last executing test programs: 2m14.384203337s ago: executing program 0 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000000000076ee000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040041) syz_usb_control_io(r1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r9 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) rt_sigqueueinfo(r9, 0x11, &(0x7f00000000c0)={0x20, 0x3800000, 0x1000}) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000040), 0x2410, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000180), 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000300"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f0007"], 0x3c}, 0x1, 0x2}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r12 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x81, 0xd7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xb3, 0x9, 0x3, 0x50, 0xc0}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x2, 0x0, 0x7f, [0xf, 0xc0]}]}, 0x4, [{0x7f, &(0x7f0000000780)=@string={0x7f, 0x3, "3d908c3e6b634b49b1a1668ba25c13569ba4f3c0cc20c9f8735a43d08961c51d33f37e2afa8fb565edbbb751b07a9aeed2b7fec4d5d40aee4ed0c5cd74f2f0eb4d64acd7af9cba74b215c1cf505975580a07232146d8741dbb3cbd0d2b7edbb23040e8e56ab5f55411d7840b55a6f1fa772edc773cbb1dc6aef21f934f"}}, {0xb8, &(0x7f0000000240)=@string={0xb8, 0x3, "a9adec5f55f05f889ac4d62c7f752abcaa0f364264ac70340d711b999d1af30d0717b5db2e17d1cc4e6571172c8d802802708a38dc8bdb347e42b1a4e9131690386cbaa0c4290045032f13a6da54405814231711200a819cd9b0bec596edebb66d0e255c17f2e9f6b0b07cbe77e364090b732aa30e166258aceef13fcef3d9b97b7a7c56cedd672d10e20a458ee47c9d1c1c152d55192897fcf333b9ad1f2a46e84f4248170e58bd3451fe95d0c5b4558ae9a0c5c170"}}, {0xcd, &(0x7f00000003c0)=@string={0xcd, 0x3, "1af39eb44f6a3ab7cd1a7ce112874e98869f6399916ad35ef630a2c4b2d1f8d6e593948bc07cba14823c77e6f5e43f3c0027939729f734f745f8fa0cd6aaa93bf5e46c5cc2f9b4ffde0f096fe5b80f67ebb4a2c53a60d36ef2fd6374104e79e2bdd8c90e2fd75806d3528868f709d56cd565e772f5b3ce302cfd1f6ed57528195ba4f86d38e8991fe3c82ffa265839db7ddbd2a627f31ce2ef0a9856cffe33b773aacdd8bc89865f978e228791b199ea7891d5b8c50a3a9d15f57497c4c57078ea2111c7786b1c65d944e8"}}, {0xc6, &(0x7f00000004c0)=@string={0xc6, 0x3, "8d3e526c7390790703ebb8a6fd84f19db95ac703b1846696c002e59594750b324f3b365957b8bf44d58c3d096d428c00f9ee2962ab5486356f3f3d2a8eac4ab4cd8d0b814e199420640a3e41d8b89b94a1734de3b1d721f711c9597cec755338837842a7eb27656f7ae0a30570594f2710c561edb0cb1d765ef1d5ad5ffa9261faeb707e5a2e79f778d5b31af7bdb57edcdcdea48e129f0daa1e8eb7d827250f4833174e221836fb7a4dabc6a52434c7e398534099a2369cb49be2f27480acfa336e0295"}}]}) syz_usb_control_io(r12, &(0x7f0000000740)={0x2c, &(0x7f0000000840)={0x40, 0x24, 0xf3, {0xf3, 0x5, "c309e4f31ff7956798bca2fc3a93bc9e23b48416abc8c6cd22ef78440c4664122be29017af91ef7adca69eb6cfc3a20b1e613127658203c9e5c2a4afe2a7438821b060341c4309998aadd123ef16314fbbf114d123450e25ce6932a430f263f33c7cb8650dc6b460f960134d548ce75838a50c5bff5b07940e9cbbd91ca906c87d9fe60231604ef43e0d3f1e72a58372476b3c2661d1320fb4b1c3f7b25d2e8da126a69526a20656061724b245384f7b357ced8924cec46831c59351952c7f0b4e057c3f7736f9e6fe03dbc0536aa91ffcf4dbc8a30f9ed34a7db6c491bc896370c70b2beb6a91d62de1ac95efc91e29e7"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000600)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8001, 0xf, 0x1, [0x0, 0x1fec000, 0xc000, 0x0, 0x3f21, 0x6f]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x89, 0x3, 0x6, "b6c7e4b4", "b3e8b0b5"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x9, 0x3, 0x7, 0xfff7, 0x5}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x0, 0x18, 0xb4, "d52a4dc714acc1525ff04f57f0f7c75d58adc8bee2a2743683b3ca740d4d2b21bc35eb0cb1743528f8dcb78707351eb759f5e95b8023d36096358dd1e4113b563c5dcb812e955d41265ace4429ff5d21bd7de03155a0809830d01b85ca68ba18d5cf88656375a34c5b052bd819499931e00c338eb6c19a8a1c7c684e3e9af75f56c55a1094a81093a6bf4f5e1628ed1ac735e41c687f24887925a240664c9a1d7588671fec7fbe4a2eb250b672383b296ceea007"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xc8}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "e018"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xcd}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a9db"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x6}}) accept$alg(r0, 0x0, 0x0) 2m13.360920656s ago: executing program 3 (id=39): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x28401, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_wait(r2, &(0x7f0000000240)=[{}], 0x1, 0x7ff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="bcfab02c46083c5b40f379f1bc9474c5b60a88f56eaa3b1541e7720f399515199ac2ef002406d0ef64a04c641d3bef99e6a7c7beda503346478b124461012fd5e0d653da9e996efc426cbbaae64d2fcb161ddeea59763e860c941a0a3161fdf3402bd7c8bab94e457e0ed3565cd3de4c9bb0baeee43fb155d9040346b5b6d86f22783733881913fb1058be99b2d30393dfd9f9bf271528b642e46c7b416e4380b12d2ee9b292e76f6896dc27ba3a86ddf41445e343", @ANYBLOB="100027bd7000fbdbdf2513000000280001800800030001000000140002006d6163767461703000000000000000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x44001) ppoll(&(0x7f0000000080)=[{r2, 0x1680}], 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r1, 0x0, 0xff, 0xcb, &(0x7f0000000100)="39b6711bfd8724034c665384cea26dc2755ce62373921702d76d11669ffd87af05823cdfdda1ff37192cbe1fc1c2acf761469d6205c5cef2296e3e14340b3fb52b10ae4f55a92160caddffda38900e2e5c0ce8fa8f4a5af2ccd755e2cfdaf694cff46dbd99a6c4cff6fb8daa63706a7435040b3e23a372ae4f6680d9db950f3657d6a5fb8b1be8867cd3111821d8d5108046385b59a618a653ecf9411c68765c9dd9405e6389900eb35fe69871f0245813cd918bb76ee69b75731bb99861ac2f19bb189e5e27c499bf4e8c", 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001}) read(r1, &(0x7f0000000580)=""/119, 0x77) 2m9.273513726s ago: executing program 4 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0x1ff}], 0x2) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) userfaultfd(0x801) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000040)={0xa}) 1m50.989757121s ago: executing program 0 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000000000076ee000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040041) syz_usb_control_io(r1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r9 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) rt_sigqueueinfo(r9, 0x11, &(0x7f00000000c0)={0x20, 0x3800000, 0x1000}) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000040), 0x2410, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000180), 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000300"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f0007"], 0x3c}, 0x1, 0x2}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r12 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x81, 0xd7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xb3, 0x9, 0x3, 0x50, 0xc0}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x2, 0x0, 0x7f, [0xf, 0xc0]}]}, 0x4, [{0x7f, &(0x7f0000000780)=@string={0x7f, 0x3, "3d908c3e6b634b49b1a1668ba25c13569ba4f3c0cc20c9f8735a43d08961c51d33f37e2afa8fb565edbbb751b07a9aeed2b7fec4d5d40aee4ed0c5cd74f2f0eb4d64acd7af9cba74b215c1cf505975580a07232146d8741dbb3cbd0d2b7edbb23040e8e56ab5f55411d7840b55a6f1fa772edc773cbb1dc6aef21f934f"}}, {0xb8, &(0x7f0000000240)=@string={0xb8, 0x3, "a9adec5f55f05f889ac4d62c7f752abcaa0f364264ac70340d711b999d1af30d0717b5db2e17d1cc4e6571172c8d802802708a38dc8bdb347e42b1a4e9131690386cbaa0c4290045032f13a6da54405814231711200a819cd9b0bec596edebb66d0e255c17f2e9f6b0b07cbe77e364090b732aa30e166258aceef13fcef3d9b97b7a7c56cedd672d10e20a458ee47c9d1c1c152d55192897fcf333b9ad1f2a46e84f4248170e58bd3451fe95d0c5b4558ae9a0c5c170"}}, {0xcd, &(0x7f00000003c0)=@string={0xcd, 0x3, "1af39eb44f6a3ab7cd1a7ce112874e98869f6399916ad35ef630a2c4b2d1f8d6e593948bc07cba14823c77e6f5e43f3c0027939729f734f745f8fa0cd6aaa93bf5e46c5cc2f9b4ffde0f096fe5b80f67ebb4a2c53a60d36ef2fd6374104e79e2bdd8c90e2fd75806d3528868f709d56cd565e772f5b3ce302cfd1f6ed57528195ba4f86d38e8991fe3c82ffa265839db7ddbd2a627f31ce2ef0a9856cffe33b773aacdd8bc89865f978e228791b199ea7891d5b8c50a3a9d15f57497c4c57078ea2111c7786b1c65d944e8"}}, {0xc6, &(0x7f00000004c0)=@string={0xc6, 0x3, "8d3e526c7390790703ebb8a6fd84f19db95ac703b1846696c002e59594750b324f3b365957b8bf44d58c3d096d428c00f9ee2962ab5486356f3f3d2a8eac4ab4cd8d0b814e199420640a3e41d8b89b94a1734de3b1d721f711c9597cec755338837842a7eb27656f7ae0a30570594f2710c561edb0cb1d765ef1d5ad5ffa9261faeb707e5a2e79f778d5b31af7bdb57edcdcdea48e129f0daa1e8eb7d827250f4833174e221836fb7a4dabc6a52434c7e398534099a2369cb49be2f27480acfa336e0295"}}]}) syz_usb_control_io(r12, &(0x7f0000000740)={0x2c, &(0x7f0000000840)={0x40, 0x24, 0xf3, {0xf3, 0x5, "c309e4f31ff7956798bca2fc3a93bc9e23b48416abc8c6cd22ef78440c4664122be29017af91ef7adca69eb6cfc3a20b1e613127658203c9e5c2a4afe2a7438821b060341c4309998aadd123ef16314fbbf114d123450e25ce6932a430f263f33c7cb8650dc6b460f960134d548ce75838a50c5bff5b07940e9cbbd91ca906c87d9fe60231604ef43e0d3f1e72a58372476b3c2661d1320fb4b1c3f7b25d2e8da126a69526a20656061724b245384f7b357ced8924cec46831c59351952c7f0b4e057c3f7736f9e6fe03dbc0536aa91ffcf4dbc8a30f9ed34a7db6c491bc896370c70b2beb6a91d62de1ac95efc91e29e7"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000600)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8001, 0xf, 0x1, [0x0, 0x1fec000, 0xc000, 0x0, 0x3f21, 0x6f]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x89, 0x3, 0x6, "b6c7e4b4", "b3e8b0b5"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x9, 0x3, 0x7, 0xfff7, 0x5}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x0, 0x18, 0xb4, "d52a4dc714acc1525ff04f57f0f7c75d58adc8bee2a2743683b3ca740d4d2b21bc35eb0cb1743528f8dcb78707351eb759f5e95b8023d36096358dd1e4113b563c5dcb812e955d41265ace4429ff5d21bd7de03155a0809830d01b85ca68ba18d5cf88656375a34c5b052bd819499931e00c338eb6c19a8a1c7c684e3e9af75f56c55a1094a81093a6bf4f5e1628ed1ac735e41c687f24887925a240664c9a1d7588671fec7fbe4a2eb250b672383b296ceea007"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xc8}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "e018"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xcd}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a9db"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x6}}) accept$alg(r0, 0x0, 0x0) 1m50.227191095s ago: executing program 3 (id=39): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x28401, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_wait(r2, &(0x7f0000000240)=[{}], 0x1, 0x7ff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="bcfab02c46083c5b40f379f1bc9474c5b60a88f56eaa3b1541e7720f399515199ac2ef002406d0ef64a04c641d3bef99e6a7c7beda503346478b124461012fd5e0d653da9e996efc426cbbaae64d2fcb161ddeea59763e860c941a0a3161fdf3402bd7c8bab94e457e0ed3565cd3de4c9bb0baeee43fb155d9040346b5b6d86f22783733881913fb1058be99b2d30393dfd9f9bf271528b642e46c7b416e4380b12d2ee9b292e76f6896dc27ba3a86ddf41445e343", @ANYBLOB="100027bd7000fbdbdf2513000000280001800800030001000000140002006d6163767461703000000000000000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x44001) ppoll(&(0x7f0000000080)=[{r2, 0x1680}], 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r1, 0x0, 0xff, 0xcb, &(0x7f0000000100)="39b6711bfd8724034c665384cea26dc2755ce62373921702d76d11669ffd87af05823cdfdda1ff37192cbe1fc1c2acf761469d6205c5cef2296e3e14340b3fb52b10ae4f55a92160caddffda38900e2e5c0ce8fa8f4a5af2ccd755e2cfdaf694cff46dbd99a6c4cff6fb8daa63706a7435040b3e23a372ae4f6680d9db950f3657d6a5fb8b1be8867cd3111821d8d5108046385b59a618a653ecf9411c68765c9dd9405e6389900eb35fe69871f0245813cd918bb76ee69b75731bb99861ac2f19bb189e5e27c499bf4e8c", 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001}) read(r1, &(0x7f0000000580)=""/119, 0x77) 1m45.400965255s ago: executing program 4 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0x1ff}], 0x2) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) userfaultfd(0x801) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000040)={0xa}) 1m25.898824902s ago: executing program 0 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000000000076ee000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040041) syz_usb_control_io(r1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r9 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) rt_sigqueueinfo(r9, 0x11, &(0x7f00000000c0)={0x20, 0x3800000, 0x1000}) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000040), 0x2410, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000180), 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000300"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f0007"], 0x3c}, 0x1, 0x2}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r12 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x81, 0xd7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xb3, 0x9, 0x3, 0x50, 0xc0}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x2, 0x0, 0x7f, [0xf, 0xc0]}]}, 0x4, [{0x7f, &(0x7f0000000780)=@string={0x7f, 0x3, "3d908c3e6b634b49b1a1668ba25c13569ba4f3c0cc20c9f8735a43d08961c51d33f37e2afa8fb565edbbb751b07a9aeed2b7fec4d5d40aee4ed0c5cd74f2f0eb4d64acd7af9cba74b215c1cf505975580a07232146d8741dbb3cbd0d2b7edbb23040e8e56ab5f55411d7840b55a6f1fa772edc773cbb1dc6aef21f934f"}}, {0xb8, &(0x7f0000000240)=@string={0xb8, 0x3, "a9adec5f55f05f889ac4d62c7f752abcaa0f364264ac70340d711b999d1af30d0717b5db2e17d1cc4e6571172c8d802802708a38dc8bdb347e42b1a4e9131690386cbaa0c4290045032f13a6da54405814231711200a819cd9b0bec596edebb66d0e255c17f2e9f6b0b07cbe77e364090b732aa30e166258aceef13fcef3d9b97b7a7c56cedd672d10e20a458ee47c9d1c1c152d55192897fcf333b9ad1f2a46e84f4248170e58bd3451fe95d0c5b4558ae9a0c5c170"}}, {0xcd, &(0x7f00000003c0)=@string={0xcd, 0x3, "1af39eb44f6a3ab7cd1a7ce112874e98869f6399916ad35ef630a2c4b2d1f8d6e593948bc07cba14823c77e6f5e43f3c0027939729f734f745f8fa0cd6aaa93bf5e46c5cc2f9b4ffde0f096fe5b80f67ebb4a2c53a60d36ef2fd6374104e79e2bdd8c90e2fd75806d3528868f709d56cd565e772f5b3ce302cfd1f6ed57528195ba4f86d38e8991fe3c82ffa265839db7ddbd2a627f31ce2ef0a9856cffe33b773aacdd8bc89865f978e228791b199ea7891d5b8c50a3a9d15f57497c4c57078ea2111c7786b1c65d944e8"}}, {0xc6, &(0x7f00000004c0)=@string={0xc6, 0x3, "8d3e526c7390790703ebb8a6fd84f19db95ac703b1846696c002e59594750b324f3b365957b8bf44d58c3d096d428c00f9ee2962ab5486356f3f3d2a8eac4ab4cd8d0b814e199420640a3e41d8b89b94a1734de3b1d721f711c9597cec755338837842a7eb27656f7ae0a30570594f2710c561edb0cb1d765ef1d5ad5ffa9261faeb707e5a2e79f778d5b31af7bdb57edcdcdea48e129f0daa1e8eb7d827250f4833174e221836fb7a4dabc6a52434c7e398534099a2369cb49be2f27480acfa336e0295"}}]}) syz_usb_control_io(r12, &(0x7f0000000740)={0x2c, &(0x7f0000000840)={0x40, 0x24, 0xf3, {0xf3, 0x5, "c309e4f31ff7956798bca2fc3a93bc9e23b48416abc8c6cd22ef78440c4664122be29017af91ef7adca69eb6cfc3a20b1e613127658203c9e5c2a4afe2a7438821b060341c4309998aadd123ef16314fbbf114d123450e25ce6932a430f263f33c7cb8650dc6b460f960134d548ce75838a50c5bff5b07940e9cbbd91ca906c87d9fe60231604ef43e0d3f1e72a58372476b3c2661d1320fb4b1c3f7b25d2e8da126a69526a20656061724b245384f7b357ced8924cec46831c59351952c7f0b4e057c3f7736f9e6fe03dbc0536aa91ffcf4dbc8a30f9ed34a7db6c491bc896370c70b2beb6a91d62de1ac95efc91e29e7"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000600)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8001, 0xf, 0x1, [0x0, 0x1fec000, 0xc000, 0x0, 0x3f21, 0x6f]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x89, 0x3, 0x6, "b6c7e4b4", "b3e8b0b5"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x9, 0x3, 0x7, 0xfff7, 0x5}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x0, 0x18, 0xb4, "d52a4dc714acc1525ff04f57f0f7c75d58adc8bee2a2743683b3ca740d4d2b21bc35eb0cb1743528f8dcb78707351eb759f5e95b8023d36096358dd1e4113b563c5dcb812e955d41265ace4429ff5d21bd7de03155a0809830d01b85ca68ba18d5cf88656375a34c5b052bd819499931e00c338eb6c19a8a1c7c684e3e9af75f56c55a1094a81093a6bf4f5e1628ed1ac735e41c687f24887925a240664c9a1d7588671fec7fbe4a2eb250b672383b296ceea007"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xc8}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "e018"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xcd}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a9db"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x6}}) accept$alg(r0, 0x0, 0x0) 1m24.985296263s ago: executing program 3 (id=39): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x28401, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_wait(r2, &(0x7f0000000240)=[{}], 0x1, 0x7ff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="bcfab02c46083c5b40f379f1bc9474c5b60a88f56eaa3b1541e7720f399515199ac2ef002406d0ef64a04c641d3bef99e6a7c7beda503346478b124461012fd5e0d653da9e996efc426cbbaae64d2fcb161ddeea59763e860c941a0a3161fdf3402bd7c8bab94e457e0ed3565cd3de4c9bb0baeee43fb155d9040346b5b6d86f22783733881913fb1058be99b2d30393dfd9f9bf271528b642e46c7b416e4380b12d2ee9b292e76f6896dc27ba3a86ddf41445e343", @ANYBLOB="100027bd7000fbdbdf2513000000280001800800030001000000140002006d6163767461703000000000000000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x44001) ppoll(&(0x7f0000000080)=[{r2, 0x1680}], 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r1, 0x0, 0xff, 0xcb, &(0x7f0000000100)="39b6711bfd8724034c665384cea26dc2755ce62373921702d76d11669ffd87af05823cdfdda1ff37192cbe1fc1c2acf761469d6205c5cef2296e3e14340b3fb52b10ae4f55a92160caddffda38900e2e5c0ce8fa8f4a5af2ccd755e2cfdaf694cff46dbd99a6c4cff6fb8daa63706a7435040b3e23a372ae4f6680d9db950f3657d6a5fb8b1be8867cd3111821d8d5108046385b59a618a653ecf9411c68765c9dd9405e6389900eb35fe69871f0245813cd918bb76ee69b75731bb99861ac2f19bb189e5e27c499bf4e8c", 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001}) read(r1, &(0x7f0000000580)=""/119, 0x77) 1m23.768571741s ago: executing program 4 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0x1ff}], 0x2) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) userfaultfd(0x801) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000040)={0xa}) 1m0.37642745s ago: executing program 0 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000000000076ee000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040041) syz_usb_control_io(r1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r9 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) rt_sigqueueinfo(r9, 0x11, &(0x7f00000000c0)={0x20, 0x3800000, 0x1000}) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000040), 0x2410, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000180), 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000300"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f0007"], 0x3c}, 0x1, 0x2}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r12 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x81, 0xd7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xb3, 0x9, 0x3, 0x50, 0xc0}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x2, 0x0, 0x7f, [0xf, 0xc0]}]}, 0x4, [{0x7f, &(0x7f0000000780)=@string={0x7f, 0x3, "3d908c3e6b634b49b1a1668ba25c13569ba4f3c0cc20c9f8735a43d08961c51d33f37e2afa8fb565edbbb751b07a9aeed2b7fec4d5d40aee4ed0c5cd74f2f0eb4d64acd7af9cba74b215c1cf505975580a07232146d8741dbb3cbd0d2b7edbb23040e8e56ab5f55411d7840b55a6f1fa772edc773cbb1dc6aef21f934f"}}, {0xb8, &(0x7f0000000240)=@string={0xb8, 0x3, "a9adec5f55f05f889ac4d62c7f752abcaa0f364264ac70340d711b999d1af30d0717b5db2e17d1cc4e6571172c8d802802708a38dc8bdb347e42b1a4e9131690386cbaa0c4290045032f13a6da54405814231711200a819cd9b0bec596edebb66d0e255c17f2e9f6b0b07cbe77e364090b732aa30e166258aceef13fcef3d9b97b7a7c56cedd672d10e20a458ee47c9d1c1c152d55192897fcf333b9ad1f2a46e84f4248170e58bd3451fe95d0c5b4558ae9a0c5c170"}}, {0xcd, &(0x7f00000003c0)=@string={0xcd, 0x3, "1af39eb44f6a3ab7cd1a7ce112874e98869f6399916ad35ef630a2c4b2d1f8d6e593948bc07cba14823c77e6f5e43f3c0027939729f734f745f8fa0cd6aaa93bf5e46c5cc2f9b4ffde0f096fe5b80f67ebb4a2c53a60d36ef2fd6374104e79e2bdd8c90e2fd75806d3528868f709d56cd565e772f5b3ce302cfd1f6ed57528195ba4f86d38e8991fe3c82ffa265839db7ddbd2a627f31ce2ef0a9856cffe33b773aacdd8bc89865f978e228791b199ea7891d5b8c50a3a9d15f57497c4c57078ea2111c7786b1c65d944e8"}}, {0xc6, &(0x7f00000004c0)=@string={0xc6, 