last executing test programs: 1m36.793386799s ago: executing program 2 (id=762): syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x752, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x740, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x8, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x60, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581"}]}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x7b, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x2, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}, @generic={0x6f, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22e45ebf"}]}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x10, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xbd, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36c56dd0355b06b92972b24a9afb3d77edc3afb2497e4305"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x50, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a3"}, @generic={0xec, 0xf, "c8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599060dd6978666647661d9c3c2a5d009464203101ca72a7b678ab34cc10e6cab5f0a389ee827531407b6d324c77c700e8f78fc1b677d01e317d7fb0d16b720d9dc739eecdb6ee5e004e5da07bd0a1f39e4a3caadc5aa8a0c38733c1a624d59fc5ccf7589e9bbc030660adceb837cd6a8a304b731677df302df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x42, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d92ecb2"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2d, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2"}, @generic={0x5f, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x64, 0x22, "54d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e390ff4d8399b71c69deb70ff938756404953b45c193bad68ff74b3f3fb0192880b5bb2913370fcf3e84d1890266b9374fb"}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="0800000000000000020c030d00002000"/25], 0x4, [{0xa7, &(0x7f0000000cc0)=@string={0xa7, 0x3, "62dd396ed9f6d9bf69252fc70cbd708841f5f9950454323e22900253b3695ae886d90228ef82a4bb1fe8b0da3e06fc0e9d1dc58884b27df1c20f9739a714571ebeeb600f193a7d018f075a02c62651d5d46fac40036a4e4996fc3ab74b9e0ac84e9f3412a8f53de6f36df89e1022ce648101c1f4a7b986adc33b8510ace339159da5483e3153c66ad185ed040cbf3d1418c10a56e45d48cff8ebc05d30fba421283bd4fa65"}}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m33.641089906s ago: executing program 1 (id=774): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001640)=""/255, 0xff}], 0x1) 1m33.288688581s ago: executing program 1 (id=775): munlockall() socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000056c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x400, 0x0) 1m31.894787161s ago: executing program 4 (id=777): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m31.629289503s ago: executing program 2 (id=778): munlockall() socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000056c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x400, 0x0) 1m31.507542667s ago: executing program 4 (id=779): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mount_setattr(0xffffffffffffffff, 0x0, 0x900, 0x0, 0x0) fanotify_init(0x200, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x1, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r2, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10040001}, 0x801) 1m31.418731043s ago: executing program 1 (id=780): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1m30.652190772s ago: executing program 3 (id=782): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0) 1m30.170432622s ago: executing program 3 (id=784): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4], 