last executing test programs: 12.722798501s ago: executing program 2 (id=102): r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0b0000000400000000000000", @ANYRES32, @ANYBLOB], 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0x2, 0x9, 0x8, 0x7f}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r8 = epoll_create1(0x0) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000240)={0x80000011}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) 11.663760968s ago: executing program 2 (id=108): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = inotify_init() r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56f5d, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 10.974990401s ago: executing program 3 (id=113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 9.96691083s ago: executing program 1 (id=117): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 9.334835416s ago: executing program 4 (id=120): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x128, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffff00}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xc8}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x89}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x90, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.309901686s ago: executing program 4 (id=121): unshare(0x68040200) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x8, &(0x7f00002b2000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x4f6, 0x10100, 0x1, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) write$cgroup_subtree(r6, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r7, 0xc0045103, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[], 0x64, 0x4) execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='+-&-},.{\x00']}, 0x0, 0x1000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 8.213643694s ago: executing program 1 (id=122): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000006c0)=""/194, 0xc2}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 7.902485751s ago: executing program 2 (id=123): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101000000"], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x100b, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x6, 'syz1\x00', 0x0}) 7.673514229s ago: executing program 1 (id=124): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1ac, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x150, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0xc0, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x8d, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca0407429934982873a3f054bcbf1e53f85fe7aee4ccd90229e6ba2b45bd165ebd7929c21abcdf0b8d47ff6a950009bf4b1ef96863b19aaa1c52a12b02f39c0816b2c613634"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x4}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.518946395s ago: executing program 3 (id=125): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 7.203382009s ago: executing program 1 (id=126): prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r5, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 5.614239981s ago: executing program 4 (id=131): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x128, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffff00}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xc8}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x89}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x90, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.445214155s ago: executing program 4 (id=133): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000001090400eb010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.33664013s ago: executing program 3 (id=134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000840), 0x0, 0x40800) 5.116685104s ago: executing program 3 (id=136): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6(0xa, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.001695984s ago: executing program 1 (id=137): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x7fe7f, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @local, 0x101}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}, 0xffffffffffffffff, 0x74ab}}, 0x48) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002c00000018000180140002006e65746465767369"], 0x2c}}, 0x0) 4.099281323s ago: executing program 2 (id=139): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write(r0, &(0x7f0000000140)="8f6500000000", 0x6) 3.261138688s ago: executing program 4 (id=141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.110839198s ago: executing program 2 (id=142): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/237, 0xed}], 0x1}, 0x0) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x3}, 0x0) 2.936831368s ago: executing program 0 (id=143): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x128, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffff00}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xc8}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x89}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x90, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.682336204s ago: executing program 0 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 2.451101287s ago: executing program 0 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 2.179927782s ago: executing program 0 (id=146): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000053f000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x48aa8000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000a40)=0xfff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a\x00'], 0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x1d, 0x9, 0x6, 0x5, 0x7]}, @CTA_TIMEOUT={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb68f}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4184}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x0) 2.178240705s ago: executing program 4 (id=147): prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r5, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.048005348s