0x3, "8d3e526c7390790703ebb8a6fd84f19db95ac703b1846696c002e59594750b324f3b365957b8bf44d58c3d096d428c00f9ee2962ab5486356f3f3d2a8eac4ab4cd8d0b814e199420640a3e41d8b89b94a1734de3b1d721f711c9597cec755338837842a7eb27656f7ae0a30570594f2710c561edb0cb1d765ef1d5ad5ffa9261faeb707e5a2e79f778d5b31af7bdb57edcdcdea48e129f0daa1e8eb7d827250f4833174e221836fb7a4dabc6a52434c7e398534099a2369cb49be2f27480acfa336e0295"}}]}) syz_usb_control_io(r12, &(0x7f0000000740)={0x2c, &(0x7f0000000840)={0x40, 0x24, 0xf3, {0xf3, 0x5, "c309e4f31ff7956798bca2fc3a93bc9e23b48416abc8c6cd22ef78440c4664122be29017af91ef7adca69eb6cfc3a20b1e613127658203c9e5c2a4afe2a7438821b060341c4309998aadd123ef16314fbbf114d123450e25ce6932a430f263f33c7cb8650dc6b460f960134d548ce75838a50c5bff5b07940e9cbbd91ca906c87d9fe60231604ef43e0d3f1e72a58372476b3c2661d1320fb4b1c3f7b25d2e8da126a69526a20656061724b245384f7b357ced8924cec46831c59351952c7f0b4e057c3f7736f9e6fe03dbc0536aa91ffcf4dbc8a30f9ed34a7db6c491bc896370c70b2beb6a91d62de1ac95efc91e29e7"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000600)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8001, 0xf, 0x1, [0x0, 0x1fec000, 0xc000, 0x0, 0x3f21, 0x6f]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x89, 0x3, 0x6, "b6c7e4b4", "b3e8b0b5"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x9, 0x3, 0x7, 0xfff7, 0x5}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x0, 0x18, 0xb4, "d52a4dc714acc1525ff04f57f0f7c75d58adc8bee2a2743683b3ca740d4d2b21bc35eb0cb1743528f8dcb78707351eb759f5e95b8023d36096358dd1e4113b563c5dcb812e955d41265ace4429ff5d21bd7de03155a0809830d01b85ca68ba18d5cf88656375a34c5b052bd819499931e00c338eb6c19a8a1c7c684e3e9af75f56c55a1094a81093a6bf4f5e1628ed1ac735e41c687f24887925a240664c9a1d7588671fec7fbe4a2eb250b672383b296ceea007"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xc8}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "e018"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xcd}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a9db"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x6}}) accept$alg(r0, 0x0, 0x0) 59.094425571s ago: executing program 4 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0x1ff}], 0x2) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) userfaultfd(0x801) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000040)={0xa}) 57.851772189s ago: executing program 3 (id=39): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x28401, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_wait(r2, &(0x7f0000000240)=[{}], 0x1, 0x7ff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="bcfab02c46083c5b40f379f1bc9474c5b60a88f56eaa3b1541e7720f399515199ac2ef002406d0ef64a04c641d3bef99e6a7c7beda503346478b124461012fd5e0d653da9e996efc426cbbaae64d2fcb161ddeea59763e860c941a0a3161fdf3402bd7c8bab94e457e0ed3565cd3de4c9bb0baeee43fb155d9040346b5b6d86f22783733881913fb1058be99b2d30393dfd9f9bf271528b642e46c7b416e4380b12d2ee9b292e76f6896dc27ba3a86ddf41445e343", @ANYBLOB="100027bd7000fbdbdf2513000000280001800800030001000000140002006d6163767461703000000000000000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x44001) ppoll(&(0x7f0000000080)=[{r2, 0x1680}], 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r1, 0x0, 0xff, 0xcb, &(0x7f0000000100)="39b6711bfd8724034c665384cea26dc2755ce62373921702d76d11669ffd87af05823cdfdda1ff37192cbe1fc1c2acf761469d6205c5cef2296e3e14340b3fb52b10ae4f55a92160caddffda38900e2e5c0ce8fa8f4a5af2ccd755e2cfdaf694cff46dbd99a6c4cff6fb8daa63706a7435040b3e23a372ae4f6680d9db950f3657d6a5fb8b1be8867cd3111821d8d5108046385b59a618a653ecf9411c68765c9dd9405e6389900eb35fe69871f0245813cd918bb76ee69b75731bb99861ac2f19bb189e5e27c499bf4e8c", 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001}) read(r1, &(0x7f0000000580)=""/119, 0x77) 39.794348309s ago: executing program 0 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000000000076ee000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040041) syz_usb_control_io(r1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r9 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) rt_sigqueueinfo(r9, 0x11, &(0x7f00000000c0)={0x20, 0x3800000, 0x1000}) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000040), 0x2410, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000180), 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000300"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f0007"], 0x3c}, 0x1, 0x2}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r12 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x81, 0xd7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xb3, 0x9, 0x3, 0x50, 0xc0}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x2, 0x0, 0x7f, [0xf, 0xc0]}]}, 0x4, [{0x7f, &(0x7f0000000780)=@string={0x7f, 0x3, "3d908c3e6b634b49b1a1668ba25c13569ba4f3c0cc20c9f8735a43d08961c51d33f37e2afa8fb565edbbb751b07a9aeed2b7fec4d5d40aee4ed0c5cd74f2f0eb4d64acd7af9cba74b215c1cf505975580a07232146d8741dbb3cbd0d2b7edbb23040e8e56ab5f55411d7840b55a6f1fa772edc773cbb1dc6aef21f934f"}}, {0xb8, &(0x7f0000000240)=@string={0xb8, 0x3, "a9adec5f55f05f889ac4d62c7f752abcaa0f364264ac70340d711b999d1af30d0717b5db2e17d1cc4e6571172c8d802802708a38dc8bdb347e42b1a4e9131690386cbaa0c4290045032f13a6da54405814231711200a819cd9b0bec596edebb66d0e255c17f2e9f6b0b07cbe77e364090b732aa30e166258aceef13fcef3d9b97b7a7c56cedd672d10e20a458ee47c9d1c1c152d55192897fcf333b9ad1f2a46e84f4248170e58bd3451fe95d0c5b4558ae9a0c5c170"}}, {0xcd, &(0x7f00000003c0)=@string={0xcd, 0x3, "1af39eb44f6a3ab7cd1a7ce112874e98869f6399916ad35ef630a2c4b2d1f8d6e593948bc07cba14823c77e6f5e43f3c0027939729f734f745f8fa0cd6aaa93bf5e46c5cc2f9b4ffde0f096fe5b80f67ebb4a2c53a60d36ef2fd6374104e79e2bdd8c90e2fd75806d3528868f709d56cd565e772f5b3ce302cfd1f6ed57528195ba4f86d38e8991fe3c82ffa265839db7ddbd2a627f31ce2ef0a9856cffe33b773aacdd8bc89865f978e228791b199ea7891d5b8c50a3a9d15f57497c4c57078ea2111c7786b1c65d944e8"}}, {0xc6, &(0x7f00000004c0)=@string={0xc6, 0x3, "8d3e526c7390790703ebb8a6fd84f19db95ac703b1846696c002e59594750b324f3b365957b8bf44d58c3d096d428c00f9ee2962ab5486356f3f3d2a8eac4ab4cd8d0b814e199420640a3e41d8b89b94a1734de3b1d721f711c9597cec755338837842a7eb27656f7ae0a30570594f2710c561edb0cb1d765ef1d5ad5ffa9261faeb707e5a2e79f778d5b31af7bdb57edcdcdea48e129f0daa1e8eb7d827250f4833174e221836fb7a4dabc6a52434c7e398534099a2369cb49be2f27480acfa336e0295"}}]}) syz_usb_control_io(r12, &(0x7f0000000740)={0x2c, &(0x7f0000000840)={0x40, 0x24, 0xf3, {0xf3, 0x5, "c309e4f31ff7956798bca2fc3a93bc9e23b48416abc8c6cd22ef78440c4664122be29017af91ef7adca69eb6cfc3a20b1e613127658203c9e5c2a4afe2a7438821b060341c4309998aadd123ef16314fbbf114d123450e25ce6932a430f263f33c7cb8650dc6b460f960134d548ce75838a50c5bff5b07940e9cbbd91ca906c87d9fe60231604ef43e0d3f1e72a58372476b3c2661d1320fb4b1c3f7b25d2e8da126a69526a20656061724b245384f7b357ced8924cec46831c59351952c7f0b4e057c3f7736f9e6fe03dbc0536aa91ffcf4dbc8a30f9ed34a7db6c491bc896370c70b2beb6a91d62de1ac95efc91e29e7"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000600)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8001, 0xf, 0x1, [0x0, 0x1fec000, 0xc000, 0x0, 0x3f21, 0x6f]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x89, 0x3, 0x6, "b6c7e4b4", "b3e8b0b5"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x9, 0x3, 0x7, 0xfff7, 0x5}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x0, 0x18, 0xb4, "d52a4dc714acc1525ff04f57f0f7c75d58adc8bee2a2743683b3ca740d4d2b21bc35eb0cb1743528f8dcb78707351eb759f5e95b8023d36096358dd1e4113b563c5dcb812e955d41265ace4429ff5d21bd7de03155a0809830d01b85ca68ba18d5cf88656375a34c5b052bd819499931e00c338eb6c19a8a1c7c684e3e9af75f56c55a1094a81093a6bf4f5e1628ed1ac735e41c687f24887925a240664c9a1d7588671fec7fbe4a2eb250b672383b296ceea007"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xc8}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "e018"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xcd}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a9db"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x6}}) accept$alg(r0, 0x0, 0x0) 32.188566255s ago: executing program 4 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0x1ff}], 0x2) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) userfaultfd(0x801) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000040)={0xa}) 30.032983625s ago: executing program 3 (id=39): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x28401, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_wait(r2, &(0x7f0000000240)=[{}], 0x1, 0x7ff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="bcfab02c46083c5b40f379f1bc9474c5b60a88f56eaa3b1541e7720f399515199ac2ef002406d0ef64a04c641d3bef99e6a7c7beda503346478b124461012fd5e0d653da9e996efc426cbbaae64d2fcb161ddeea59763e860c941a0a3161fdf3402bd7c8bab94e457e0ed3565cd3de4c9bb0baeee43fb155d9040346b5b6d86f22783733881913fb1058be99b2d30393dfd9f9bf271528b642e46c7b416e4380b12d2ee9b292e76f6896dc27ba3a86ddf41445e343", @ANYBLOB="100027bd7000fbdbdf2513000000280001800800030001000000140002006d6163767461703000000000000000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x44001) ppoll(&(0x7f0000000080)=[{r2, 0x1680}], 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r1, 0x0, 0xff, 0xcb, &(0x7f0000000100)="39b6711bfd8724034c665384cea26dc2755ce62373921702d76d11669ffd87af05823cdfdda1ff37192cbe1fc1c2acf761469d6205c5cef2296e3e14340b3fb52b10ae4f55a92160caddffda38900e2e5c0ce8fa8f4a5af2ccd755e2cfdaf694cff46dbd99a6c4cff6fb8daa63706a7435040b3e23a372ae4f6680d9db950f3657d6a5fb8b1be8867cd3111821d8d5108046385b59a618a653ecf9411c68765c9dd9405e6389900eb35fe69871f0245813cd918bb76ee69b75731bb99861ac2f19bb189e5e27c499bf4e8c", 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001}) read(r1, &(0x7f0000000580)=""/119, 0x77) 13.101499748s ago: executing program 0 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000000000076ee000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040041) syz_usb_control_io(r1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r9 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) rt_sigqueueinfo(r9, 0x11, &(0x7f00000000c0)={0x20, 0x3800000, 0x1000}) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000040), 0x2410, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000180), 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000300"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f0007"], 0x3c}, 0x1, 0x2}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r12 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x81, 0xd7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xb3, 0x9, 0x3, 0x50, 0xc0}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x2, 0x0, 0x7f, [0xf, 0xc0]}]}, 0x4, [{0x7f, &(0x7f0000000780)=@string={0x7f, 0x3, "3d908c3e6b634b49b1a1668ba25c13569ba4f3c0cc20c9f8735a43d08961c51d33f37e2afa8fb565edbbb751b07a9aeed2b7fec4d5d40aee4ed0c5cd74f2f0eb4d64acd7af9cba74b215c1cf505975580a07232146d8741dbb3cbd0d2b7edbb23040e8e56ab5f55411d7840b55a6f1fa772edc773cbb1dc6aef21f934f"}}, {0xb8, &(0x7f0000000240)=@string={0xb8, 0x3, "a9adec5f55f05f889ac4d62c7f752abcaa0f364264ac70340d711b999d1af30d0717b5db2e17d1cc4e6571172c8d802802708a38dc8bdb347e42b1a4e9131690386cbaa0c4290045032f13a6da54405814231711200a819cd9b0bec596edebb66d0e255c17f2e9f6b0b07cbe77e364090b732aa30e166258aceef13fcef3d9b97b7a7c56cedd672d10e20a458ee47c9d1c1c152d55192897fcf333b9ad1f2a46e84f4248170e58bd3451fe95d0c5b4558ae9a0c5c170"}}, {0xcd, &(0x7f00000003c0)=@string={0xcd, 0x3, "1af39eb44f6a3ab7cd1a7ce112874e98869f6399916ad35ef630a2c4b2d1f8d6e593948bc07cba14823c77e6f5e43f3c0027939729f734f745f8fa0cd6aaa93bf5e46c5cc2f9b4ffde0f096fe5b80f67ebb4a2c53a60d36ef2fd6374104e79e2bdd8c90e2fd75806d3528868f709d56cd565e772f5b3ce302cfd1f6ed57528195ba4f86d38e8991fe3c82ffa265839db7ddbd2a627f31ce2ef0a9856cffe33b773aacdd8bc89865f978e228791b199ea7891d5b8c50a3a9d15f57497c4c57078ea2111c7786b1c65d944e8"}}, {0xc6, &(0x7f00000004c0)=@string={0xc6, 0x3, "8d3e526c7390790703ebb8a6fd84f19db95ac703b1846696c002e59594750b324f3b365957b8bf44d58c3d096d428c00f9ee2962ab5486356f3f3d2a8eac4ab4cd8d0b814e199420640a3e41d8b89b94a1734de3b1d721f711c9597cec755338837842a7eb27656f7ae0a30570594f2710c561edb0cb1d765ef1d5ad5ffa9261faeb707e5a2e79f778d5b31af7bdb57edcdcdea48e129f0daa1e8eb7d827250f4833174e221836fb7a4dabc6a52434c7e398534099a2369cb49be2f27480acfa336e0295"}}]}) syz_usb_control_io(r12, &(0x7f0000000740)={0x2c, &(0x7f0000000840)={0x40, 0x24, 0xf3, {0xf3, 0x5, "c309e4f31ff7956798bca2fc3a93bc9e23b48416abc8c6cd22ef78440c4664122be29017af91ef7adca69eb6cfc3a20b1e613127658203c9e5c2a4afe2a7438821b060341c4309998aadd123ef16314fbbf114d123450e25ce6932a430f263f33c7cb8650dc6b460f960134d548ce75838a50c5bff5b07940e9cbbd91ca906c87d9fe60231604ef43e0d3f1e72a58372476b3c2661d1320fb4b1c3f7b25d2e8da126a69526a20656061724b245384f7b357ced8924cec46831c59351952c7f0b4e057c3f7736f9e6fe03dbc0536aa91ffcf4dbc8a30f9ed34a7db6c491bc896370c70b2beb6a91d62de1ac95efc91e29e7"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000600)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8001, 0xf, 0x1, [0x0, 0x1fec000, 0xc000, 0x0, 0x3f21, 0x6f]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x3, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x89, 0x3, 0x6, "b6c7e4b4", "b3e8b0b5"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x9, 0x3, 0x7, 0xfff7, 0x5}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x0, 0x18, 0xb4, "d52a4dc714acc1525ff04f57f0f7c75d58adc8bee2a2743683b3ca740d4d2b21bc35eb0cb1743528f8dcb78707351eb759f5e95b8023d36096358dd1e4113b563c5dcb812e955d41265ace4429ff5d21bd7de03155a0809830d01b85ca68ba18d5cf88656375a34c5b052bd819499931e00c338eb6c19a8a1c7c684e3e9af75f56c55a1094a81093a6bf4f5e1628ed1ac735e41c687f24887925a240664c9a1d7588671fec7fbe4a2eb250b672383b296ceea007"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0xc8}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "e018"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xcd}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a9db"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x6}}) accept$alg(r0, 0x0, 0x0) 11.153199939s ago: executing program 1 (id=602): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, {}, {0x200000, 0xa, 0x20}], 0x1}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019ed6e20d3131132d7cb011203010902120001000000000904"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="4ee758a7922223e65bb73930ca3be1bde59dc8874c8718d78cd25dec4c6f507f2f665c0e02ee7990912849336dfd864da2b3fc2b8757ad95ee9a32b1d54d9cab743c8b6f1e3827cf06b247f780d53c3bba8ee34b29d8878b92248d0210a3518b26f7d0306529c279804010d43e529e58047ebeea3dd0000000000000000000000000000000000000000000238c65b78abf3cae62728351778c49ac87ea7746bf8060ae285103e9e3185a77eefd132e28afb200d538e3a679a038fc780d550b17b8b239c5939cbffaed2c948a6921e48add029238e6f3798af36f9888cadc975754d668f54128c8e0ef03"]) r5 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 8.387963683s ago: executing program 2 (id=603): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0xa, 0x5) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000005000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70]}}]}) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, r3, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xec) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r5, r6, 0x6, 0x0, @val=@iter={0x0}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='befs\x00', 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000100)=@routing={0xa8}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0xcaa4, 0xfffffffc, @empty, 0xd}, 0x1c) 7.995965771s ago: executing program 4 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0x1ff}], 0x2) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) userfaultfd(0x801) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000040)={0xa}) 6.678807245s ago: executing program 1 (id=604): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x12) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) r3 = accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000480)=0x6e, 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={0x0, 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="d38aebb2fd3387e8e05e62b02e8ef284f32033163d071b037b4586168b983ac47266162512887cdd8de2bb1a3172c0d0a1825f1ef67cbd401134362166314750448731fa70b9b1e3d5c925f15763eed41452b62b7c29f0b215c4b6e159f8dd9ae61ac3c5d1f5e8034e8439b1ef679e0e8f284e1cf22c2984c63547ee267322ea3316dd217cf2163b3fd3b90d8d284ed1b0c010358a17ebcbc42f64ef21", @ANYRES32=r3]) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', r6, 0x0, 0x80, 0x8, 0x4, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @empty, {[@end, @generic={0x43, 0xa, "0000000000010e89"}, @end, @lsrr={0x83, 0xb, 0x90, [@empty, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop, @ssrr={0x89, 0x7, 0x8e, [@multicast2]}, @timestamp_addr={0x44, 0x4, 0xa0, 0x1, 0x5}]}}}}}) 6.676443605s ago: executing program 2 (id=605): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0xc2f00, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x25, 0x2, 0xfffffffd) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) dup3(r2, r1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x1, @none, 0x0, 0x1}, 0x72) 6.674634809s ago: executing program 3 (id=39): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x28401, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_wait(r2, &(0x7f0000000240)=[{}], 0x1, 0x7ff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="bcfab02c46083c5b40f379f1bc9474c5b60a88f56eaa3b1541e7720f399515199ac2ef002406d0ef64a04c641d3bef99e6a7c7beda503346478b124461012fd5e0d653da9e996efc426cbbaae64d2fcb161ddeea59763e860c941a0a3161fdf3402bd7c8bab94e457e0ed3565cd3de4c9bb0baeee43fb155d9040346b5b6d86f22783733881913fb1058be99b2d30393dfd9f9bf271528b642e46c7b416e4380b12d2ee9b292e76f6896dc27ba3a86ddf41445e343", @ANYBLOB="100027bd7000fbdbdf2513000000280001800800030001000000140002006d6163767461703000000000000000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x44001) ppoll(&(0x7f0000000080)=[{r2, 0x1680}], 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r1, 0x0, 0xff, 0xcb, &(0x7f0000000100)="39b6711bfd8724034c665384cea26dc2755ce62373921702d76d11669ffd87af05823cdfdda1ff37192cbe1fc1c2acf761469d6205c5cef2296e3e14340b3fb52b10ae4f55a92160caddffda38900e2e5c0ce8fa8f4a5af2ccd755e2cfdaf694cff46dbd99a6c4cff6fb8daa63706a7435040b3e23a372ae4f6680d9db950f3657d6a5fb8b1be8867cd3111821d8d5108046385b59a618a653ecf9411c68765c9dd9405e6389900eb35fe69871f0245813cd918bb76ee69b75731bb99861ac2f19bb189e5e27c499bf4e8c", 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001}) read(r1, &(0x7f0000000580)=""/119, 0x77) 5.2710024s ago: executing program 1 (id=606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x8, 0xa, 0x3) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="01da0b"], 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13e", 0x62, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/111, 0x6f}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000190a0102000d00"/20], 0x14}}, 0x0) 5.255141354s ago: executing program 2 (id=607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="1800040002000018050000", @ANYRES32=0x1, @ANYBLOB="0000000003000000950000000000000018230000", @ANYRES32, @ANYBLOB="000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x3ff, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0xdac8000, 0x51}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, r0], &(0x7f0000000540)=[{0x2, 0x1, 0x9, 0xa}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, &(0x7f0000000240)=ANY=[@ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) select(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000080)={{0x84, @multicast1, 0x4e21, 0x3, 'rr\x00', 0x2, 0x81, 0x37}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x4e22, 0x4, 0x0, 0x12d5c, 0x12d5b}}, 0x44) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280), 