0x398}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 1m29.889305932s ago: executing program 3 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x2c}}, 0x0) 1m29.830366236s ago: executing program 2 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="01002bbd3000fedbdf250c00000008000300", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x200000c0) 1m29.717130001s ago: executing program 0 (id=788): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/86, 0x56}], 0x1}, 0x7f}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4) 1m29.665191255s ago: executing program 3 (id=789): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m29.585391264s ago: executing program 2 (id=790): munlockall() socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000056c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x400, 0x0) 1m29.505877244s ago: executing program 3 (id=791): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/189, 0xbd}], 0x5, &(0x7f0000000500)=""/113, 0x71}, 0x28}, {{&(0x7f0000000580)=@x25={0x9, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000000640)=""/39, 0x27}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000840)=""/62, 0x3e}, {&(0x7f0000000880)=""/194, 0xc2}], 0x7, &(0x7f0000000a00)=""/77, 0x4d}, 0x9}, {{&(0x7f0000000a80)=@phonet, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000000bc0)=""/104, 0x68}, {&(0x7f0000000c40)=""/62, 0x3e}, {&(0x7f0000000c80)=""/177, 0xb1}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/39, 0x27}], 0x6, &(0x7f0000001e00)=""/61, 0x3d}, 0x6ade}, {{&(0x7f0000001e40)=@nfc, 0x80, &(0x7f0000002140)=[{&(0x7f0000001ec0)=""/155, 0x9b}, {&(0x7f0000001f80)=""/171, 0xab}, {&(0x7f0000002040)=""/57, 0x39}, {&(0x7f0000002080)=""/159, 0x9f}], 0x4, &(0x7f0000002180)=""/207, 0xcf}, 0x1}, {{&(0x7f0000002280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002300)=""/88, 0x58}, {&(0x7f0000002380)=""/171, 0xab}], 0x2, &(0x7f0000002480)=""/100, 0x64}, 0x4}, {{&(0x7f0000002500)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002580)=""/168, 0xa8}, {&(0x7f0000002640)=""/60, 0x3c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/177, 0xb1}, {&(0x7f0000003740)=""/72, 0x48}], 0x5, &(0x7f0000003840)=""/110, 0x6e}, 0xd}, {{&(0x7f00000038c0)=@isdn, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/160, 0xa0}, {&(0x7f0000003a00)=""/6, 0x6}, {&(0x7f0000003a40)=""/1, 0x1}, {&(0x7f0000003a80)=""/73, 0x49}, {&(0x7f0000003b00)=""/48, 0x30}], 0x5, &(0x7f0000003bc0)=""/31, 0x1f}, 0x4}, {{&(0x7f0000003c00)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c80)=""/159, 0x9f}, {&(0x7f0000003d40)=""/126, 0x7e}, {&(0x7f0000003dc0)=""/19, 0x13}, {&(0x7f0000003e00)=""/251, 0xfb}], 0x4, &(0x7f0000003f40)=""/109, 0x6d}, 0x8}], 0x8, 0x2, 0x0) 1m29.500861703s ago: executing program 1 (id=792): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f209b747822a71ddcfbfe3256db532d9be7c7ba14b065982dbc69cdcc21bcf5cd715a71925339e98db7cbd0e046a6891ceb602b01628c64e1f562934eae6269ee67226e24b0e4233af25a053f8e947940f985064d90790182bf61152bada212b2eca863792752e6009ac615bcd3c2891fc6dc80666d92d"], 0x68) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435", 0x65, 0x40040011, 0x0, 0x0) 1m29.448335465s ago: executing program 4 (id=793): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mount_setattr(0xffffffffffffffff, 0x0, 0x900, 0x0, 0x0) fanotify_init(0x200, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x1, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r2, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, 0x0, 0x801) 1m28.63298881s ago: executing program 0 (id=794): socket(0x10, 0x803, 