ago: executing program 0 (id=148): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) 944.897891ms ago: executing program 2 (id=149): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010100000000030109029400"], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x100b, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x6, 'syz1\x00', 0x0}) 903.561453ms ago: executing program 3 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xb246, 0x10, 0x3, 0x804}, &(0x7f0000000680)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$vimc2(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000400)=ANY=[], 0x1df) r6 = memfd_create(&(0x7f0000000340)='-&:\n-\xb2]\n\x0f\xb2\x86NV6&\x01=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xaf0\x8e\xac\xf2r#TZ>\xfb\x9a\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x01\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158\x81\xd2d\x85\xe2\xd4wH\\\x9b\xcf\")\x00\x01\x00\x00\x00\x00\x00\x00\x00\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92AjYg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9', 0x5) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000080)={0x9, 0x1}) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) connect$qrtr(r5, &(0x7f00000000c0)={0x2a, 0x3, 0x7fff}, 0xc) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$sndpcmp(&(0x7f0000000740), 0x0, 0x40080) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 144.338673ms ago: executing program 3 (id=151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000997b1cd5394c62b208000700"], 0xf0}}, 0x0) 28.978695ms ago: executing program 0 (id=152): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write(r0, &(0x7f0000000140)="8f6500000000", 0x6) 0s ago: executing program 1 (id=153): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.26' (ED25519) to the list of known hosts. [ 83.321032][ T5793] cgroup: Unknown subsys name 'net' [ 83.562002][ T5793] cgroup: Unknown subsys name 'cpuset' [ 83.618507][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.583226][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.829487][ T1232] cfg80211: failed to load regulatory.db [ 88.454642][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.458970][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.468535][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.478062][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.479220][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.531377][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.533009][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.534702][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.539072][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.540478][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.668631][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.676273][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.689438][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.693818][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.697113][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.771672][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.784318][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.785310][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.796877][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.809231][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.826203][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.830344][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.832245][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.833906][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.835299][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.576432][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 89.653431][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 90.026102][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 90.168434][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 90.173976][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 90.418082][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.419212][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.419573][ T5806] bridge_slave_0: entered allmulticast mode [ 90.421452][ T5806] bridge_slave_0: entered promiscuous mode [ 90.559476][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.559624][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.559822][ T5806] bridge_slave_1: entered allmulticast mode [ 90.562121][ T5806] bridge_slave_1: entered promiscuous mode [ 90.577990][ T5805] Bluetooth: hci0: command tx timeout [ 90.577998][ T61] Bluetooth: hci1: command tx timeout [ 90.728860][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.728949][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.729084][ T5803] bridge_slave_0: entered allmulticast mode [ 90.730881][ T5803] bridge_slave_0: entered promiscuous mode [ 90.736828][ T5805] Bluetooth: hci2: command tx timeout [ 90.848893][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.848992][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.849103][ T5803] bridge_slave_1: entered allmulticast mode [ 90.850828][ T5803] bridge_slave_1: entered promiscuous mode [ 90.896953][ T61] Bluetooth: hci3: command tx timeout [ 90.897268][ T5805] Bluetooth: hci4: command tx timeout [ 91.061671][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.250566][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.250832][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.251003][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.251113][ T5808] bridge_slave_0: entered allmulticast mode [ 91.252803][ T5808] bridge_slave_0: entered promiscuous mode [ 91.390810][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.497967][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.498136][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.498253][ T5808] bridge_slave_1: entered allmulticast mode [ 91.500005][ T5808] bridge_slave_1: entered promiscuous mode [ 