0x0) r9 = fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, 0x0, &(0x7f00000002c0)='\x00\x00\xb2\x00\x10\x00\x00\x00\x00\x00\x00ikH\xaf\xfe\x9a%\xca[W\xd2\x9a\xa6\xe2\x85S|\xb2\x03\xae\xc1V\xd1\xa2\x03\xcc\x89\x1d\x05\xecY\xf5\xc8{\x0e\xbd\x0e\xe5]P\x95;\xfbQy\x97[\xb44\xa0\xa6\xac\xec\xd9<\x9c\xe5y%*\xf1\xc3Ks6 z\xeef:\v\x8a\x00\xd59\x00M\xbd\x89\xc8Qi\xa0v\x8b\xe3\x14', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x300) 4.606170427s ago: executing program 1 (id=608): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000055098a403a0901268f08000000010902120001000000000904"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000040)) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x756) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.555616342s ago: executing program 2 (id=609): r0 = open(&(0x7f0000002700)='./file1\x00', 0x143862, 0x12a) mount(&(0x7f0000002780)=@filename='./file1\x00', &(0x7f0000002800)='./bus/file0/file0\x00', &(0x7f0000002840)='sockfs\x00', 0x8004bc, &(0x7f0000000000)='tpaY\x9a\x88ls\x05rdma,') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3000003, @remote, 0xb0}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000026c0)='ip_vti0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)="bb8db47e6f082dafbb775f0dc189311cfc1985f43ffc525e17a73e9cf5be472afaeefcd2fc96", 0x26}, {&(0x7f00000003c0)="4cd7c2f8a78fe31324770a426c8be57864f1abc9a7f92c476f21aeca", 0x1c}, {&(0x7f0000000400)="fb91b4e64083c6e4805075aa0c5aec505226f48f55a50913097b5f83a4632c9106fc1852db2712b3fc7335d49d19a0c7adce5b3ac8cb7729e216f07138a3db56ccb55f278cec44adedcaebbe249e4845d72fa2309ef867878ebeb64ff81ed807851b619796643d32a93bb10c2b799c925c559805ba01819b8c75af0aedee82710ca38c7d9da30187a1a0a1651303e9ac6c51fae2f3344f5d63c63d46849c41545285279f37cabe8f72340333810ee6988dde5725ea0863e3afdf14", 0xbb}, {0x0}, {&(0x7f0000000540)="002db68be7656111fdeb00e728a4f211b534eeecb51cf873d3af93d6e0236b2d5f368f4c6c28f3bdbf382ae3fb336a890181b68074a89376417140a19f2c505627090f8fbbea442bafe0e69742d364d95185c73a8f89127daded6033b80835b1286887a5d4f479a12a0a22806d599786ebcd3c17946b031cdfe7dcc36c2bd48982e53a7fa5b4da3da4ba25465164210d5e32d44dacc5dd463bb5cf08ae1819173c8d31d3e293675eaf022d8f85", 0xad}], 0x5, &(0x7f0000002780)=ANY=[], 0x78, 0x4880}, 0x20044040) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f00000001c0)={0xffff}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x3, 0x0, 0x0, r3, 0x0, 0x12d, 0x6}, 0x0, 0x0, 0xb, 0x6, 0x1, 0x4, 0x10001, 0x1, 0xa, 0x4, r4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000140)={0x5, 0x2}) mkdirat(0xffffffffffffffff, &(0x7f00000027c0)='./bus/file0\x00', 0x177) mount$fuse(0x0, 0x0, 0x0, 0x10480, &(0x7f0000002940)=ANY=[@ANYRES32=0x0, @ANYBLOB="8253d8cd2dd0ba05354013820461740715d00191f392a10d7ff9de646eb6aa049755ca4131e2194b00c72e270e4b54fe537d3ababf93750ed281dbea5f32660fe1c5599c120280672225b8328102c0faa71cf6e78ef52a758babdc1167dce93b7c90ed7b80df86e6c33a9583a9c0a81e5441817f5f511595e5fada35ec88542169e7c1f0c3bd39607fd4e2e213ebf917c974b85d1644de77d000791eb7ed33b13db2260533fb4b163b46ab7c3fe700cbfb2ea2a722d8ca7049efe23edc0dc57de70a5a0f198445bf2e0e51b64dad0c0c5d6651e2d7f0966a8cff2a9c9e27c49325db9fc665a0d562a0270c50e29d705e42b99caef780878dfbb85039"]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x1807824, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe02", @ANYRES32], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="b159cad70a000200ff"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') setreuid(0xee01, 0xee01) rmdir(&(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) 1.196166295s ago: executing program 1 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000240), 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a7c84067f6f2abac00e2446ecff25c1ee83e000020cfcd072d5d9a6feab26b4691061f8deb3e5a0a08cdd4c86f60abbc927c87013c80580dde8da6e784fe74", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0501f00400100000000000000000000000140000", @ANYBLOB="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", @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r7], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='tlb_flush\x00', r9}, 0x18) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@redirect_dir_nofollow}, {@volatile}, {@uuid_off}]}) chdir(&(0x7f0000000140)='./bus\x00') r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r10, 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x84) lseek(r10, 0x1000000, 0x0) 929.912844ms ago: executing program 2 (id=611): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@t={0x81, 0x1, 0x0, 0x0, @generic=0x40005}], 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000001900)={0xa, 0x1, 0x2, "c8e7747f8c0bea55dddbce33af3078a66cc08c8f229c2d19fca710d1907bd65f", 0x494e4f4b}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x3, 0x2c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@cipso={0x86, 0xa, 0x3, [{0x1, 0x4, '5v'}]}, @cipso={0x86, 0x6, 0x3}]}}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r5, 0x48079000) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 188.862985ms ago: executing program 1 (id=612): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00004f1000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a7, 0x8000000}) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)=0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 2 (id=613): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0xb) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0xff, 0x0, 0xfffff008}, {0x6, 0x0, 0x9, 0x1}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000480)={0x1, 0x0, [{0x7ca3, 0x5, 0x1, 0x0, @msi={0x8, 0x7, 0x9, 0x6}}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 0: left promiscuous mode [ 285.841349][ T2950] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.117032][ T5825] Bluetooth: hci3: command tx timeout [ 286.119757][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 286.199797][ T5828] Bluetooth: hci0: command 0x040f tx timeout [ 286.286720][ T5828] Bluetooth: hci1: command 0x041b tx timeout [ 286.530070][ T2950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.550901][ T2950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.572646][ T2950] bond0 (unregistering): Released all slaves [ 287.243196][ T2950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.322392][ T2950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.390249][ T2950] bond0 (unregistering): Released all slaves [ 287.846631][ T1220] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 288.020321][ T1220] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.032428][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.042861][ T1220] usb 3-1: Product: syz [ 288.047574][ T1220] usb 3-1: Manufacturer: syz [ 288.052329][ T1220] usb 3-1: SerialNumber: syz [ 288.085658][ T1220] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 288.152947][ T5870] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.200370][ T5828] Bluetooth: hci3: command tx timeout [ 288.356630][ T5828] Bluetooth: hci1: command 0x041b tx timeout [ 288.570589][ T8972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.595753][ T8972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.611647][ T8972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.651335][ T8972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.669017][ T2950] hsr_slave_0: left promiscuous mode [ 288.675960][ T2950] hsr_slave_1: left promiscuous mode [ 288.683438][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.707222][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.724617][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.735246][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.767056][ T2950] hsr_slave_0: left promiscuous mode [ 288.771624][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.782218][ T2950] hsr_slave_1: left promiscuous mode [ 288.793393][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.801744][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.809469][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.819710][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.827671][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.879105][ T2950] veth1_macvtap: left promiscuous mode [ 288.884827][ T2950] veth0_macvtap: left promiscuous mode [ 288.920599][ T2950] veth1_vlan: left promiscuous mode [ 288.926055][ T2950] veth0_vlan: left promiscuous mode [ 288.947061][ T2950] veth1_macvtap: left promiscuous mode [ 288.960083][ T2950] veth0_macvtap: left promiscuous mode [ 288.972690][ T2950] veth1_vlan: left promiscuous mode [ 288.978630][ T2950] veth0_vlan: left promiscuous mode [ 289.276051][ T9200] netlink: 76 bytes leftover after parsing attributes in process `syz.2.454'. [ 289.347454][ T5870] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 289.368084][ T5870] ath9k_htc: Failed to initialize the device [ 289.431597][ T1220] usb 3-1: USB disconnect, device number 41 [ 289.450733][ T1220] usb 3-1: ath9k_htc: USB layer deinitialized [ 289.843037][ T2950] team0 (unregistering): Port device team_slave_1 removed [ 289.891711][ T2950] team0 (unregistering): Port device team_slave_0 removed [ 290.449100][ T5828] Bluetooth: hci1: command 0x041b tx timeout [ 290.805833][ T2950] team0 (unregistering): Port device team_slave_1 removed [ 290.862123][ T2950] team0 (unregistering): Port device team_slave_0 removed [ 291.448651][ T8955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.494002][ T8955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.795187][ T9208] 9pnet_fd: Insufficient options for proto=fd [ 291.912788][ T8955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.935167][ T8955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.003062][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.018804][ T8955] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.125285][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.132508][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.142693][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.149930][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.495798][ T8972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.594630][ T8972] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.729681][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.737015][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.773210][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.780406][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.136283][ T9069] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 293.203098][ T9069] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 293.236969][ T5904] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 293.284422][ T9069] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 293.308693][ T9069] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.412402][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.427612][ T5904] usb 2-1: config 7 has an invalid interface number: 109 but max is 0 [ 293.435845][ T5904] usb 2-1: config 7 has no interface number 0 [ 293.469114][ T5904] usb 2-1: config 7 interface 109 has no altsetting 0 [ 293.508085][ T5904] usb 2-1: New USB device found, idVendor=1965, idProduct=8018, bcdDevice=d9.4d [ 293.534053][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.558944][ T8955] veth0_vlan: entered promiscuous mode [ 293.570321][ T5904] usb 2-1: Product: syz [ 293.574547][ T5904] usb 2-1: Manufacturer: syz [ 293.613815][ T5904] usb 2-1: SerialNumber: syz [ 293.642027][ T8955] veth1_vlan: entered promiscuous mode [ 293.729203][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.764294][ T8972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.789606][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.835282][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.842467][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.862635][ T5904] usbhid 2-1:7.109: couldn't find an input interrupt endpoint [ 293.889694][ T8955] veth0_macvtap: entered promiscuous mode [ 293.909758][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.917030][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.924523][ T5904] usb 2-1: USB disconnect, device number 26 [ 293.949614][ T8955] veth1_macvtap: entered promiscuous mode [ 294.058479][ T8972] veth0_vlan: entered promiscuous mode [ 294.077182][ T9257] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 294.082893][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.084144][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 294.115559][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.135976][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.153810][ T9257] vhci_hcd vhci_hcd.0: Device attached [ 294.171008][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.188273][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.224894][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.245434][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.255638][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.275621][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.294077][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.308775][ T8972] veth1_vlan: entered promiscuous mode [ 294.331105][ T8955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.350140][ T8955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.361411][ T8955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.376751][ T8955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.416873][ T5904] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 294.436098][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.480836][ T8972] veth0_macvtap: entered promiscuous mode [ 294.549935][ T8972] veth1_macvtap: entered promiscuous mode [ 294.654352][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.686043][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.705848][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.739082][ T9258] vhci_hcd: connection reset by peer [ 294.754704][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.776215][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.786675][ T2950] vhci_hcd: stop threads [ 294.788248][ T2950] vhci_hcd: release socket [ 294.805130][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.817851][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.840779][ T2950] vhci_hcd: disconnect device [ 294.861092][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.880954][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.904227][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.915657][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.932041][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.943489][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.957981][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.021614][ T8972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.042600][ T8972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.056572][ T5870] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 295.060879][ T8972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.080042][ T8972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.095006][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.127715][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.212156][ T9069] veth0_vlan: entered promiscuous mode [ 295.220429][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.234041][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.248230][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.273479][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 295.320484][ T9069] veth1_vlan: entered promiscuous mode [ 295.336525][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 295.379115][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.417429][ T5870] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 295.452423][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.464369][ T9069] veth0_macvtap: entered promiscuous mode [ 295.471504][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.482500][ T5870] usb 2-1: Product: syz [ 295.491843][ T5870] usb 2-1: Manufacturer: syz [ 295.496593][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.506328][ T5870] usb 2-1: SerialNumber: syz [ 295.520503][ T9069] veth1_macvtap: entered promiscuous mode [ 295.528411][ T5870] usb 2-1: config 0 descriptor?? [ 295.534684][ T9273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.607059][ T5870] rc_core: IR keymap rc-imon-rsc not found [ 295.629303][ T5870] Registered IR keymap rc-empty [ 295.644067][ T5870] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 295.657994][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.662701][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.665832][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.689458][ T5870] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 295.711329][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.744560][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.756555][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.777461][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.806559][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.827078][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.846237][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.857553][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.865593][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 295.878019][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.908766][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.953083][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.966284][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.984796][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.995710][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.035676][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.037437][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.059504][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.086527][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.090154][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 296.124564][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.126592][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.144273][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.159448][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.170982][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.204911][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.214743][ T25] usb 3-1: config 0 descriptor?? [ 296.329394][ T5870] usb 2-1: USB disconnect, device number 27 [ 296.423492][ T5967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.457726][ T9069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.467371][ T9069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.476105][ T9069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.485645][ T9069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.550193][ T5967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.641863][ T9288] netlink: 'syz.2.466': attribute type 1 has an invalid length. [ 296.671856][ T5967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.743681][ T9288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.820085][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 296.827003][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 296.840459][ T25] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 296.932983][ T5967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.060800][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.090165][ T25] usb 3-1: USB disconnect, device number 42 [ 297.097235][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.190914][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.208782][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.334573][ T5967] bridge_slave_1: left allmulticast mode [ 297.348270][ T5967] bridge_slave_1: left promiscuous mode [ 297.354848][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.386211][ T5967] bridge_slave_0: left allmulticast mode [ 297.398534][ T5967] bridge_slave_0: left promiscuous mode [ 297.407103][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.483558][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.504294][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.519196][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.554965][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.563830][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.583062][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.942756][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.953198][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.963875][ T5967] bond0 (unregistering): Released all slaves [ 298.180378][ T9329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.407460][ T9333] wg2: entered promiscuous mode [ 298.416569][ T9333] wg2: entered allmulticast mode [ 298.506818][ T8] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 298.661335][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.672830][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.683206][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.693676][ T8] usb 3-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 298.710951][ T5967] hsr_slave_0: left promiscuous mode [ 298.710988][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.726261][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 298.735863][ T5967] hsr_slave_1: left promiscuous mode [ 298.741923][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 298.749538][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.758943][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.767996][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=c115, bcdDevice= 7.fd [ 298.768031][ T8] usb 3-1: New USB device strings: Mfr=230, Product=4, SerialNumber=0 [ 298.768053][ T8] usb 3-1: Product: syz [ 298.768069][ T8] usb 3-1: Manufacturer: syz [ 298.770752][ T8] usb 3-1: config 0 descriptor?? [ 298.836239][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.847814][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.855277][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.875736][ T5967] veth1_macvtap: left promiscuous mode [ 298.881643][ T5967] veth0_macvtap: left promiscuous mode [ 298.887380][ T5967] veth1_vlan: left promiscuous mode [ 298.892674][ T5967] veth0_vlan: left promiscuous mode [ 299.010622][ T8] usb 3-1: USB disconnect, device number 43 [ 299.402371][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 299.452635][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 299.573222][ T5904] vhci_hcd: vhci_device speed not set [ 299.725484][ T5828] Bluetooth: hci0: command tx timeout [ 299.810766][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.830602][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.842403][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.859196][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.873061][ T5868] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 299.878599][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 299.888263][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.061532][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.072074][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.081239][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.120172][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.130633][ T5868] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 300.140452][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.155760][ T5868] hub 2-1:1.0: bad descriptor, ignoring hub [ 300.162440][ T5868] hub 2-1:1.0: probe with driver hub failed with error -5 [ 300.170544][ T5868] cdc_wdm 2-1:1.0: skipping garbage [ 300.175971][ T5868] cdc_wdm 2-1:1.0: skipping garbage [ 300.191185][ T5868] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 300.197873][ T5868] cdc_wdm 2-1:1.0: Unknown control protocol [ 300.313423][ T9318] chnl_net:caif_netlink_parms(): no params data found [ 300.324514][ T9352] FAULT_INJECTION: forcing a failure. [ 300.324514][ T9352] name failslab, interval 1, probability 0, space 0, times 1 [ 300.337806][ T9352] CPU: 1 UID: 0 PID: 9352 Comm: syz.2.470 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 300.348443][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.358532][ T9352] Call Trace: [ 300.361830][ T9352] [ 300.364766][ T9352] dump_stack_lvl+0x241/0x360 [ 300.369468][ T9352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.374733][ T9352] ? __pfx__printk+0x10/0x10 [ 300.379339][ T9352] ? __kmalloc_cache_noprof+0x48/0x390 [ 300.384803][ T9352] ? __pfx___might_resched+0x10/0x10 [ 300.390119][ T9352] should_fail_ex+0x3b0/0x4e0 [ 300.394865][ T9352] should_failslab+0xac/0x100 [ 300.399570][ T9352] __kmalloc_cache_noprof+0x70/0x390 [ 300.404859][ T9352] ? tcf_ife_init+0x255/0xfd0 [ 300.409559][ T9352] tcf_ife_init+0x255/0xfd0 [ 300.414438][ T9352] ? __pfx_tcf_ife_init+0x10/0x10 [ 300.419477][ T9352] ? __asan_memcpy+0x40/0x70 [ 300.424091][ T9352] ? __pfx_tcf_ife_init+0x10/0x10 [ 300.429136][ T9352] tcf_action_init_1+0x5d7/0x890 [ 300.434173][ T9352] ? nla_strscpy+0x100/0x180 [ 300.438818][ T9352] ? __pfx_tcf_action_init_1+0x10/0x10 [ 300.444333][ T9352] ? _raw_read_unlock+0x28/0x50 [ 300.449209][ T9352] ? tc_action_load_ops+0x26d/0x590 [ 300.454453][ T9352] ? __lock_acquire+0x1397/0x2100 [ 300.459527][ T9352] ? __nla_parse+0x40/0x60 [ 300.464093][ T9352] tcf_action_init+0x2e8/0xae0 [ 300.468894][ T9352] ? mark_lock+0x9a/0x360 [ 300.473259][ T9352] ? __lock_acquire+0x1397/0x2100 [ 300.478315][ T9352] ? __pfx_tcf_action_init+0x10/0x10 [ 300.483656][ T9352] ? cap_capable+0x1b4/0x250 [ 300.488259][ T9352] ? cap_capable+0x1b4/0x250 [ 300.492875][ T9352] ? safesetid_security_capable+0xb2/0x1d0 [ 300.498708][ T9352] tc_ctl_action+0x47d/0xcf0 [ 300.503341][ T9352] ? __pfx_tc_ctl_action+0x10/0x10 [ 300.508513][ T9352] ? __mutex_lock+0x5ef/0xee0 [ 300.513231][ T9352] ? __pfx_tc_ctl_action+0x10/0x10 [ 300.518352][ T9352] rtnetlink_rcv_msg+0x73f/0xcf0 [ 300.523287][ T9352] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 300.528793][ T9352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.534315][ T9352] ? ref_tracker_free+0x643/0x7e0 [ 300.539343][ T9352] netlink_rcv_skb+0x1e3/0x430 [ 300.544113][ T9352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.549689][ T9352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.555074][ T9352] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.560311][ T9352] netlink_unicast+0x7f6/0x990 [ 300.565097][ T9352] ? __pfx_netlink_unicast+0x10/0x10 [ 300.570403][ T9352] ? __virt_addr_valid+0x45f/0x530 [ 300.575557][ T9352] ? __phys_addr_symbol+0x2f/0x70 [ 300.580693][ T9352] ? __check_object_size+0x47a/0x730 [ 300.585997][ T9352] netlink_sendmsg+0x8e4/0xcb0 [ 300.590837][ T9352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.596154][ T9352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.601460][ T9352] __sock_sendmsg+0x221/0x270 [ 300.606159][ T9352] ____sys_sendmsg+0x52a/0x7e0 [ 300.610950][ T9352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.616253][ T9352] ? __fget_files+0x2a/0x410 [ 300.620847][ T9352] ? __fget_files+0x2a/0x410 [ 300.625524][ T9352] __sys_sendmsg+0x269/0x350 [ 300.630125][ T9352] ? __pfx_lock_release+0x10/0x10 [ 300.635193][ T9352] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.640312][ T9352] ? __pfx_vfs_write+0x10/0x10 [ 300.645102][ T9352] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.651442][ T9352] ? do_syscall_64+0x100/0x230 [ 300.656236][ T9352] ? do_syscall_64+0xb6/0x230 [ 300.660921][ T9352] do_syscall_64+0xf3/0x230 [ 300.665432][ T9352] ? clear_bhb_loop+0x35/0x90 [ 300.670127][ T9352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.676053][ T9352] RIP: 0033:0x7f333c185d29 [ 300.680469][ T9352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.700079][ T9352] RSP: 002b:00007f333d020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.708503][ T9352] RAX: ffffffffffffffda RBX: 00007f333c375fa0 RCX: 00007f333c185d29 [ 300.716494][ T9352] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 300.724487][ T9352] RBP: 00007f333d020090 R08: 0000000000000000 R09: 0000000000000000 [ 300.732462][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.740436][ T9352] R13: 0000000000000000 R14: 00007f333c375fa0 R15: 00007ffe572f6338 [ 300.748441][ T9352] [ 300.843413][ T5828] Bluetooth: hci1: command tx timeout [ 301.062001][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.079824][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.120027][ T9318] bridge_slave_0: entered allmulticast mode [ 301.203911][ T9318] bridge_slave_0: entered promiscuous mode [ 301.309745][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.320273][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.329931][ T9368] /dev/nullb0: Can't open blockdev [ 301.341544][ T9318] bridge_slave_1: entered allmulticast mode [ 301.511569][ T57] usb 2-1: USB disconnect, device number 28 [ 301.512197][ T9318] bridge_slave_1: entered promiscuous mode [ 301.523214][ T9350] cdc_wdm 2-1:1.0: Error autopm - -16 [ 301.785939][ T9318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.797152][ T5828] Bluetooth: hci0: command tx timeout [ 301.833677][ T9318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.846587][ T57] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 301.941087][ T9318] team0: Port device team_slave_0 added [ 301.957183][ T5828] Bluetooth: hci3: command tx timeout [ 302.013692][ T57] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.039116][ T9318] team0: Port device team_slave_1 added [ 302.044798][ T57] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.054523][ T57] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.074387][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 302.076465][ T57] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.188714][ T57] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 302.284345][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.490147][ T9385] /dev/nullb0: Can't open blockdev [ 302.571995][ T57] hub 2-1:1.0: bad descriptor, ignoring hub [ 302.597636][ T57] hub 2-1:1.0: probe with driver hub failed with error -5 [ 302.615454][ T57] cdc_wdm 2-1:1.0: skipping garbage [ 302.623968][ T57] cdc_wdm 2-1:1.0: skipping garbage [ 302.653607][ T57] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 302.659923][ T57] cdc_wdm 2-1:1.0: Unknown control protocol [ 302.702190][ T57] usb 2-1: USB disconnect, device number 29 [ 302.819184][ T5967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.882436][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.916712][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.931224][ T5828] Bluetooth: hci1: command tx timeout [ 302.958604][ T9318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.422053][ T5967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.440588][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.448707][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.492578][ T9318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.509551][ T9343] chnl_net:caif_netlink_parms(): no params data found [ 303.539652][ T9400] mkiss: ax0: crc mode is auto. [ 303.610086][ T5967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.700112][ T5967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.040532][ T5828] Bluetooth: hci3: command tx timeout [ 304.223514][ T9318] hsr_slave_0: entered promiscuous mode [ 304.279039][ T9318] hsr_slave_1: entered promiscuous mode [ 304.455890][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.463277][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.470923][ T9353] bridge_slave_0: entered allmulticast mode [ 304.478254][ T9353] bridge_slave_0: entered promiscuous mode [ 304.607773][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.614946][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.622752][ T9353] bridge_slave_1: entered allmulticast mode [ 304.630139][ T9353] bridge_slave_1: entered promiscuous mode [ 304.691998][ T5967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.710373][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.719067][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.726881][ T9343] bridge_slave_0: entered allmulticast mode [ 304.733701][ T9343] bridge_slave_0: entered promiscuous mode [ 304.781454][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.789797][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.804241][ T9343] bridge_slave_1: entered allmulticast mode [ 304.812661][ T9343] bridge_slave_1: entered promiscuous mode [ 304.856955][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 304.887875][ T5967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.910333][ T9353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.925743][ T9353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.968314][ T9343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.002092][ T5828] Bluetooth: hci1: command tx timeout [ 305.026588][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 305.043161][ T5870] usb 2-1: config 255 has an invalid interface number: 122 but max is 0 [ 305.056886][ T5870] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 305.070328][ T5870] usb 2-1: config 255 has no interface number 0 [ 305.077342][ T5870] usb 2-1: config 255 interface 122 altsetting 68 endpoint 0x5 has invalid maxpacket 1022, setting to 64 [ 305.089181][ T5870] usb 2-1: config 255 interface 122 altsetting 68 has an invalid descriptor for endpoint zero, skipping [ 305.100692][ T5870] usb 2-1: config 255 interface 122 altsetting 68 bulk endpoint 0x8 has invalid maxpacket 32 [ 305.111845][ T5870] usb 2-1: config 255 interface 122 altsetting 68 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 305.124465][ T5870] usb 2-1: config 255 interface 122 altsetting 68 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 305.136298][ T5870] usb 2-1: config 255 interface 122 altsetting 68 endpoint 0x8A has invalid wMaxPacketSize 0 [ 305.148101][ T5870] usb 2-1: config 255 interface 122 has no altsetting 0 [ 305.176602][ T5967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.201369][ T5870] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=2d.9c [ 305.207894][ T9343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.216595][ T5870] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 305.260467][ T5870] usb 2-1: Product: syz [ 305.277482][ T5870] usb 2-1: Manufacturer: syz [ 305.279486][ T9353] team0: Port device team_slave_0 added [ 305.285166][ T5870] usb 2-1: SerialNumber: syz [ 305.312155][ T9353] team0: Port device team_slave_1 added [ 305.320375][ T9412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 305.354454][ T5967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.568118][ T5870] appletouch 2-1:255.122: Failed to read mode from device. [ 305.575517][ T5870] appletouch 2-1:255.122: probe with driver appletouch failed with error -5 [ 306.116626][ T5828] Bluetooth: hci3: command tx timeout [ 306.225259][ T9343] team0: Port device team_slave_0 added [ 306.244335][ T9343] team0: Port device team_slave_1 added [ 306.298997][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.328015][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.362992][ T9353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.418153][ T5870] usb 2-1: USB disconnect, device number 30 [ 306.488286][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.495640][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.525233][ T9353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.537442][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.544426][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.571708][ T9343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.584727][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.592063][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.636231][ T9343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.706628][ T5871] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 306.864163][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.890553][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.891463][ T9353] hsr_slave_0: entered promiscuous mode [ 306.914933][ T5871] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 306.915507][ T57] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 306.934731][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.957669][ T5871] usb 3-1: config 0 descriptor?? [ 306.958692][ T9353] hsr_slave_1: entered promiscuous mode [ 306.978653][ T9353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.993230][ T9353] Cannot create hsr debugfs directory [ 307.010044][ T9343] hsr_slave_0: entered promiscuous mode [ 307.017938][ T9343] hsr_slave_1: entered promiscuous mode [ 307.026524][ T9343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.034228][ T9343] Cannot create hsr debugfs directory [ 307.076815][ T5828] Bluetooth: hci1: command tx timeout [ 307.119233][ T57] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 307.137072][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.166332][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.195224][ T5967] bridge_slave_1: left allmulticast mode [ 307.197639][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.223691][ T5967] bridge_slave_1: left promiscuous mode [ 307.227453][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.235366][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.258031][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.271425][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.271762][ T5967] bridge_slave_0: left allmulticast mode [ 307.288212][ T5967] bridge_slave_0: left promiscuous mode [ 307.294063][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.304237][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.325478][ T5967] bridge_slave_1: left allmulticast mode [ 307.327443][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.351745][ T5967] bridge_slave_1: left promiscuous mode [ 307.354535][ T57] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 307.363849][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.377937][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.385398][ T5871] uclogic 0003:5543:0042.0006: collection stack underflow [ 307.390946][ T57] usb 2-1: config 0 descriptor?? [ 307.394055][ T5871] uclogic 0003:5543:0042.0006: item 0 4 0 12 parsing failed [ 307.407086][ T5871] uclogic 0003:5543:0042.0006: parse failed [ 307.410273][ T57] usb 2-1: bad CDC descriptors [ 307.413063][ T5871] uclogic 0003:5543:0042.0006: probe with driver uclogic failed with error -22 [ 307.431768][ T5967] bridge_slave_0: left allmulticast mode [ 307.438637][ T5967] bridge_slave_0: left promiscuous mode [ 307.444854][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.589835][ T5871] usb 3-1: USB disconnect, device number 44 [ 308.179112][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.190359][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.199971][ T5828] Bluetooth: hci3: command tx timeout [ 308.216001][ T5967] bond0 (unregistering): Released all slaves [ 308.491670][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.504251][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.515258][ T5967] bond0 (unregistering): Released all slaves [ 308.698964][ T57] usb 2-1: USB disconnect, device number 31 [ 308.778357][ T5904] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 308.949510][ T5904] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 