0x0) r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, 0x0) 1m28.255495511s ago: executing program 3 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0x61, "70660d45104af22cf979f9e420f9bd805ca13d9d859231cccea71f224bae2cd5742eb4cccb1c6219db2d013e0a8d402c0acf5c65fdeda798275e72773fe1bf59805e841b57af0d42ab24530af96a5db9ee5ed1416f70de2394ea40e050f8b99ff7"}) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x3eb1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r2) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) syz_open_procfs(r6, 0x0) connect$tipc(r7, &(0x7f0000000040)=@id, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101002, 0x0) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, 0x0, 0x0) 1m27.914180925s ago: executing program 0 (id=796): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4], 0x398}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 1m27.903872143s ago: executing program 2 (id=797): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x200, 0x3a0, 0x5, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000280)=0xfffffffe, 0xf) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r3) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) dup(0xffffffffffffffff) 1m27.776671099s ago: executing program 0 (id=798): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=@delchain={0x55c, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_route={{0xa}, {0x4e4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_vlan={0x80, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x49, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9c95fa81553821d25bbee1244fda18d438c3a5d696ee14197d17ea5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x4, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0xc, 0x2, 0x3a, 0x1, 0x2, 0x5, 0xc, 0x73, 0x6, 0x5, 0x7, 0x2, 0xf, 0x4, 0x0, 0x6a, 0x5, 0xb, 0x4e31, 0x8, 0x2, 0x9, 0x419, 0xd, 0x4, 0x1, 0x1, 0x7fffffff, 0x8, 0x1, 0x6, 0x0, 0x4, 0x1, 0x1, 0x1, 0x6772, 0x10000, 0x4a8, 0x4, 0x80000000, 0x2, 0x3ff, 0x2, 0x9, 0x5, 0x4, 0x821, 0x2, 0x7fffffff, 0x3, 0x1, 0x9, 0x7, 0x3ff, 0x6, 0x10002, 0x5eb7, 0x5, 0x2, 0x401, 0xe, 0x4, 0x5, 0x6, 0x2, 0x629, 0x5c0f, 0x2, 0x5f, 0x5, 0x80000000, 0x8, 0x711, 0x8001, 0x0, 0xffffffb3, 0x4f, 0x401, 0xdadd, 0x10, 0xffffff7a, 0x7, 0x9, 0x2, 0x2, 0x3, 0x2, 0x8001, 0x0, 0xc2, 0x2, 0x9, 0x10000, 0xffffffff, 0x2, 0x7, 0x8, 0xfffffff8, 0x7, 0x8, 0xfffff800, 0xff, 0x43, 0x8, 0x10, 0x4, 0x3, 0x0, 0x400, 0x8, 0x80000000, 0x1, 0x3, 0x2, 0x80000000, 0x8, 0xa, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x7f, 0x7, 0x8, 0x7, 0x1, 0xcec, 0x6, 0x8, 0x7, 0x4, 0x10001, 0xb9b, 0x8, 0x80000001, 0x9, 0x7, 0x5, 0xb16, 0x8000, 0x2, 0x5, 0x400001, 0xdc44, 0x3ff, 0xfff, 0xabac, 0x6, 0x7, 0x0, 0x800, 0x0, 0x2, 0x9, 0x8, 0x8, 0x9, 0xfff, 0x80000001, 0x5, 0x3, 0x4, 0x3, 0xfffffff0, 0x3, 0xd6, 0xfffffffe, 0x2, 0x5, 0x8, 0xd4, 0x5, 0x2, 0x80000001, 0x3, 0x80, 0x80, 0x0, 0x3, 0x1, 0xfffff8a1, 0xb, 0xce, 0x7fffffff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x9, 0x6, 0x9, 0x8, 0x7fff, 0x4, 0x9, 0x5, 0xe96a, 0x8, 0xc5, 0xc, 0x1ff, 0x8000, 0x5, 0x6, 0xbd, 0x10b, 0x0, 0x0, 0xfffffd6e, 0x800, 0x10000, 0xe, 0x8, 0x401, 0x6d3, 0xd, 0x400, 0x4, 0x3ff, 0xfffffff2, 0x9, 0x1ff, 0x80000000, 0x1, 0x3, 0x0, 0x6e64295d, 0xfffffffb, 0x2, 0x1ff, 0x2, 0x7, 0x0, 0x1, 0x8, 0x5, 0x7fffffff, 0x908e, 0x4, 0x4, 0xb, 0x21, 0x0, 0x9, 0x2, 0x67, 0x6, 0x38e, 0x5, 0x7, 0x2, 0x6]}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x6b}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x3}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m27.55743751s ago: executing program 4 