91.650197][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.878104][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.878208][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.878336][ T5810] bridge_slave_0: entered allmulticast mode [ 91.880042][ T5810] bridge_slave_0: entered promiscuous mode [ 91.967856][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.967986][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.968107][ T5811] bridge_slave_0: entered allmulticast mode [ 91.969865][ T5811] bridge_slave_0: entered promiscuous mode [ 91.973351][ T5806] team0: Port device team_slave_0 added [ 92.057900][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.058049][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.058252][ T5810] bridge_slave_1: entered allmulticast mode [ 92.060299][ T5810] bridge_slave_1: entered promiscuous mode [ 92.157998][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.158170][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.158384][ T5811] bridge_slave_1: entered allmulticast mode [ 92.160587][ T5811] bridge_slave_1: entered promiscuous mode [ 92.162972][ T5806] team0: Port device team_slave_1 added [ 92.166561][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.259377][ T5803] team0: Port device team_slave_0 added [ 92.410754][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.480118][ T5803] team0: Port device team_slave_1 added [ 92.656867][ T5805] Bluetooth: hci1: command tx timeout [ 92.656888][ T61] Bluetooth: hci0: command tx timeout [ 92.660819][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.750814][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.752128][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.752138][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.752153][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.816744][ T61] Bluetooth: hci2: command tx timeout [ 92.870632][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.950540][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.951249][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.951261][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.951276][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.987676][ T61] Bluetooth: hci4: command tx timeout [ 92.987685][ T5805] Bluetooth: hci3: command tx timeout [ 93.289889][ T5808] team0: Port device team_slave_0 added [ 93.358198][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.358213][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.358228][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.467756][ T5808] team0: Port device team_slave_1 added [ 93.540769][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.540788][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.540815][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.741209][ T5810] team0: Port device team_slave_0 added [ 93.758208][ T5811] team0: Port device team_slave_0 added [ 93.849830][ T5810] team0: Port device team_slave_1 added [ 93.930028][ T5811] team0: Port device team_slave_1 added [ 93.931075][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.931087][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.931101][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.188420][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.188433][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.188448][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.514042][ T5806] hsr_slave_0: entered promiscuous mode [ 94.515119][ T5806] hsr_slave_1: entered promiscuous mode [ 94.600363][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.600382][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.600396][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.689254][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.689268][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.689283][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.693167][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.693183][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.693210][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.702849][ T5803] hsr_slave_0: entered promiscuous mode [ 94.704282][ T5803] hsr_slave_1: entered promiscuous mode [ 94.706280][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 94.706384][ T5803] Cannot create hsr debugfs directory [ 94.710524][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.710537][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.710560][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.737299][ T61] Bluetooth: hci0: command tx timeout [ 94.746762][ T61] Bluetooth: hci1: command tx timeout [ 94.897053][ T61] Bluetooth: hci2: command tx timeout [ 95.056955][ T61] Bluetooth: hci4: command tx timeout [ 95.056975][ T5805] Bluetooth: hci3: command tx timeout [ 95.174699][ T5808] hsr_slave_0: entered promiscuous mode [ 95.175579][ T5808] hsr_slave_1: entered promiscuous mode [ 95.176198][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 95.176218][ T5808] Cannot create hsr debugfs directory [ 95.654125][ T5810] hsr_slave_0: entered promiscuous mode [ 95.655111][ T5810] hsr_slave_1: entered promiscuous mode [ 95.655763][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 95.655819][ T5810] Cannot create hsr debugfs directory [ 95.685916][ T5811] hsr_slave_0: entered promiscuous mode [ 95.688742][ T5811] hsr_slave_1: entered promiscuous mode [ 95.689738][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 95.689761][ T5811] Cannot create hsr debugfs directory [ 96.817046][ T61] Bluetooth: hci1: command tx timeout [ 96.817055][ T5805] Bluetooth: hci0: command tx timeout [ 96.963370][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.976809][ T5805] Bluetooth: hci2: command tx timeout [ 97.004423][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.020666][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.082614][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.137518][ T61] Bluetooth: hci4: command tx timeout [ 97.137589][ T5805] Bluetooth: hci3: command tx timeout [ 