308.992824][ T9318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.011712][ T5904] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 309.026519][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.045750][ T5904] usb 3-1: Product: syz [ 309.055021][ T5904] usb 3-1: Manufacturer: syz [ 309.062271][ T5904] usb 3-1: SerialNumber: syz [ 309.077825][ T5904] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 309.096132][ T5868] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 309.163551][ T9318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.189617][ T9318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.234780][ T9318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.578403][ T5967] hsr_slave_0: left promiscuous mode [ 309.595311][ T5967] hsr_slave_1: left promiscuous mode [ 309.766965][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.774705][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.809335][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.831029][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.871767][ T5967] hsr_slave_0: left promiscuous mode [ 309.936640][ T5967] hsr_slave_1: left promiscuous mode [ 309.957794][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.965494][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.986138][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.996632][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.193434][ T5967] veth1_macvtap: left promiscuous mode [ 310.199464][ T5868] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 310.209099][ T5967] veth0_macvtap: left promiscuous mode [ 310.215496][ T5967] veth1_vlan: left promiscuous mode [ 310.224742][ T5868] ath9k_htc: Failed to initialize the device [ 310.232224][ T5967] veth0_vlan: left promiscuous mode [ 310.445160][ T5868] usb 3-1: ath9k_htc: USB layer deinitialized [ 310.901171][ T5967] veth1_macvtap: left promiscuous mode [ 310.909782][ T5967] veth0_macvtap: left promiscuous mode [ 310.915566][ T5967] veth1_vlan: left promiscuous mode [ 310.945913][ T5967] veth0_vlan: left promiscuous mode [ 311.162190][ T5870] usb 3-1: USB disconnect, device number 45 [ 311.973538][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 312.072800][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 312.098156][ T9507] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 314.051308][ T57] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 314.234902][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 314.292583][ T57] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.303766][ T57] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 314.313494][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.326157][ T57] usb 3-1: config 0 descriptor?? [ 314.443794][ T9520] binder: BINDER_SET_CONTEXT_MGR already set [ 314.449979][ T9520] binder: 9517:9520 ioctl 4018620d 20000040 returned -16 [ 314.958187][ T57] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 315.547975][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 315.569348][ T57] gspca_vc032x: reg_w err -110 [ 315.574212][ T57] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 315.626353][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 316.172723][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 316.212954][ T5870] usb 3-1: USB disconnect, device number 46 [ 316.379261][ T9318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.436283][ T9318] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.495299][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.502497][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.549463][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.556633][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.573188][ T5828] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 316.724534][ T9534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.739659][ T9318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.791645][ T9353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.891093][ T9353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.914892][ T9353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.035770][ T9353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.268257][ T9353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.283797][ T9353] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.323201][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.330348][ T5885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.524959][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.598821][ T9549] /dev/nullb0: Can't open blockdev [ 317.651694][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.848794][ T9353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.888991][ T9353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.918581][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.925701][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.043557][ T9318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.128052][ T5900] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 318.194710][ T9318] veth0_vlan: entered promiscuous mode [ 318.279136][ T9318] veth1_vlan: entered promiscuous mode [ 318.307032][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 318.319515][ T5900] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 318.341934][ T5900] usb 3-1: config 0 has no interface number 0 [ 318.344236][ T9343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.367366][ T5900] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 318.381498][ T9343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.391058][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.405912][ T9343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.432883][ T5900] usb 3-1: Product: syz [ 318.459079][ T9343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.460725][ T5900] usb 3-1: Manufacturer: syz [ 318.472447][ T5900] usb 3-1: SerialNumber: syz [ 318.479573][ T5900] usb 3-1: config 0 descriptor?? [ 318.487664][ T5900] smsc95xx v2.0.0 [ 318.601185][ T9353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.617562][ T9318] veth0_macvtap: entered promiscuous mode [ 318.706257][ T5900] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 318.763454][ T9318] veth1_macvtap: entered promiscuous mode [ 318.790616][ T5900] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 318.884121][ T9343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.891885][ T5900] usb 3-1: USB disconnect, device number 47 [ 318.952352][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.011836][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.059742][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.096334][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.134636][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.209699][ T9343] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.235027][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.242271][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.260684][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.280987][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.313740][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.324657][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.338931][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.371696][ T9318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.385290][ T9318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.417025][ T9318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.425774][ T9318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.564990][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.572183][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.752126][ T9343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.787642][ T9343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.847594][ T9353] veth0_vlan: entered promiscuous mode [ 320.177646][ T9618] xt_limit: Overflow, try lower: 268435456/134217728 [ 320.351202][ T9353] veth1_vlan: entered promiscuous mode [ 320.375009][ T9613] netlink: 116 bytes leftover after parsing attributes in process `syz.1.506'. [ 320.519643][ T9353] veth0_macvtap: entered promiscuous mode [ 320.607554][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.615429][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.687716][ T9353] veth1_macvtap: entered promiscuous mode [ 320.703548][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.714204][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.724429][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.735490][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.745904][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.756816][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.769072][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.815530][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.820309][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.834720][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.847346][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.856748][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.858290][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.875547][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.931664][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.944823][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.985112][ T9343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.004590][ T9353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.035847][ T9353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.045557][ T9285] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 321.061590][ T9353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.070552][ T9353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.114110][ T9343] veth0_vlan: entered promiscuous mode [ 321.125299][ T9343] veth1_vlan: entered promiscuous mode [ 321.243871][ T9343] veth0_macvtap: entered promiscuous mode [ 321.256041][ T9285] usb 3-1: device descriptor read/64, error -71 [ 321.386839][ T9343] veth1_macvtap: entered promiscuous mode [ 321.402606][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.413452][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.423706][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.434451][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.444434][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.455047][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.465103][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.476062][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.487926][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.496556][ T9285] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 321.497670][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.514709][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.524965][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.535732][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.545962][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.557333][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.567339][ T9343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.577840][ T9343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.590609][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.632200][ T9343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.642128][ T9343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.651182][ T9343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.666289][ T9343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.677787][ T9285] usb 3-1: device descriptor read/64, error -71 [ 321.682791][ T9651] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 321.743976][ T5885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.786815][ T9285] usb usb3-port1: attempt power cycle [ 321.832661][ T5885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.851700][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.870643][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.939357][ T5885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.957375][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.969045][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.013336][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.032685][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.087885][ T5885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.126978][ T9285] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 322.160533][ T9285] usb 3-1: device descriptor read/8, error -71 [ 322.203751][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.227544][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.351462][ T5885] bridge_slave_1: left allmulticast mode [ 322.363170][ T5885] bridge_slave_1: left promiscuous mode [ 322.374110][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.409099][ T5885] bridge_slave_0: left allmulticast mode [ 322.409230][ T9285] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 322.414896][ T5885] bridge_slave_0: left promiscuous mode [ 322.434320][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.447909][ T9285] usb 3-1: device descriptor read/8, error -71 [ 322.557787][ T9285] usb usb3-port1: unable to enumerate USB device [ 323.093698][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.107150][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.149096][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.168372][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.194123][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.216060][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.431303][ T9679] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 323.452035][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.513'. [ 323.774491][ T5885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.791311][ T5885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.802657][ T5885] bond0 (unregistering): Released all slaves [ 324.697102][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.709207][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.729483][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.740108][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.748083][ T5825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 324.761146][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.811463][ T9705] netlink: 88 bytes leftover after parsing attributes in process `syz.1.514'. [ 324.853749][ T5885] hsr_slave_0: left promiscuous mode [ 324.860330][ T5885] hsr_slave_1: left promiscuous mode [ 324.866212][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.874420][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.882425][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.890147][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.910278][ T5885] veth1_macvtap: left promiscuous mode [ 324.915862][ T5885] veth0_macvtap: left promiscuous mode [ 324.921784][ T5885] veth1_vlan: left promiscuous mode [ 324.927491][ T5885] veth0_vlan: left promiscuous mode [ 325.319868][ T5828] Bluetooth: hci0: command tx timeout [ 325.404043][ T5885] team0 (unregistering): Port device team_slave_1 removed [ 325.522163][ T5885] team0 (unregistering): Port device team_slave_0 removed [ 325.918874][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.943415][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.963139][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.982896][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.995707][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 326.011402][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.784146][ T9672] chnl_net:caif_netlink_parms(): no params data found [ 326.846586][ T5825] Bluetooth: hci1: command tx timeout [ 327.309996][ T9759] macvlan1: entered promiscuous mode [ 327.399060][ T5825] Bluetooth: hci0: command tx timeout [ 327.750903][ T9758] macvlan1: left promiscuous mode [ 327.932539][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.005600][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.033077][ T9672] bridge_slave_0: entered allmulticast mode [ 328.048291][ T9672] bridge_slave_0: entered promiscuous mode [ 328.127830][ T5825] Bluetooth: hci3: command tx timeout [ 328.128306][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.210019][ T9672] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.229407][ T5870] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 328.236668][ T9672] bridge_slave_1: entered allmulticast mode [ 328.312541][ T9672] bridge_slave_1: entered promiscuous mode [ 328.443599][ T9781] /dev/nullb0: Can't open blockdev [ 328.502073][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 328.513098][ T5870] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 328.521596][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.546474][ T5870] usb 2-1: config 0 has no interface number 0 [ 328.558277][ T5870] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 328.569696][ T5870] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.583620][ T5870] usb 2-1: config 0 interface 52 has no altsetting 0 [ 328.592143][ T5870] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 328.599267][ T9672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.610560][ T5870] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 328.622377][ T5870] usb 2-1: Manufacturer: syz [ 328.648811][ T5870] usb 2-1: config 0 descriptor?? [ 328.733778][ T5967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.783919][ T9672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.813704][ T9714] chnl_net:caif_netlink_parms(): no params data found [ 328.916995][ T5825] Bluetooth: hci1: command tx timeout [ 328.922108][ T5870] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input12 [ 329.044211][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 329.278883][ T5967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.438927][ T5870] usb 2-1: USB disconnect, device number 32 [ 329.438982][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 329.477483][ T5825] Bluetooth: hci0: command tx timeout [ 329.589179][ T5967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.618759][ T9672] team0: Port device team_slave_0 added [ 329.699372][ T9672] team0: Port device team_slave_1 added [ 329.802518][ T5967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.944288][ T9672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.969577][ T9672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.003605][ T9672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.104074][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 330.161786][ T9672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.170728][ T9672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.207259][ T5825] Bluetooth: hci3: command tx timeout [ 330.212973][ T9672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.385043][ T9672] hsr_slave_0: entered promiscuous mode [ 330.401544][ T9672] hsr_slave_1: entered promiscuous mode [ 330.443485][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.455019][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.463461][ T9714] bridge_slave_0: entered allmulticast mode [ 330.475591][ T9714] bridge_slave_0: entered promiscuous mode [ 330.493981][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.504259][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.515787][ T9714] bridge_slave_1: entered allmulticast mode [ 330.526188][ T9714] bridge_slave_1: entered promiscuous mode [ 330.725255][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.813893][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.831350][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.843031][ T9732] bridge_slave_0: entered allmulticast mode [ 330.977946][ T9732] bridge_slave_0: entered promiscuous mode [ 331.017492][ T5825] Bluetooth: hci1: command tx timeout [ 331.032410][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.489493][ T5967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.607117][ T5825] Bluetooth: hci0: command tx timeout [ 331.959836][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.967443][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.974697][ T9732] bridge_slave_1: entered allmulticast mode [ 331.996681][ T9732] bridge_slave_1: entered promiscuous mode [ 332.286847][ T5825] Bluetooth: hci3: command tx timeout [ 332.301129][ T5967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.315336][ T9837] input: syz1 as /devices/virtual/input/input13 [ 332.392461][ T9714] team0: Port device team_slave_0 added [ 332.467468][ T5967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.489041][ T9714] team0: Port device team_slave_1 added [ 332.541309][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.560005][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.734279][ T5967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.825465][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.842576][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.887706][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.998119][ T9732] team0: Port device team_slave_0 added [ 333.038321][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.045327][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.084244][ T5825] Bluetooth: hci1: command tx timeout [ 333.090506][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.135535][ T9732] team0: Port device team_slave_1 added [ 333.392987][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.402114][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.436922][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.448818][ T9861] netlink: 276 bytes leftover after parsing attributes in process `syz.1.539'. [ 333.457768][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.464864][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.493475][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.659147][ T9714] hsr_slave_0: entered promiscuous mode [ 333.680973][ T9714] hsr_slave_1: entered promiscuous mode [ 333.688877][ T9714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.697278][ T9714] Cannot create hsr debugfs directory [ 333.946252][ T5967] bridge_slave_1: left allmulticast mode [ 333.962446][ T5967] bridge_slave_1: left promiscuous mode [ 333.971101][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.986115][ T5967] bridge_slave_0: left allmulticast mode [ 333.994791][ T5967] bridge_slave_0: left promiscuous mode [ 334.007197][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.017711][ T5967] bridge_slave_1: left allmulticast mode [ 334.023409][ T5967] bridge_slave_1: left promiscuous mode [ 334.036756][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.049798][ T5967] bridge_slave_0: left allmulticast mode [ 334.055495][ T5967] bridge_slave_0: left promiscuous mode [ 334.062919][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.126582][ T9285] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 334.343661][ T9285] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 334.352862][ T9285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.365734][ T5825] Bluetooth: hci3: command tx timeout [ 334.384859][ T9285] usb 2-1: config 0 has no interface number 0 [ 334.391135][ T9285] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 334.401717][ T9285] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.440487][ T9285] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 334.449627][ T9285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.458857][ T9285] usb 2-1: Product: syz [ 334.463058][ T9285] usb 2-1: Manufacturer: syz [ 334.469693][ T9285] usb 2-1: SerialNumber: syz [ 334.476250][ T9285] usb 2-1: config 0 descriptor?? [ 334.895830][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 334.923588][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.934799][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.945382][ T5967] bond0 (unregistering): Released all slaves [ 335.109107][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.121161][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.131222][ T5967] bond0 (unregistering): Released all slaves [ 335.151470][ T9732] hsr_slave_0: entered promiscuous mode [ 335.165594][ T9732] hsr_slave_1: entered promiscuous mode [ 335.192590][ T9732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.200721][ T9732] Cannot create hsr debugfs directory [ 335.281089][ T5871] usb 2-1: USB disconnect, device number 33 [ 335.545359][ T9672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 335.571955][ T9672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 335.649942][ T9672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 335.664183][ T9672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 335.842693][ T57] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 335.872145][ T5967] hsr_slave_0: left promiscuous mode [ 335.887575][ T5967] hsr_slave_1: left promiscuous mode [ 335.894096][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.903147][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.912765][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.921179][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.941670][ T5967] hsr_slave_0: left promiscuous mode [ 335.958887][ T5967] hsr_slave_1: left promiscuous mode [ 335.964839][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.972588][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.986576][ T57] usb 3-1: device descriptor read/64, error -71 [ 335.994232][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.006238][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.218409][ T5967] veth1_macvtap: left promiscuous mode [ 336.223951][ T5967] veth0_macvtap: left promiscuous mode [ 336.256609][ T5967] veth1_vlan: left promiscuous mode [ 336.273371][ T5967] veth0_vlan: left promiscuous mode [ 336.283914][ T5967] veth1_macvtap: left promiscuous mode [ 336.296799][ T5967] veth0_macvtap: left promiscuous mode [ 336.310426][ T5967] veth1_vlan: left promiscuous mode [ 336.316098][ T5967] veth0_vlan: left promiscuous mode [ 336.356610][ T57] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 336.506769][ T57] usb 3-1: device descriptor read/64, error -71 [ 336.616955][ T57] usb usb3-port1: attempt power cycle [ 336.986683][ T57] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 337.008461][ T57] usb 3-1: device descriptor read/8, error -71 [ 337.107816][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 337.158812][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 337.263378][ T57] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 337.298443][ T57] usb 3-1: device descriptor read/8, error -71 [ 337.416900][ T57] usb usb3-port1: unable to enumerate USB device [ 338.032689][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 338.087874][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 338.666480][ T9672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.683310][ T9672] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.770661][ T9672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.781219][ T9672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.801132][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.808300][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.822618][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.829750][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.951103][ T9714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.974860][ T9714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.093097][ T9714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.155855][ T9672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.180736][ T9714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.455433][ T9672] veth0_vlan: entered promiscuous mode [ 339.543376][ T9672] veth1_vlan: entered promiscuous mode [ 339.581708][ T5828] block nbd1: Receive control failed (result -32) [ 339.582455][ T5825] block nbd1: Receive control failed (result -32) [ 339.591916][ T9896] block nbd1: shutting down sockets [ 339.621508][ T9908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.549'. [ 339.691947][ T9672] veth0_macvtap: entered promiscuous mode [ 339.765088][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.784593][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.811235][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.818390][ T5885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.837548][ T9672] veth1_macvtap: entered promiscuous mode [ 339.897997][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.905146][ T5885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.981838][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.992856][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.003109][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.013737][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.024906][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.073995][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.093810][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.104606][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.115380][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.128263][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.156159][ T9732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.182167][ T9732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.214026][ T9672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.234755][ T9672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.244497][ T9672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.254404][ T9672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.293074][ T9732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.320091][ T9732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.338835][ T9914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'. [ 340.590833][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.610273][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.652057][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.710387][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.734035][ T9921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.737882][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.750386][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.778303][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.790112][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.801994][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.809180][ T5885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.836057][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.843455][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.127714][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.152927][ T9714] veth0_vlan: entered promiscuous mode [ 343.292457][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.384731][ T9714] veth1_vlan: entered promiscuous mode [ 343.681699][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.386155][ T9714] veth0_macvtap: entered promiscuous mode [ 344.433868][ T29] audit: type=1326 audit(1735695609.581:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.1.558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dbaf85d29 code=0x0 [ 344.455280][ T9732] veth0_vlan: entered promiscuous mode [ 344.466253][ T9732] veth1_vlan: entered promiscuous mode [ 344.485830][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.506772][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.527654][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.535569][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.544394][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.555890][ T5828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.563539][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.576292][ T9714] veth1_macvtap: entered promiscuous mode [ 344.640570][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.667124][ T57] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 344.703810][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.728808][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.740611][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.752069][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.762905][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.773804][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.785159][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.800498][ T9732] veth0_macvtap: entered promiscuous mode [ 344.819300][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 344.820058][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.839885][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.848244][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.861532][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.873026][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.878722][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.889293][ T57] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 344.902036][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.902058][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.903062][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.929355][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.948347][ T57] usb 3-1: config 0 descriptor?? [ 344.966811][ T9714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.975545][ T9714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.985402][ T9714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.994556][ T9714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.030715][ T9732] veth1_macvtap: entered promiscuous mode [ 345.188171][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.204543][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.222736][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.233838][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.251449][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.263224][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.273544][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.284730][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.316262][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.380871][ T57] kye 0003:0458:5017.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 345.418549][ T57] kye 0003:0458:5017.0007: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 345.434254][ T57] kye 0003:0458:5017.0007: tablet-enabling feature report not found [ 345.454679][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.465620][ T57] kye 0003:0458:5017.0007: tablet enabling failed [ 345.486033][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.506284][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.526534][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.546312][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.568156][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.588522][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.612005][T10003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 345.616432][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.644433][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.674958][ T51] bridge_slave_1: left allmulticast mode [ 345.693065][ T51] bridge_slave_1: left promiscuous mode [ 345.708266][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.735772][ T51] bridge_slave_0: left allmulticast mode [ 345.742675][ T51] bridge_slave_0: left promiscuous mode [ 345.753821][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.779846][T10003] kvm: pic: level sensitive irq not supported [ 345.780398][T10003] kvm: pic: non byte read [ 346.501084][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.522867][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.551810][ T51] bond0 (unregistering): Released all slaves [ 346.599952][ T9732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.634324][ T9732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.677735][ T5828] Bluetooth: hci0: command tx timeout [ 346.686545][ T9732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.695507][ T9732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.366559][ T57] usb 3-1: USB disconnect, device number 56 [ 347.569812][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.588097][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.667076][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.674991][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.686569][ T9970] chnl_net:caif_netlink_parms(): no params data found [ 347.998143][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.025511][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.072691][ T51] hsr_slave_0: left promiscuous mode [ 348.083312][ T51] hsr_slave_1: left promiscuous mode [ 348.092702][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.100593][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.111236][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.118882][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.143683][ T51] veth1_macvtap: left promiscuous mode [ 348.149431][ T51] veth0_macvtap: left promiscuous mode [ 348.155046][ T51] veth1_vlan: left promiscuous mode [ 348.170234][ T51] veth0_vlan: left promiscuous mode [ 348.462363][T10051] fuse: Bad value for 'fd' [ 348.766085][ T5828] Bluetooth: hci0: command tx timeout [ 348.892684][ T51] team0 (unregistering): Port device team_slave_1 removed [ 349.002364][ T51] team0 (unregistering): Port device team_slave_0 removed [ 349.593362][T10036] hsr0: entered promiscuous mode [ 349.600323][T10036] vlan3: entered promiscuous mode [ 349.605531][T10036] vlan3: entered allmulticast mode [ 349.611912][T10036] hsr0: entered allmulticast mode [ 349.617165][T10036] hsr_slave_0: entered allmulticast mode [ 349.622824][T10036] hsr_slave_1: entered allmulticast mode [ 349.632217][T10036] hsr0: left allmulticast mode [ 349.637594][T10036] hsr_slave_0: left allmulticast mode [ 349.643001][T10036] hsr_slave_1: left allmulticast mode [ 349.690847][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.698177][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.705571][ T9970] bridge_slave_0: entered allmulticast mode [ 349.736628][ T9970] bridge_slave_0: entered promiscuous mode [ 349.764379][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.785296][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.806740][ T9970] bridge_slave_1: entered allmulticast mode [ 349.818773][ T9970] bridge_slave_1: entered promiscuous mode [ 350.038300][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.081094][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.960634][ T5828] Bluetooth: hci0: command tx timeout [ 351.089582][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.104409][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.362161][ T9970] team0: Port device team_slave_0 added [ 351.393234][ T9970] team0: Port device team_slave_1 added [ 351.904260][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.991262][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.147920][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.847890][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.910309][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.048837][ T5828] Bluetooth: hci0: command tx timeout [ 353.088748][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.157156][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.171342][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.186529][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.209837][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.226710][ T5825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.236795][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.324727][ T9970] hsr_slave_0: entered promiscuous mode [ 353.346151][ T9970] hsr_slave_1: entered promiscuous mode [ 353.431466][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.540902][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.638270][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.705108][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.985828][T10081] chnl_net:caif_netlink_parms(): no params data found [ 354.064374][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.157959][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.172532][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.181260][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.188909][T10081] bridge_slave_0: entered allmulticast mode [ 354.195820][T10081] bridge_slave_0: entered promiscuous mode [ 354.215326][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.223717][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.231082][T10081] bridge_slave_1: entered allmulticast mode [ 354.238375][T10081] bridge_slave_1: entered promiscuous mode [ 354.262373][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.309971][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.351008][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.372530][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.404095][T10081] team0: Port device team_slave_0 added [ 354.433854][T10081] team0: Port device team_slave_1 added [ 354.491970][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.517063][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.544659][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.565424][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.577314][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.604976][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.655036][ T9970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.747488][T10081] hsr_slave_0: entered promiscuous mode [ 354.922155][T10081] hsr_slave_1: entered promiscuous mode [ 354.943005][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.956183][T10081] Cannot create hsr debugfs directory [ 354.984789][ T9970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.329219][ T5825] Bluetooth: hci1: command tx timeout [ 355.553501][ T9970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.581208][ T51] bridge_slave_1: left allmulticast mode [ 355.600283][ T51] bridge_slave_1: left promiscuous mode [ 355.617264][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.998403][ T51] bridge_slave_0: left allmulticast mode [ 356.004100][ T51] bridge_slave_0: left promiscuous mode [ 356.037046][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.095035][ T51] bridge_slave_1: left allmulticast mode [ 356.127313][ T51] bridge_slave_1: left promiscuous mode [ 356.133099][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.195892][ T51] bridge_slave_0: left allmulticast mode [ 356.213146][ T51] bridge_slave_0: left promiscuous mode [ 356.225724][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.312316][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.321832][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.333543][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.342778][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.357509][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.364977][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.806570][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 356.974158][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.980966][ T25] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 356.993477][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.002130][ T25] usb 2-1: Product: syz [ 357.002471][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.006483][ T25] usb 2-1: Manufacturer: syz [ 357.023205][ T25] usb 2-1: SerialNumber: syz [ 357.024383][ T51] bond0 (unregistering): Released all slaves [ 357.044870][ T25] usb 2-1: config 0 descriptor?? [ 357.175644][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.187319][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.198574][ T51] bond0 (unregistering): Released all slaves [ 357.285295][ T8] usb 2-1: USB disconnect, device number 34 [ 357.397225][ T5828] Bluetooth: hci1: command tx timeout [ 357.412859][ T9970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.519490][T10125] netlink: 9 bytes leftover after parsing attributes in process `syz.2.571'. [ 357.529269][T10125] 0·: renamed from hsr0 (while UP) [ 357.567442][T10125] 0·: left promiscuous mode [ 357.572527][T10125] 0·: entered promiscuous mode [ 357.591388][T10125] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 358.438392][ T5828] Bluetooth: hci3: command tx timeout [ 359.530541][ T5828] Bluetooth: hci1: command tx timeout [ 359.553407][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 360.067632][ T5904] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 360.092263][ T51] hsr_slave_0: left promiscuous mode [ 360.098635][ T51] hsr_slave_1: left promiscuous mode [ 360.104680][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.113442][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.130807][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.141898][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.177020][ T51] hsr_slave_0: left promiscuous mode [ 360.205229][ T51] hsr_slave_1: left promiscuous mode [ 360.216313][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.226819][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 360.235407][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.243925][ T5904] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 360.253846][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.261647][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.266708][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.275572][ T5904] usb 3-1: config 0 descriptor?? [ 360.311316][ T51] veth1_macvtap: left promiscuous mode [ 360.318082][ T51] veth0_macvtap: left promiscuous mode [ 360.323684][ T51] veth1_vlan: left promiscuous mode [ 360.329830][ T51] veth0_vlan: left promiscuous mode [ 360.336211][ T51] veth1_macvtap: left promiscuous mode [ 360.342015][ T51] veth0_macvtap: left promiscuous mode [ 360.347719][ T51] veth1_vlan: left promiscuous mode [ 360.353008][ T51] veth0_vlan: left promiscuous mode [ 360.456512][ T5900] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 360.516546][ T5828] Bluetooth: hci3: command tx timeout [ 360.606650][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 360.618955][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.635175][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.654105][ T5900] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 360.663924][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.689119][ T5900] usb 2-1: config 0 descriptor?? [ 361.084878][ T51] team0 (unregistering): Port device team_slave_1 removed [ 361.141839][ T51] team0 (unregistering): Port device team_slave_0 removed [ 361.395509][ T5900] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 361.564296][ T5828] Bluetooth: hci1: command tx timeout [ 361.592602][ T5900] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 361.608691][ T5900] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -5 [ 361.978392][ T5904] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 361.990328][ T5904] asix 3-1:0.0: probe with driver asix failed with error -71 [ 362.011086][ T5904] usb 3-1: USB disconnect, device number 57 [ 362.657636][ T5828] Bluetooth: hci3: command tx timeout [ 363.260770][ T51] team0 (unregistering): Port device team_slave_1 removed [ 363.346311][ T51] team0 (unregistering): Port device team_slave_0 removed [ 364.065825][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.091810][ T5900] usb 2-1: USB disconnect, device number 35 [ 364.168188][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.221144][T10119] chnl_net:caif_netlink_parms(): no params data found [ 364.237611][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.244783][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.255962][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.263145][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.334485][T10204] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 364.594974][T10119] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.617869][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.655230][T10119] bridge_slave_0: entered allmulticast mode [ 364.684412][ T5828] Bluetooth: hci3: command tx timeout [ 364.691144][T10119] bridge_slave_0: entered promiscuous mode [ 364.748432][T10119] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.757997][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.786712][T10119] bridge_slave_1: entered allmulticast mode [ 364.797581][T10119] bridge_slave_1: entered promiscuous mode [ 364.865943][T10119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.879032][T10081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.891513][T10119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.942267][T10081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.979156][T10119] team0: Port device team_slave_0 added [ 364.993129][T10119] team0: Port device team_slave_1 added [ 365.021186][T10081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.035234][T10081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.100203][T10119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.112448][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.145040][T10119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.177013][T10119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.185350][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.218421][T10119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.243169][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.324097][T10119] hsr_slave_0: entered promiscuous mode [ 365.346182][T10119] hsr_slave_1: entered promiscuous mode [ 365.368717][T10119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.396752][T10119] Cannot create hsr debugfs directory [ 365.413019][T10239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.677568][ T9970] veth0_vlan: entered promiscuous mode [ 365.763212][ T9970] veth1_vlan: entered promiscuous mode [ 365.905989][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.012385][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.025632][ T9970] veth0_macvtap: entered promiscuous mode [ 366.059126][ T9970] veth1_macvtap: entered promiscuous mode [ 366.070736][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.077929][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.142552][T10260] Bluetooth: MGMT ver 1.23 [ 366.794716][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.801901][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.819895][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.836504][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.856491][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.870080][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.881311][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.902862][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.922290][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.932517][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.943555][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.954301][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.142675][T10263] /dev/nullb0: Can't open blockdev [ 367.177939][ T9970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.187136][ T9970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.195975][ T9970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.207353][ T9970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.252946][T10081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.907049][ T29] audit: type=1326 audit(1735695633.051:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10275 comm="syz.2.593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f333c185d29 code=0x0 [ 367.987491][T10283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.047712][T10119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.082056][T10119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 368.115344][T10119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.154092][T10119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.192325][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.221264][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.308759][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.323971][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.349865][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.543297][T10119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.647985][T10119] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.694318][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.701514][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.776649][T10300] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 368.878459][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.885621][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.045120][ T73] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.099758][T10119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.196788][ T73] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.448226][ T73] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.522093][T10081] veth0_vlan: entered promiscuous mode [ 369.599089][ T73] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.633098][T10081] veth1_vlan: entered promiscuous mode [ 369.651239][T10119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.808986][T10081] veth0_macvtap: entered promiscuous mode [ 369.826711][ T73] bridge_slave_1: left allmulticast mode [ 369.832403][ T73] bridge_slave_1: left promiscuous mode [ 369.843709][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.855899][ T73] bridge_slave_0: left allmulticast mode [ 369.877517][ T73] bridge_slave_0: left promiscuous mode [ 369.883276][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.223985][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.265308][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.292868][ T73] bond0 (unregistering): Released all slaves [ 370.338876][T10081] veth1_macvtap: entered promiscuous mode [ 370.392513][T10317] netlink: 'syz.2.599': attribute type 39 has an invalid length. [ 370.506868][ T29] audit: type=1326 audit(1735695635.661:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10316 comm="syz.2.599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f333c185d29 code=0x0 [ 370.554591][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.617359][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.652029][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.664390][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 370.680551][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.695602][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.713300][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.724899][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.755526][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.764268][T10119] veth0_vlan: entered promiscuous mode [ 370.784693][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.794147][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.810740][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.820611][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 370.843597][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.919354][T10119] veth1_vlan: entered promiscuous mode [ 371.004045][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.034793][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.060921][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.096441][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.116555][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.136510][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.157792][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.186785][ T1220] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 371.252627][T10081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.262548][T10081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.272835][T10081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.288410][T10081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.340677][ T73] hsr_slave_0: left promiscuous mode [ 371.354752][ T73] hsr_slave_1: left promiscuous mode [ 371.366319][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.369479][ T1220] usb 2-1: Using ep0 maxpacket: 32 [ 371.375582][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.392728][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.397917][ T1220] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 371.407943][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.412229][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 371.425682][ T1220] usb 2-1: Product: syz [ 371.430032][ T1220] usb 2-1: Manufacturer: syz [ 371.434671][ T1220] usb 2-1: SerialNumber: syz [ 371.449381][ T73] veth1_macvtap: left promiscuous mode [ 371.451118][ T1220] usb 2-1: config 0 descriptor?? [ 371.456032][ T73] veth0_macvtap: left promiscuous mode [ 371.468801][ T73] veth1_vlan: left promiscuous mode [ 371.471942][ T1220] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 371.474199][ T73] veth0_vlan: left promiscuous mode [ 371.483924][ T1220] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 371.692154][T10334] 9pnet_fd: Insufficient options for proto=fd [ 372.033875][ T73] team0 (unregistering): Port device team_slave_1 removed [ 372.087025][ T73] team0 (unregistering): Port device team_slave_0 removed [ 372.730537][T10119] veth0_macvtap: entered promiscuous mode [ 372.741635][T10119] veth1_macvtap: entered promiscuous mode [ 372.781035][ T798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.806999][ T798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.917502][ T5828] Bluetooth: hci0: command tx timeout [ 372.965781][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.002612][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.039194][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.069593][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.100250][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.111385][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.145326][T10119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.210885][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.214594][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.232282][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.265784][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.291519][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.306256][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.321837][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.332814][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.345280][T10119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.372295][T10331] chnl_net:caif_netlink_parms(): no params data found [ 373.436007][T10119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.462261][T10119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.501250][T10119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.547839][T10119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.931941][T10370] /dev/nullb0: Can't open blockdev [ 374.001493][T10331] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.034411][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.069441][ T5904] usb 2-1: USB disconnect, device number 36 [ 374.076034][T10331] bridge_slave_0: entered allmulticast mode [ 374.114724][T10331] bridge_slave_0: entered promiscuous mode [ 374.210891][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.262172][T10331] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.287309][T10331] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.295922][T10331] bridge_slave_1: entered allmulticast mode [ 374.303916][T10331] bridge_slave_1: entered promiscuous mode [ 374.359838][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.378041][T10331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.390911][T10331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.406258][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.422459][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.452405][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.490219][T10331] team0: Port device team_slave_0 added [ 374.523588][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.552668][T10331] team0: Port device team_slave_1 added [ 374.578100][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.591587][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.623528][T10331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.631223][T10331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.665774][T10331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.696152][T10331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.725081][T10331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.752166][T10331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.933065][ T11] bridge_slave_1: left allmulticast mode [ 374.939710][ T11] bridge_slave_1: left promiscuous mode [ 374.945471][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.961427][ T11] bridge_slave_0: left allmulticast mode [ 374.969902][ T11] bridge_slave_0: left promiscuous mode [ 374.975690][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.996978][ T5828] Bluetooth: hci0: command tx timeout [ 375.558629][T10396] fuse: Unknown parameter 'ÓŠë²ý3‡èà^b°.