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0xe, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0xb, "0000002d240c0378cf"}, @window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x22, [0x91, 0x4, 0x2, 0x0, 0x31f3, 0x2a66645e, 0x9, 0x4]}]}}}}}}}, 0x0) 1m27.442976058s ago: executing program 0 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x2c}}, 0x0) 1m26.877504409s ago: executing program 4 (id=801): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=@delchain={0x5b0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x80, 0x8, 0xa, 0x7fff}, {0xe5fe, 0x10, 0x0, 0x5}, {0x400, 0xf, 0x81, 0x28e49d38}, {0x1, 0xff, 0xef, 0x5}, {0xe68, 0x7, 0x2}, {0x8000, 0x8, 0x1, 0xa4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_route={{0xa}, {0x4e4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_vlan={0x80, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x49, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9c95fa81553821d25bbee1244fda18d438c3a5d696ee14197d17ea5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x4, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0xc, 0x2, 0x3a, 0x1, 0x2, 0x5, 0xc, 0x73, 0x6, 0x5, 0x7, 0x2, 0xf, 0x4, 0x0, 0x6a, 0x5, 0xb, 0x4e31, 0x8, 0x2, 0x9, 0x419, 0xd, 0x4, 0x1, 0x1, 0x7fffffff, 0x8, 0x1, 0x6, 0x0, 0x4, 0x1, 0x1, 0x1, 0x6772, 0x10000, 0x4a8, 0x4, 0x80000000, 0x2, 0x3ff, 0x2, 0x9, 0x5, 0x4, 0x821, 0x2, 0x7fffffff, 0x3, 0x1, 0x9, 0x7, 0x3ff, 0x6, 0x10002, 0x5eb7, 0x5, 0x2, 0x401, 0xe, 0x4, 0x5, 0x6, 0x2, 0x629, 0x5c0f, 0x2, 0x5f, 0x5, 0x80000000, 0x8, 0x711, 0x8001, 0x0, 0xffffffb3, 0x4f, 0x401, 0xdadd, 0x10, 0xffffff7a, 0x7, 0x9, 0x2, 0x2, 0x3, 0x2, 0x8001, 0x0, 0xc2, 0x2, 0x9, 0x10000, 0xffffffff, 0x2, 0x7, 0x8, 0xfffffff8, 0x7, 0x8, 0xfffff800, 0xff, 0x43, 0x8, 0x10, 0x4, 0x3, 0x0, 0x400, 0x8, 0x80000000, 0x1, 0x3, 0x2, 0x80000000, 0x8, 0xa, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x7f, 0x7, 0x8, 0x7, 0x1, 0xcec, 0x6, 0x8, 0x7, 0x4, 0x10001, 0xb9b, 0x8, 0x80000001, 0x9, 0x7, 0x5, 0xb16, 0x8000, 0x2, 0x5, 0x400001, 0xdc44, 0x3ff, 0xfff, 0xabac, 0x6, 0x7, 0x0, 0x800, 0x0, 0x2, 0x9, 0x8, 0x8, 0x9, 0xfff, 0x80000001, 0x5, 0x3, 0x4, 0x3, 0xfffffff0, 0x3, 0xd6, 0xfffffffe, 0x2, 0x5, 0x8, 0xd4, 0x5, 0x2, 0x80000001, 0x3, 0x80, 0x80, 0x0, 0x3, 0x1, 0xfffff8a1, 0xb, 0xce, 0x7fffffff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x9, 0x6, 0x9, 0x8, 0x7fff, 0x4, 0x9, 0x5, 0xe96a, 0x8, 0xc5, 0xc, 0x1ff, 0x8000, 0x5, 0x6, 0xbd, 0x10b, 0x0, 0x0, 0xfffffd6e, 0x800, 0x10000, 0xe, 0x8, 0x401, 0x6d3, 0xd, 0x400, 0x4, 0x3ff, 0xfffffff2, 0x9, 0x1ff, 0x80000000, 0x1, 0x3, 0x0, 0x6e64295d, 0xfffffffb, 0x2, 0x1ff, 0x2, 0x7, 0x0, 0x1, 0x8, 0x5, 0x7fffffff, 0x908e, 0x4, 0x4, 0xb, 0x21, 0x0, 0x9, 0x2, 0x67, 0x6, 0x38e, 0x5, 0x7, 0x2, 0x6]}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x6b}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x3}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m26.345574752s ago: executing program 1 (id=802): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m26.124835625s ago: executing program 0 (id=803): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1m26.068756872s ago: executing program 4 (id=804): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x200, 0x3a0, 0x5, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000280)=0xfffffffe, 0xf) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r3) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) dup(0xffffffffffffffff) 1m25.225438541s ago: executing program 1 (id=805): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x1, 