ** replaying previous printk message ** [ 103.745700][ T59] ? mmc_pwrseq_free+0x86/0xa0 [ 103.745722][ T59] ? process_scheduled_works+0x97a/0x1630 [ 103.745743][ T59] process_scheduled_works+0xc3d/0x1630 [ 103.745775][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.745798][ T59] ? assign_work+0x3cf/0x5d0 [ 103.745820][ T59] worker_thread+0xa47/0xfb0 [ 103.745851][ T59] kthread+0x38b/0x480 [ 103.745865][ T59] ? __pfx_worker_thread+0x10/0x10 [ 103.745885][ T59] ? __pfx_kthread+0x10/0x10 [ 103.745900][ T59] ret_from_fork+0x514/0xb70 [ 103.745916][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 103.745929][ T59] ? __switch_to+0xc89/0x1420 [ 103.745952][ T59] ? __pfx_kthread+0x10/0x10 [ 103.745967][ T59] ret_from_fork_asm+0x1a/0x30 [ 103.745996][ T59] [ 103.746001][ T59] [ 103.746005][ T59] Allocated by task 5029: [ 103.746012][ T59] kasan_save_track+0x3e/0x80 [ 103.746029][ T59] __kasan_kmalloc+0x93/0xb0 [ 103.746045][ T59] __kmalloc_cache_noprof+0x321/0x600 [ 103.746060][ T59] usb_alloc_dev+0x5f/0xf10 [ 103.746084][ T59] hub_event+0x20fb/0x4d30 [ 103.746102][ T59] process_scheduled_works+0xc3d/0x1630 [ 103.746120][ T59] worker_thread+0xa47/0xfb0 [ 103.746139][ T59] kthread+0x38b/0x480 [ 103.746151][ T59] ret_from_fork+0x514/0xb70 [ 103.746162][ T59] ret_from_fork_asm+0x1a/0x30 [ 103.746184][ T59] [ 103.746187][ T59] Freed by task 5695: [ 103.746194][ T59] kasan_save_track+0x3e/0x80 [ 103.746209][ T59] kasan_save_free_info+0x40/0x50 [ 103.746232][ T59] __kasan_slab_free+0x5c/0x80 [ 103.746248][ T59] kfree+0x1c5/0x650 [ 103.746259][ T59] device_release+0xc4/0x1f0 [ 103.746279][ T59] kobject_put+0x222/0x550 [ 103.746292][ T59] hub_event+0x1bbb/0x4d30 [ 103.746309][ T59] process_scheduled_works+0xc3d/0x1630 [ 103.746358][ T59] worker_thread+0xa47/0xfb0 [ 103.746383][ T59] kthread+0x38b/0x480 [ 103.746400][ T59] ret_from_fork+0x514/0xb70 [ 103.746421][ T59] ret_from_fork_asm+0x1a/0x30 [ 103.746443][ T59] [ 103.746447][ T59] The buggy address belongs to the object at ffff88807f7dc000 [ 103.746447][ T59] which belongs to the cache kmalloc-2k of size 2048 [ 103.746459][ T59] The buggy address is located 1224 bytes inside of [ 103.746459][ T59] freed 2048-byte region [ffff88807f7dc000, ffff88807f7dc800) [ 103.746474][ T59] [ 103.746478][ T59] The buggy address belongs to the physical page: [ 103.746493][ T59] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f7d8 [ 103.746507][ T59] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 103.746520][ T59] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 103.746537][ T59] page_type: f5(slab) [ 103.746551][ T59] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 103.746564][ T59] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 103.746583][ T59] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 103.746596][ T59] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 103.746609][ T59] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 103.746622][ T59] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 103.746630][ T59] page dumped because: kasan: bad access detected [ 103.746643][ T59] page_owner tracks the page as allocated [ 103.746648][ T59] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4971, tgid 4971 (acpid), ts 31322580045 [ 103.746671][ T59] post_alloc_hook+0x1f9/0x250 [ 103.746684][ T59] get_page_from_freelist+0x2209/0x2280 [ 103.746700][ T59] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.746717][ T59] allocate_slab+0x7d/0x620 [ 103.746737][ T59] refill_objects+0x2d5/0x350 [ 103.746756][ T59] __pcs_replace_empty_main+0x2c8/0x6c0 [ 103.746775][ T59] __kvmalloc_node_noprof+0x63c/0x820 [ 103.746791][ T59] evdev_open+0xeb/0x5d0 [ 103.746807][ T59] chrdev_open+0x4d9/0x600 [ 103.746824][ T59] do_dentry_open+0x816/0x1380 [ 103.746841][ T59] vfs_open+0x3b/0x340 [ 103.746857][ T59] path_openat+0x1443/0x1d60 [ 103.746871][ T59] do_file_open+0x23e/0x4a0 [ 103.746885][ T59] do_sys_openat2+0x115/0x200 [ 103.746903][ T59] __x64_sys_openat+0x138/0x170 [ 103.746921][ T59] do_syscall_64+0x166/0x520 [ 103.746942][ T59] page last free pid 1 tgid 1 ts 29115252807 stack trace: [ 103.746951][ T59] free_pages_prepare+0x9eb/0xaf0 [ 103.746973][ T59] __free_contig_range_common+0x174/0x340 [ 103.746992][ T59] destroy_args+0x4e5/0x570 [ 103.747011][ T59] debug_vm_pgtable+0x3f8/0x410 [ 103.747027][ T59] do_one_initcall+0x250/0x870 [ 103.747047][ T59] do_initcall_level+0x10a/0x1a0 [ 103.747065][ T59] do_initcalls+0x59/0xa0 [ 103.747083][ T59] kernel_init_freeable+0x29d/0x3e0 [ 103.747100][ T59] kernel_init+0x22/0x1d0 [ 103.747114][ T59] ret_from_fork+0x514/0xb70 [ 103.747126][ T59] ret_from_fork_asm+0x1a/0x30 [ 103.747148][ T59] [ 103.747151][ T59] Memory state around the buggy address: [ 103.747159][ T59] ffff88807f7dc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.747169][ T59] ffff88807f7dc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.747179][ T59] >ffff88807f7dc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.747187][ T59] ^ [ 103.747195][ T59] ffff88807f7dc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.747205][ T59] ffff88807f7dc580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.747212][ T59] ================================================================== [ 103.883639][ T59] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.434785][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 104.444110][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.454244][ T59] Workqueue: kvub300d vub300_deadwork_thread [ 104.460286][ T59] Call Trace: [ 104.463603][ T59] [ 104.466573][ T59] vpanic+0x56d/0xa60 [ 104.470616][ T59] ? __pfx_vpanic+0x10/0x10 [ 104.475173][ T59] ? __pfx___schedule+0x10/0x10 [ 104.480078][ T59] panic+0xc5/0xd0 [ 104.483884][ T59] ? __pfx_panic+0x10/0x10 [ 104.488362][ T59] ? preempt_schedule_thunk+0x16/0x40 [ 104.493791][ T59] ? mmc_host_classdev_release+0x7c/0x100 [ 104.499566][ T59] check_panic_on_warn+0x89/0xb0 [ 104.504556][ T59] ? mmc_host_classdev_release+0x7c/0x100 [ 104.510368][ T59] end_report+0x73/0x170 [ 104.514668][ T59] ? mmc_host_classdev_release+0x7c/0x100 [ 104.520445][ T59] kasan_report+0x128/0x150 [ 104.525012][ T59] ? mmc_host_classdev_release+0x7c/0x100 [ 104.530798][ T59] mmc_host_classdev_release+0x7c/0x100 [ 104.536402][ T59] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 104.542629][ T59] device_release+0xc4/0x1f0 [ 104.547314][ T59] kobject_put+0x222/0x550 [ 104.551780][ T59] ? mmc_pwrseq_free+0x86/0xa0 [ 104.556602][ T59] ? process_scheduled_works+0x97a/0x1630 [ 104.562386][ T59] process_scheduled_works+0xc3d/0x1630 [ 104.568013][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 104.574052][ T59] ? assign_work+0x3cf/0x5d0 [ 104.578701][ T59] worker_thread+0xa47/0xfb0 [ 104.583366][ T59] kthread+0x38b/0x480 [ 104.587483][ T59] ? __pfx_worker_thread+0x10/0x10 [ 104.592649][ T59] ? __pfx_kthread+0x10/0x10 [ 104.597291][ T59] ret_from_fork+0x514/0xb70 [ 104.601934][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 104.607095][ T59] ? __switch_to+0xc89/0x1420 [ 104.611829][ T59] ? __pfx_kthread+0x10/0x10 [ 104.616506][ T59] ret_from_fork_asm+0x1a/0x30 [ 104.621342][ T59] [ 104.625019][ T59] Kernel Offset: disabled [ 104.629380][ T59] Rebooting in 86400 seconds..