97.202683][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.236760][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.262957][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.321388][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.456571][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.494858][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.542751][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.586948][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.738041][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.789341][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.833303][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.873620][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.983577][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.034526][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.075526][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.112437][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.159030][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.215616][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.273140][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.274018][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.321094][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.321240][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.352786][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.443148][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.481651][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.501760][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.501896][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.553040][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.553173][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.601822][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.625707][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.667365][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.667505][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.715007][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.715169][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.799880][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.835507][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.869507][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.869759][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.921567][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.921807][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.983307][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.045037][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.046106][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.105304][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.105543][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.205591][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.568095][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.568948][ T5806] veth0_vlan: entered promiscuous mode [ 99.610298][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.667504][ T5806] veth1_vlan: entered promiscuous mode [ 99.834197][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.929334][ T5803] veth0_vlan: entered promiscuous mode [ 99.934209][ T5806] veth0_macvtap: entered promiscuous mode [ 99.972095][ T5806] veth1_macvtap: entered promiscuous mode [ 99.974407][ T5811] veth0_vlan: entered promiscuous mode [ 99.992532][ T5803] veth1_vlan: entered promiscuous mode [ 100.011859][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.046121][ T5811] veth1_vlan: entered promiscuous mode [ 100.074881][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.120282][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.172812][ T3588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.199478][ T3588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.204049][ T3588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.216845][ T3588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.245420][ T5803] veth0_macvtap: entered promiscuous mode [ 100.322404][ T5803] veth1_macvtap: entered promiscuous mode [ 100.334543][ T5811] veth0_macvtap: entered promiscuous mode [ 100.393924][ T5811] veth1_macvtap: entered promiscuous mode [ 100.498514][ T5808] veth0_vlan: entered promiscuous mode [ 100.556373][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.570915][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.570936][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.601546][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.602508][ T5808] veth1_vlan: entered promiscuous mode [ 100.624249][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.664610][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.699437][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.702406][ T1502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.702427][ T1502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.727363][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.738518][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.762640][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.764015][ T5810] veth0_vlan: entered promiscuous mode [ 100.789005][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.793825][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.819431][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.884644][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.090430][ T5810] veth1_vlan: entered promiscuous mode [ 101.158808][ T5808] veth0_macvtap: entered promiscuous mode [ 101.287551][ T5808] veth1_macvtap: entered promiscuous mode [ 101.396725][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.396753][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.494571][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.494593][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.529679][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.608475][ T5810] veth0_macvtap: entered promiscuous mode [ 101.670505][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.684032][ T3588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.684053][ T3588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.742782][ T5810] veth1_macvtap: entered promiscuous mode [ 101.784959][ T3475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.786078][ T3475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.786123][ T3475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.786160][ T3475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.831462][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.831484][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.923614][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.001859][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.115563][ T3566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.127096][ T3566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.176443][ T3489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.196856][ T3489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.273420][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.273443][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.625832][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.625854][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.976553][ T1914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.976573][ T1914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.238464][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.238487][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.140945][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 105.048079][ T5955] binder: 5951:5955 ioctl 4018620d 0 returned -22 [ 107.816698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.155016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 108.155602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 108.170689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 108.186650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.474753][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.706663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.965065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.965339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.965991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.030918][ T5955] syz.0.13 (5955): drop_caches: 2 [ 109.436674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.758808][ T5997] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.062476][ T6000] netlink: 52 bytes leftover after parsing attributes in process `syz.1.28'. [ 110.064981][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.066114][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.278026][ T5860] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.486717][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 110.531516][ T5860] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 110.531547][ T5860] usb 4-1: config 4 has no interface number 0 [ 110.531608][ T5860] usb 4-1: config 4 interface 51 has no altsetting 0 [ 110.583532][ T5860] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 110.583566][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.583585][ T5860] usb 4-1: Product: syz [ 110.583600][ T5860] usb 4-1: Manufacturer: syz [ 110.583614][ T5860] usb 4-1: SerialNumber: syz [ 110.716825][ T5860] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 111.183126][ T5997] netlink: 'syz.3.27': attribute type 24 has an invalid length. [ 111.183151][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 111.183178][ T5997] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 111.242095][ T5890] usb 4-1: USB disconnect, device number 2 [ 111.976805][ T5890] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.128931][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.128954][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.128979][ T5890] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 112.128992][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.194889][ T5890] usb 5-1: config 0 descriptor?? [ 112.376049][ T5888] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.503594][ T5888] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.824234][ T5890] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 112.875486][ T5890] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 112.963974][ T5890] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 113.033999][ T6033] fido_id[6033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.584635][ T6025] cp2112 0003:10C4:EA90.0002: Multi-message I2C transactions not supported [ 113.666786][ T5890] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 113.749752][ T5890] usb 5-1: USB disconnect, device number 2 [ 113.877683][ T6036] fido_id[6036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 114.836825][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.898251][ T6044] syz.2.42 (6044) used greatest stack depth: 17912 bytes left [ 115.091479][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.091524][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.091564][ T5874] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 115.091584][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.177290][ T5874] usb 1-1: config 0 descriptor?? [ 115.653951][ T5874] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 115.656486][ T5874] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 115.806881][ T5874] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 116.205103][ T5907] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 116.276386][ T5907] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 116.322908][ T6071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.116855][ T5890] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.232071][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 118.251945][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.251985][ T5890] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 118.251998][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.271078][ T5890] usb 5-1: config 0 descriptor?? [ 118.827158][ T6083] netlink: 64 bytes leftover after parsing attributes in process `syz.3.52'. [ 119.621735][ T6072] fido_id[6072]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.036738][ T5860] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.246967][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 121.249498][ T5860] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 121.249574][ T5860] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 121.249591][ T5860] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.249606][ T5860] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 121.252070][ T5860] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 121.252086][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.252097][ T5860] usb 2-1: Product: syz [ 121.252105][ T5860] usb 2-1: Manufacturer: syz [ 121.252114][ T5860] usb 2-1: SerialNumber: syz [ 121.505973][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 121.539853][ T5874] cp2112 0003:10C4:EA90.0003: error reading lock byte: -110 [ 121.567220][ T6093] random: crng reseeded on system resumption [ 121.635013][ T5860] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input5 [ 121.736757][ T5860] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 121.736777][ T5860] (id 0x00) [ 122.026918][ T5860] rc_core: IR keymap rc-imon-pad not found [ 122.026940][ T5860] Registered IR keymap rc-empty [ 122.027034][ T5860] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 122.027053][ T5860] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 122.031098][ T5874] usb 5-1: USB disconnect, device number 3 [ 122.101176][ T5860] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 122.106560][ T5860] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input6 [ 122.180318][ T5860] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:2> initialized [ 122.203400][ T6099] syzkaller0: entered promiscuous mode [ 122.203430][ T6099] syzkaller0: entered allmulticast mode [ 122.421573][ T6104] netlink: 44 bytes leftover after parsing attributes in process `syz.3.60'. [ 122.598993][ T6081] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 122.601799][ T6081] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 122.653301][ T5874] usb 1-1: USB disconnect, device number 2 [ 122.859098][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 122.880807][ T6111] fido_id[6111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.240919][ T6119] netlink: 64 bytes leftover after parsing attributes in process `syz.0.63'. [ 124.094234][ T5874] usb 2-1: USB disconnect, device number 2 [ 124.481401][ T6130] random: crng reseeded on system resumption [ 124.876926][ T191] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.047958][ T191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.047993][ T191] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.048006][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.105707][ T191] usb 4-1: config 0 descriptor?? [ 125.210789][ T5874] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 125.329139][ T191] usbhid 4-1:0.0: can't add hid device: -71 [ 125.329292][ T191] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 125.364245][ T5874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.364283][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.365653][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 125.365681][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.365700][ T5874] usb 2-1: SerialNumber: syz [ 125.451236][ T191] usb 4-1: USB disconnect, device number 3 [ 125.606763][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.776698][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 125.784214][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.784278][ T5881] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 125.784302][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.811256][ T5881] usb 3-1: config 0 descriptor?? [ 126.052429][ T6145] usb 2-1: USB disconnect, device number 3 [ 126.136841][ T191] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.289969][ T191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.290024][ T191] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.290048][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.296138][ T191] usb 4-1: config 0 descriptor?? [ 126.742406][ T191] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 126.819887][ T191] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input7 [ 128.326810][ T6145] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.452544][ T191] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 128.537897][ T6145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.537933][ T6145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.537976][ T6145] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 128.538000][ T6145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.215483][ T191] usb 4-1: USB disconnect, device number 4 [ 129.363021][ T6167] netlink: 64 bytes leftover after parsing attributes in process `syz.3.75'. [ 130.398992][ T6145] usb 2-1: config 0 descriptor?? [ 132.049659][ T191] usb 3-1: USB disconnect, device number 2 [ 132.309838][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 132.918342][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919221][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.299229][ T6169] netlink: 'syz.3.76': attribute type 10 has an invalid length. [ 133.311593][ T6169] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.514493][ T6185] loop6: detected capacity change from 0 to 7 [ 133.606761][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 133.757637][ T9] usb 1-1: no configurations [ 133.757659][ T9] usb 1-1: can't read configurations, error -22 [ 133.804205][ T6185] Dev loop6: unable to read RDB block 7 [ 133.804266][ T6185] loop6: unable to read partition table [ 133.804514][ T6185] loop6: partition table beyond EOD, truncated [ 133.811630][ T6185] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.917706][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 134.078517][ T9] usb 1-1: no configurations [ 134.078538][ T9] usb 1-1: can't read configurations, error -22 [ 134.078879][ T9] usb usb1-port1: attempt power cycle [ 134.229064][ T6145] usb 2-1: can't set config #0, error -71 [ 134.246238][ T6145] usb 2-1: USB disconnect, device number 4 [ 134.401608][ T191] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 134.430081][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 134.435898][ T191] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.457705][ T9] usb 1-1: no configurations [ 134.457725][ T9] usb 1-1: can't read configurations, error -22 [ 134.583840][ T6194] fido_id[6194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.593634][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 134.608253][ T9] usb 1-1: no configurations [ 134.608271][ T9] usb 1-1: can't read configurations, error -22 [ 134.608661][ T9] usb usb1-port1: unable to enumerate USB device [ 134.756907][ T6145] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.090213][ T6201] netlink: 64 bytes leftover after parsing attributes in process `syz.3.86'. [ 135.606706][ T6145] usb 2-1: Using ep0 maxpacket: 8 [ 135.609240][ T6145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.609298][ T6145] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.612674][ T6145] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 135.612701][ T6145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.612722][ T6145] usb 2-1: Product: syz [ 135.612736][ T6145] usb 2-1: Manufacturer: syz [ 135.612750][ T6145] usb 2-1: SerialNumber: syz [ 135.753868][ T6145] ti_usb_3410_5052 2-1:1.0: required endpoints missing [ 136.638810][ T5881] usb 2-1: USB disconnect, device number 5 [ 136.952203][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 138.150287][ T6242] netlink: 64 bytes leftover after parsing attributes in process `syz.2.99'. [ 140.320041][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 140.432235][ T6204] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 140.468541][ T6204] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.599215][ T6269] syzkaller0: entered promiscuous mode [ 140.599246][ T6269] syzkaller0: entered allmulticast mode [ 140.694884][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.876798][ T6274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.109'. [ 141.981372][ T6300] Zero length message leads to an empty skb [ 142.607675][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 144.006046][ T6081] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 144.055568][ T6081] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.185957][ T6318] fido_id[6318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.940912][ T6081] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 145.091504][ T6081] usb 3-1: no configurations [ 145.091518][ T6081] usb 3-1: can't read configurations, error -22 [ 145.226736][ T6081] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 145.416267][ T6081] usb 3-1: no configurations [ 145.416282][ T6081] usb 3-1: can't read configurations, error -22 [ 145.418562][ T6081] usb usb3-port1: attempt power cycle [ 145.777208][ T6081] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 145.799842][ T6081] usb 3-1: no configurations [ 145.799862][ T6081] usb 3-1: can't read configurations, error -22 [ 145.946730][ T6081] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 145.980399][ T6081] usb 3-1: no configurations [ 145.980415][ T6081] usb 3-1: can't read configurations, error -22 [ 146.009046][ T6081] usb usb3-port1: unable to enumerate USB device [ 146.318117][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 146.658137][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 146.996806][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.146787][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 147.149269][ T10] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.149301][ T10] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.149323][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.149357][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 147.149380][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.155441][ T10] usb 5-1: config 0 descriptor?? [ 147.212724][ T5881] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.403242][ T5881] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.406376][ T5881] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 147.406406][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 147.406426][ T5881] usb 4-1: Product: syz [ 147.406440][ T5881] usb 4-1: Manufacturer: syz [ 147.406464][ T5881] usb 4-1: SerialNumber: syz [ 147.593227][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 147.593356][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 147.816940][ T10] usb 5-1: USB disconnect, device number 4 [ 147.860301][ T5881] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 147.876902][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.666744][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 148.731114][ T9] usb 2-1: config 0 has no interfaces? [ 148.896043][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 148.896078][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.896098][ T9] usb 2-1: Manufacturer: syz [ 148.920177][ T9] usb 2-1: config 0 descriptor?? [ 149.511614][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 149.783327][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 150.216336][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.952972][ T9] usb 4-1: USB disconnect, device number 5 [ 150.959984][ T9] usblp0: removed [ 151.488721][ T6145] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 151.655945][ T6145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.655973][ T6145] usb 3-1: config 0 has no interfaces? [ 151.678051][ T6145] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 151.678072][ T6145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.678083][ T6145] usb 3-1: SerialNumber: syz [ 151.719428][ T6145] usb 3-1: config 0 descriptor?? [ 151.967626][ T6145] usb 3-1: USB disconnect, device number 7 [ 152.076344][ T9] usb 2-1: USB disconnect, device number 6 [ 152.085923][ T1162] ------------[ cut here ]------------ [ 152.085938][ T1162] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x6f0, CPU#0: kworker/u8:8/1162 [ 152.085985][ T1162] Modules linked in: [ 152.086005][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.086030][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.086045][ T1162] Workqueue: events_unbound cfg80211_wiphy_work [ 152.086068][ T1162] RIP: 0010:kcov_remote_start+0x5d9/0x6f0 [ 152.086101][ T1162] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 61 1d ba 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 c9 a2 00 09 89 c0 48 c7 c7 38 82 aa [ 152.086117][ T1162] RSP: 0018:ffffc90004e8f938 EFLAGS: 00010202 [ 152.086136][ T1162] RAX: 0000000000000002 RBX: ffff8880266ebc00 RCX: 0000000000000000 [ 152.086151][ T1162] RDX: 0000000000000000 RSI: ffffffff8b3e94c0 RDI: ffffffff8b3e9480 [ 152.086167][ T1162] RBP: ffff888023a44c80 R08: ffffffff8ac2b3f1 R09: ffffffff8d5aec20 [ 152.086183][ T1162] R10: dffffc0000000000 R11: fffffbfff1db2a2f R12: ffff88805ee39d08 [ 152.086198][ T1162] R13: ffff88805f4a07c0 R14: 0000000000000000 R15: ffff88805ee39d20 [ 152.086213][ T1162] FS: 0000000000000000(0000) GS:ffff888126d81000(0000) knlGS:0000000000000000 [ 152.086231][ T1162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.086246][ T1162] CR2: 00007ffcbdbbbfd8 CR3: 000000003b06e000 CR4: 00000000003526f0 [ 152.086267][ T1162] Call Trace: [ 152.086275][ T1162] [ 152.086289][ T1162] ieee80211_iface_work+0x211/0x12d0 [ 152.086326][ T1162] cfg80211_wiphy_work+0x2ab/0x450 [ 152.086350][ T1162] ? process_scheduled_works+0x9ef/0x1770 [ 152.086385][ T1162] process_scheduled_works+0xad1/0x1770 [ 152.086445][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.086489][ T1162] worker_thread+0x8a0/0xda0 [ 152.086517][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.086553][ T1162] ? __kthread_parkme+0x7b/0x200 [ 152.086643][ T1162] kthread+0x711/0x8a0 [ 152.086679][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 152.086703][ T1162] ? __pfx_kthread+0x10/0x10 [ 152.086728][ T1162] ? rt_spin_unlock+0x150/0x200 [ 152.086755][ T1162] ? rt_spin_unlock+0x161/0x200 [ 152.086773][ T1162] ? __pfx_kthread+0x10/0x10 [ 152.086804][ T1162] ret_from_fork+0x599/0xb30 [ 152.086831][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 152.086868][ T1162] ? __switch_to_asm+0x39/0x70 [ 152.086896][ T1162] ? __switch_to_asm+0x33/0x70 [ 152.086923][ T1162] ? __pfx_kthread+0x10/0x10 [ 152.086954][ T1162] ret_from_fork_asm+0x1a/0x30 [ 152.087005][ T1162] [ 152.087017][ T1162] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.087032][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.087056][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.087069][ T1162] Workqueue: events_unbound cfg80211_wiphy_work [ 152.087091][ T1162] Call Trace: [ 152.087100][ T1162] [ 152.087108][ T1162] dump_stack_lvl+0x99/0x250 [ 152.087134][ T1162] ? __asan_memcpy+0x40/0x70 [ 152.087163][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.087187][ T1162] ? __pfx__printk+0x10/0x10 [ 152.087234][ T1162] vpanic+0x237/0x6d0 [ 152.087259][ T1162] ? __pfx_vpanic+0x10/0x10 [ 152.087283][ T1162] ? is_bpf_text_address+0x292/0x2b0 [ 152.087302][ T1162] ? is_bpf_text_address+0x26/0x2b0 [ 152.087335][ T1162] panic+0xb9/0xc0 [ 152.087371][ T1162] ? __pfx_panic+0x10/0x10 [ 152.087410][ T1162] ? ret_from_fork_asm+0x1a/0x30 [ 152.087447][ T1162] __warn+0x317/0x4b0 [ 152.087472][ T1162] ? kcov_remote_start+0x5d9/0x6f0 [ 152.087508][ T1162] ? kcov_remote_start+0x5d9/0x6f0 [ 152.087540][ T1162] __report_bug+0x288/0x500 [ 152.087566][ T1162] ? kcov_remote_start+0x5d9/0x6f0 [ 152.087606][ T1162] ? __pfx___report_bug+0x10/0x10 [ 152.087647][ T1162] ? rt_spin_lock+0x1c1/0x3e0 [ 152.087680][ T1162] ? kcov_remote_start+0x5d9/0x6f0 [ 152.087712][ T1162] report_bug+0x16a/0x220 [ 152.087737][ T1162] ? kcov_remote_start+0x5d9/0x6f0 [ 152.087764][ T1162] ? kcov_remote_start+0x5db/0x6f0 [ 152.087795][ T1162] handle_bug+0x98/0x200 [ 152.087824][ T1162] exc_invalid_op+0x1a/0x50 [ 152.087854][ T1162] asm_exc_invalid_op+0x1a/0x20 [ 152.087874][ T1162] RIP: 0010:kcov_remote_start+0x5d9/0x6f0 [ 152.087905][ T1162] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 61 1d ba 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 c9 a2 00 09 89 c0 48 c7 c7 38 82 aa [ 152.087919][ T1162] RSP: 0018:ffffc90004e8f938 EFLAGS: 00010202 [ 152.087937][ T1162] RAX: 0000000000000002 RBX: ffff8880266ebc00 RCX: 0000000000000000 [ 152.087950][ T1162] RDX: 0000000000000000 RSI: ffffffff8b3e94c0 RDI: ffffffff8b3e9480 [ 152.087965][ T1162] RBP: ffff888023a44c80 R08: ffffffff8ac2b3f1 R09: ffffffff8d5aec20 [ 152.087980][ T1162] R10: dffffc0000000000 R11: fffffbfff1db2a2f R12: ffff88805ee39d08 [ 152.087995][ T1162] R13: ffff88805f4a07c0 R14: 0000000000000000 R15: ffff88805ee39d20 [ 152.088019][ T1162] ? rt_spin_lock+0x1c1/0x3e0 [ 152.088060][ T1162] ? kcov_remote_start+0xe1/0x6f0 [ 152.088096][ T1162] ieee80211_iface_work+0x211/0x12d0 [ 152.088131][ T1162] cfg80211_wiphy_work+0x2ab/0x450 [ 152.088155][ T1162] ? process_scheduled_works+0x9ef/0x1770 [ 152.088182][ T1162] process_scheduled_works+0xad1/0x1770 [ 152.088241][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.088285][ T1162] worker_thread+0x8a0/0xda0 [ 152.088313][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.088350][ T1162] ? __kthread_parkme+0x7b/0x200 [ 152.088395][ T1162] kthread+0x711/0x8a0 [ 152.088428][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 152.088451][ T1162] ? __pfx_kthread+0x10/0x10 [ 152.088476][ T1162] ? rt_spin_unlock+0x150/0x200 [ 152.088502][ T1162] ? rt_spin_unlock+0x161/0x200 [ 152.088519][ T1162] ? __pfx_kthread+0x10/0x10 [ 152.088550][ T1162] ret_from_fork+0x599/0xb30 [ 152.088575][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 152.088611][ T1162] ? __switch_to_asm+0x39/0x70 [ 152.088638][ T1162] ? __switch_to_asm+0x33/0x70 [ 152.088664][ T1162] ? __pfx_kthread+0x10/0x10 [ 152.088695][ T1162] ret_from_fork_asm+0x1a/0x30 [ 152.088745][ T1162] [ 152.088893][ T1162] Kernel Offset: disabled