0x0, &(0x7f0000000000)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x33, r4}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x5, r5, 0x0, &(0x7f0000000480)='LLLLLMLL', 0x8, 0x6}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000000110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 1m23.457294693s ago: executing program 2 (id=806): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @loopback, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4}}}}}}}, 0x0) 1m8.036865989s ago: executing program 32 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0x61, "70660d45104af22cf979f9e420f9bd805ca13d9d859231cccea71f224bae2cd5742eb4cccb1c6219db2d013e0a8d402c0acf5c65fdeda798275e72773fe1bf59805e841b57af0d42ab24530af96a5db9ee5ed1416f70de2394ea40e050f8b99ff7"}) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x3eb1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r2) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) syz_open_procfs(r6, 0x0) connect$tipc(r7, &(0x7f0000000040)=@id, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101002, 0x0) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, 0x0, 0x0) 1m7.715570432s ago: executing program 33 (id=803): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1m7.561424381s ago: executing program 34 (id=805): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x1, 0x0, &(0x7f0000000000)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x33, r4}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x5, r5, 0x0, &(0x7f0000000480)='LLLLLMLL', 0x8, 0x6}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000000110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 1m7.238268206s ago: executing program 35 (id=806): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @loopback, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4}}}}}}}, 0x0) 1m7.000837875s ago: executing program 36 (id=804): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x200, 0x3a0, 0x5, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000280)=0xfffffffe, 0xf) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r3) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) dup(0xffffffffffffffff) 25.975392146s ago: executing program 6 (id=808): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)=""/174, 0xae}, 0x6}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 25.915220097s ago: executing program 5 (id=807): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/189, 0xbd}], 0x5, &(0x7f0000000500)=""/113, 0x71}, 0x28}, {{&(0x7f0000000580)=@x25={0x9, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000000640)=""/39, 0x27}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000840)=""/62, 0x3e}, {&(0x7f0000000880)=""/194, 0xc2}], 0x7, &(0x7f0000000a00)=""/77, 0x4d}, 0x9}, {{&(0x7f0000000a80)=@phonet, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000000bc0)=""/104, 0x68}, {&(0x7f0000000c40)=""/62, 0x3e}, {&(0x7f0000000c80)=""/177, 0xb1}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/39, 0x27}], 0x6, &(0x7f0000001e00)=""/61, 0x3d}, 0x6ade}, {{&(0x7f0000001e40)=@nfc, 0x80, &(0x7f0000002140)=[{&(0x7f0000001ec0)=""/155, 0x9b}, {&(0x7f0000001f80)=""/171, 0xab}, {&(0x7f0000002040)=""/57, 0x39}, {&(0x7f0000002080)=""/159, 0x9f}], 0x4, &(0x7f0000002180)=""/207, 0xcf}, 0x1}, {{&(0x7f0000002280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002300)=""/88, 0x58}, {&(0x7f0000002380)=""/171, 0xab}], 0x2, &(0x7f0000002480)=""/100, 0x64}, 0x4}, {{&(0x7f0000002500)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002580)=""/168, 0xa8}, {&(0x7f0000002640)=""/60, 0x3c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/177, 