Žò„ó 3' [ 376.214238][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.232994][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.250214][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.260589][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.272969][ T5825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 376.282547][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.432803][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.449707][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.461427][ T11] bond0 (unregistering): Released all slaves [ 376.473917][T10331] hsr_slave_0: entered promiscuous mode [ 376.481862][T10331] hsr_slave_1: entered promiscuous mode [ 377.078605][ T5828] Bluetooth: hci0: command tx timeout [ 377.339456][ T11] hsr_slave_0: left promiscuous mode [ 377.355923][ T11] hsr_slave_1: left promiscuous mode [ 377.414296][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.479954][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.537343][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.594515][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.683515][ T11] veth1_macvtap: left promiscuous mode [ 377.702489][ T11] veth0_macvtap: left promiscuous mode [ 377.724001][ T11] veth1_vlan: left promiscuous mode [ 377.729516][ T11] veth0_vlan: left promiscuous mode [ 377.746665][ T9285] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 377.833854][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.844687][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.853388][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.861743][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.869423][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 377.878074][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.907082][ T9285] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 377.916161][ T9285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.961921][ T9285] usb 2-1: config 0 descriptor?? [ 377.980893][ T9285] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 378.366702][ T5825] Bluetooth: hci1: command tx timeout [ 378.969387][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.976106][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.018676][ T9285] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -110 [ 379.027605][ T9285] pac7311 2-1:0.0: probe with driver pac7311 failed with error -110 [ 379.158649][ T5825] Bluetooth: hci0: command tx timeout [ 379.701414][ T11] team0 (unregistering): Port device team_slave_1 removed [ 379.753714][ T11] team0 (unregistering): Port device team_slave_0 removed [ 379.970731][ T5825] Bluetooth: hci3: command tx timeout [ 380.437245][ T5825] Bluetooth: hci1: command tx timeout [ 380.603572][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 380.710923][ T9285] usb 2-1: USB disconnect, device number 37 [ 380.795820][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 381.055845][T10446] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 381.064837][T10446] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 381.069715][T10417] chnl_net:caif_netlink_parms(): no params data found [ 381.592138][T10397] chnl_net:caif_netlink_parms(): no params data found [ 381.785303][T10417] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.806132][T10417] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.828226][T10417] bridge_slave_0: entered allmulticast mode [ 381.839431][T10417] bridge_slave_0: entered promiscuous mode [ 381.849179][T10417] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.858090][T10417] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.878911][T10417] bridge_slave_1: entered allmulticast mode [ 381.904181][T10417] bridge_slave_1: entered promiscuous mode [ 382.039108][ T5825] Bluetooth: hci3: command tx timeout [ 382.206919][ T5868] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 382.209534][T10417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.233990][T10417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.385285][ T5868] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 382.399097][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.416949][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.427326][ T5868] usb 3-1: config 0 descriptor?? [ 382.442317][ T5868] cp210x 3-1:0.0: cp210x converter detected [ 382.516686][ T5825] Bluetooth: hci1: command tx timeout [ 382.564443][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.574728][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.603188][T10397] bridge_slave_0: entered allmulticast mode [ 487.606395][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 487.613441][ C0] rcu: 1-...!: (1 GPs behind) idle=2c9c/1/0x4000000000000000 softirq=65565/65566 fqs=1 [ 487.624625][ C0] rcu: (detected by 0, t=10502 jiffies, g=60081, q=144 ncpus=2) [ 487.632379][ C0] Sending NMI from CPU 0 to CPUs 1: [ 487.632414][ C1] NMI backtrace for cpu 1 [ 487.632434][ C1] CPU: 1 UID: 0 PID: 10488 Comm: dhcpcd-run-hook Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 487.632452][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 487.632465][ C1] RIP: 0010:lock_is_held_type+0x126/0x190 [ 487.632493][ C1] Code: e8 7f 1a 00 00 b8 ff ff ff ff 65 0f c1 05 e2 bb 41 74 83 f8 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <75> 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 48 [ 487.632506][ C1] RSP: 0018:ffffc90000a18c28 EFLAGS: 00000046 [ 487.632520][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff88801cb2bc00 [ 487.632531][ C1] RDX: ffff88801cb2bc00 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5edd60 [ 487.632544][ C1] RBP: 0000000000000003 R08: ffffffff89c5d371 R09: fffff5200014317c [ 487.632555][ C1] R10: dffffc0000000000 R11: fffff5200014317c R12: 0000000000000046 [ 487.632567][ C1] R13: ffff88801cb2bc00 R14: 00000000ffffffff R15: ffff88805d3c8300 [ 487.632578][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 487.632592][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.632603][ C1] CR2: 00007f1b9fa20420 CR3: 000000005d00e000 CR4: 00000000003526f0 [ 487.632618][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 487.632627][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 487.632637][ C1] Call Trace: [ 487.632645][ C1] [ 487.632654][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 487.632694][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 487.632733][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 487.632765][ C1] ? nmi_handle+0x2a/0x5a0 [ 487.632788][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 487.632807][ C1] ? nmi_handle+0x14f/0x5a0 [ 487.632822][ C1] ? nmi_handle+0x2a/0x5a0 [ 487.632839][ C1] ? lock_is_held_type+0x126/0x190 [ 487.632857][ C1] ? default_do_nmi+0x63/0x160 [ 487.632872][ C1] ? exc_nmi+0x123/0x1f0 [ 487.632888][ C1] ? end_repeat_nmi+0xf/0x53 [ 487.632904][ C1] ? advance_sched+0x131/0xca0 [ 487.632923][ C1] ? lock_is_held_type+0x126/0x190 [ 487.632942][ C1] ? lock_is_held_type+0x126/0x190 [ 487.632960][ C1] ? lock_is_held_type+0x126/0x190 [ 487.632978][ C1] [ 487.632984][ C1] [ 487.632990][ C1] ? __pfx_advance_sched+0x10/0x10 [ 487.633012][ C1] advance_sched+0x148/0xca0 [ 487.633030][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 487.633048][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.633069][ C1] ? __pfx_advance_sched+0x10/0x10 [ 487.633085][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 487.633112][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 487.633129][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 487.633150][ C1] ? rcu_is_watching+0x15/0xb0 [ 487.633169][ C1] hrtimer_interrupt+0x403/0xa40 [ 487.633198][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 487.633217][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 487.633235][ C1] [ 487.633240][ C1] [ 487.633246][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.633267][ C1] RIP: 0010:unmap_page_range+0x913/0x4040 [ 487.633288][ C1] Code: 31 ff e8 30 7e b6 ff 48 83 e3 9f 0f 84 04 2a 00 00 48 8b 5c 24 70 48 89 d8 48 c1 e8 03 48 89 84 24 f0 00 00 00 42 80 3c 20 00 <4c> 8d b4 24 80 02 00 00 74 08 48 89 df e8 db 55 1a 00 48 8b 03 48 [ 487.633301][ C1] RSP: 0018:ffffc90003baf1a0 EFLAGS: 00000246 [ 487.633314][ C1] RAX: 1ffff92000775ee0 RBX: ffffc90003baf700 RCX: ffff88801cb2bc00 [ 487.633326][ C1] RDX: 0000000000000000 RSI: 0000000030d49007 RDI: 0000000000000000 [ 487.633336][ C1] RBP: ffffc90003baf4d0 R08: ffffffff81e8fa40 R09: 0000000000000000 [ 487.633347][ C1] R10: 0000000000000002 R11: ffff88801cb2bc00 R12: dffffc0000000000 [ 487.633358][ C1] R13: ffff888030d4c700 R14: 0000000000000000 R15: 1ffff110061a98fc [ 487.633372][ C1] ? unmap_page_range+0x8f0/0x4040 [ 487.633403][ C1] ? __pfx_validate_chain+0x10/0x10 [ 487.633430][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 487.633453][ C1] ? mas_next_slot+0xdc6/0xea0 [ 487.633478][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 487.633501][ C1] unmap_vmas+0x3cc/0x5f0 [ 487.633523][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 487.633551][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 487.633572][ C1] exit_mmap+0x275/0xc20 [ 487.633591][ C1] ? mark_lock+0x9a/0x360 [ 487.633607][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 487.633629][ C1] ? __pfx_exit_aio+0x10/0x10 [ 487.633651][ C1] ? uprobe_clear_state+0x271/0x290 [ 487.633666][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 487.633681][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 487.633702][ C1] __mmput+0x115/0x3b0 [ 487.633721][ C1] exec_mmap+0x779/0x860 [ 487.633743][ C1] ? __pfx_exec_mmap+0x10/0x10 [ 487.633760][ C1] ? rcu_is_watching+0x15/0xb0 [ 487.633779][ C1] begin_new_exec+0x1285/0x1f90 [ 487.633798][ C1] ? load_elf_phdrs+0x1d9/0x260 [ 487.633816][ C1] ? __pfx_load_elf_phdrs+0x10/0x10 [ 487.633834][ C1] ? rw_verify_area+0x568/0x6f0 [ 487.633854][ C1] load_elf_binary+0x95b/0x2770 [ 487.633882][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 487.633897][ C1] ? bprm_execve+0xace/0x17a0 [ 487.633916][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 487.633933][ C1] ? _raw_read_unlock+0x28/0x50 [ 487.633949][ C1] ? load_misc_binary+0x6e5/0xc10 [ 487.633972][ C1] bprm_execve+0xaf5/0x17a0 [ 487.633989][ C1] ? __pfx_lock_release+0x10/0x10 [ 487.634016][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 487.634033][ C1] ? put_arg_page+0xe0/0x260 [ 487.634055][ C1] do_execveat_common+0x55f/0x6f0 [ 487.634077][ C1] __x64_sys_execve+0x92/0xb0 [ 487.634095][ C1] do_syscall_64+0xf3/0x230 [ 487.634114][ C1] ? clear_bhb_loop+0x35/0x90 [ 487.634129][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.634147][ C1] RIP: 0033:0x7f1b9f9b7ef7 [ 487.634168][ C1] Code: Unable to access opcode bytes at 0x7f1b9f9b7ecd. [ 487.634175][ C1] RSP: 002b:00007fff8ad132a8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 487.634191][ C1] RAX: ffffffffffffffda RBX: 000055bdf7e21ec0 RCX: 00007f1b9f9b7ef7 [ 487.634202][ C1] RDX: 000055bdf7e21f08 RSI: 000055bdf7e21ec0 RDI: 000055bdf7e21f98 [ 487.634214][ C1] RBP: 000055bdf7e21f98 R08: 000055bdf7e21f9d R09: 00007fff8ad18ead [ 487.634225][ C1] R10: 00007f1b9fbb6088 R11: 0000000000000246 R12: 000055bdf7e21f08 [ 487.634236][ C1] R13: 00007f1b9fb65904 R14: 000055bdf7e21f08 R15: 0000000000000000 [ 487.634254][ C1] [ 487.634407][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g60081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 488.266230][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 488.276207][ C0] rcu: RCU grace-period kthread stack dump: [ 488.282096][ C0] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 488.293867][ C0] Call Trace: [ 488.297154][ C0] [ 488.300102][ C0] __schedule+0x17fb/0x4be0 [ 488.304649][ C0] ? __pfx___schedule+0x10/0x10 [ 488.309513][ C0] ? __pfx_lock_release+0x10/0x10 [ 488.314558][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 488.320896][ C0] ? schedule+0x90/0x320 [ 488.325150][ C0] schedule+0x14b/0x320 [ 488.329321][ C0] schedule_timeout+0x15a/0x290 [ 488.334183][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 488.339565][ C0] ? __pfx_process_timeout+0x10/0x10 [ 488.344869][ C0] ? prepare_to_swait_event+0x330/0x350 [ 488.350429][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 488.355290][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 488.360514][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 488.366421][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 488.371716][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 488.377626][ C0] ? finish_swait+0xd4/0x1e0 [ 488.382231][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 488.386833][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 488.392040][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 488.397949][ C0] ? __kthread_parkme+0x169/0x1d0 [ 488.402997][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 488.408206][ C0] kthread+0x2f0/0x390 [ 488.412286][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 488.417495][ C0] ? __pfx_kthread+0x10/0x10 [ 488.422097][ C0] ret_from_fork+0x4b/0x80 [ 488.426522][ C0] ? __pfx_kthread+0x10/0x10 [ 488.431121][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.435912][ C0] [ 488.438943][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 488.445276][ C0] CPU: 0 UID: 0 PID: 798 Comm: kworker/u8:5 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 488.456041][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 488.466125][ C0] Workqueue: events_unbound toggle_allocation_gate [ 488.472666][ C0] RIP: 0010:smp_call_function_many_cond+0x19f8/0x2c60 [ 488.479455][ C0] Code: 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 0b 00 eb e4 44 [ 488.499181][ C0] RSP: 0018:ffffc900034976e0 EFLAGS: 00000293 [ 488.505290][ C0] RAX: 0000000000000000 RBX: 1ffff110170e88b9 RCX: ffff888024f55a00 [ 488.513277][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 488.521262][ C0] RBP: ffffc900034978e0 R08: ffffffff81938e7a R09: 1ffffffff284e310 [ 488.529243][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 488.537224][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 488.545209][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 488.554150][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.560743][ C0] CR2: 00007f1dbbd6df98 CR3: 000000000e736000 CR4: 00000000003526f0 [ 488.568725][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 488.576704][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 488.584686][ C0] Call Trace: [ 488.587973][ C0] [ 488.590828][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 488.597181][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 488.602837][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 488.608664][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 488.614928][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 488.620317][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 488.625969][ C0] ? update_process_times+0x242/0x2f0 [ 488.631350][ C0] ? tick_nohz_handler+0x37c/0x500 [ 488.636480][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 488.641955][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 488.647362][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 488.653093][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 488.658050][ C0] ? read_tsc+0x9/0x20 [ 488.662129][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 488.668210][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 488.673359][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 488.679549][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 488.685386][ C0] [ 488.688333][ C0] [ 488.691277][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 488.697455][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 488.703628][ C0] ? smp_call_function_many_cond+0x19f8/0x2c60 [ 488.709809][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 488.714852][ C0] ? __pfx___text_poke+0x10/0x10 [ 488.719796][ C0] ? process_scheduled_works+0x976/0x1840 [ 488.725533][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 488.731871][ C0] ? __pfx___might_resched+0x10/0x10 [ 488.737177][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 488.743088][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 488.748126][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 488.753258][ C0] text_poke_bp_batch+0x352/0xb30 [ 488.758296][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 488.764287][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 488.770453][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 488.776017][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 488.782274][ C0] ? process_scheduled_works+0x976/0x1840 [ 488.788017][ C0] text_poke_finish+0x30/0x50 [ 488.792704][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 488.798692][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 488.804601][ C0] static_key_enable+0x1a/0x20 [ 488.809377][ C0] toggle_allocation_gate+0xbc/0x260 [ 488.814678][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 488.820584][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 488.826944][ C0] process_scheduled_works+0xa66/0x1840 [ 488.832532][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 488.838533][ C0] ? assign_work+0x364/0x3d0 [ 488.843146][ C0] worker_thread+0x870/0xd30 [ 488.847759][ C0] ? __kthread_parkme+0x169/0x1d0 [ 488.852798][ C0] ? __pfx_worker_thread+0x10/0x10 [ 488.857917][ C0] kthread+0x2f0/0x390 [ 488.861998][ C0] ? __pfx_worker_thread+0x10/0x10 [ 488.867136][ C0] ? __pfx_kthread+0x10/0x10 [ 488.871758][ C0] ret_from_fork+0x4b/0x80 [ 488.876198][ C0] ? __pfx_kthread+0x10/0x10 [ 488.880808][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.885610][ C0]