0xb1}, {&(0x7f0000003740)=""/72, 0x48}], 0x5, &(0x7f0000003840)=""/110, 0x6e}, 0xd}, {{&(0x7f00000038c0)=@isdn, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/160, 0xa0}, {&(0x7f0000003a00)=""/6, 0x6}, {&(0x7f0000003a40)=""/1, 0x1}, {&(0x7f0000003a80)=""/73, 0x49}, {&(0x7f0000003b00)=""/48, 0x30}], 0x5, &(0x7f0000003bc0)=""/31, 0x1f}, 0x4}, {{&(0x7f0000003c00)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c80)=""/159, 0x9f}, {&(0x7f0000003d40)=""/126, 0x7e}, {&(0x7f0000003dc0)=""/19, 0x13}, {&(0x7f0000003e00)=""/251, 0xfb}], 0x4, &(0x7f0000003f40)=""/109, 0x6d}, 0x8}], 0x8, 0x2, 0x0) 25.614934509s ago: executing program 6 (id=812): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x184, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x120, 0x1, [@m_connmark={0xe8, 0x15, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x0, 0xf2, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x6, 0x9, 0x800}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0xd3f, 0x6, 0x40, 0x80000001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x5, 0xffffffffffffffff, 0x5, 0x850}, 0x7f}}]}, {0x45, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x34, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 25.285000186s ago: executing program 6 (id=813): syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000021000000", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES16=r0], 0x2c}}, 0x0) 24.906717571s ago: executing program 6 (id=814): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=@delchain={0x5b0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x80, 0x8, 0xa, 0x7fff}, {0xe5fe, 0x10, 0x0, 0x5}, {0x400, 0xf, 0x81, 0x28e49d38}, {0x1, 0xff, 0xef, 0x5}, {0xe68, 0x7, 0x2}, {0x8000, 0x8, 0x1, 0xa4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_route={{0xa}, {0x4e4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_vlan={0x80, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x49, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9c95fa81553821d25bbee1244fda18d438c3a5d696ee14197d17ea5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x4, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0xc, 0x2, 0x3a, 0x1, 0x2, 0x5, 0xc, 0x73, 0x6, 0x5, 0x7, 0x2, 0xf, 0x4, 0x0, 0x6a, 0x5, 0xb, 0x4e31, 0x8, 0x2, 0x9, 0x419, 0xd, 0x4, 0x1, 0x1, 0x7fffffff, 0x8, 0x1, 0x6, 0x0, 0x4, 0x1, 0x1, 0x1, 0x6772, 0x10000, 0x4a8, 0x4, 0x80000000, 0x2, 0x3ff, 0x2, 0x9, 0x5, 0x4, 0x821, 0x2, 0x7fffffff, 0x3, 0x1, 0x9, 0x7, 0x3ff, 0x6, 0x10002, 0x5eb7, 0x5, 0x2, 0x401, 0xe, 0x4, 0x5, 0x6, 0x2, 0x629, 0x5c0f, 0x2, 0x5f, 0x5, 0x80000000, 0x8, 0x711, 0x8001, 0x0, 0xffffffb3, 0x4f, 0x401, 0xdadd, 0x10, 0xffffff7a, 0x7, 0x9, 0x2, 0x2, 0x3, 0x2, 0x8001, 0x0, 0xc2, 0x2, 0x9, 0x10000, 0xffffffff, 0x2, 0x7, 0x8, 0xfffffff8, 0x7, 0x8, 0xfffff800, 0xff, 0x43, 0x8, 0x10, 0x4, 0x3, 0x0, 0x400, 0x8, 0x80000000, 0x1, 0x3, 0x2, 0x80000000, 0x8, 0xa, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x7f, 0x7, 0x8, 0x7, 0x1, 0xcec, 0x6, 0x8, 0x7, 0x4, 0x10001, 0xb9b, 0x8, 0x80000001, 0x9, 0x7, 0x5, 0xb16, 0x8000, 0x2, 0x5, 0x400001, 0xdc44, 0x3ff, 0xfff, 0xabac, 0x6, 0x7, 0x0, 0x800, 0x0, 0x2, 0x9, 0x8, 0x8, 0x9, 0xfff, 0x80000001, 0x5, 0x3, 0x4, 0x3, 0xfffffff0, 0x3, 0xd6, 0xfffffffe, 0x2, 0x5, 0x8, 0xd4, 0x5, 0x2, 0x80000001, 0x3, 0x80, 0x80, 0x0, 0x3, 0x1, 0xfffff8a1, 0xb, 0xce, 0x7fffffff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x9, 0x6, 0x9, 0x8, 0x7fff, 0x4, 0x9, 0x5, 0xe96a, 0x8, 0xc5, 0xc, 0x1ff, 0x8000, 0x5, 0x6, 0xbd, 0x10b, 0x0, 0x0, 0xfffffd6e, 0x800, 0x10000, 0xe, 0x8, 0x401, 0x6d3, 0xd, 0x400, 0x4, 0x3ff, 0xfffffff2, 0x9, 0x1ff, 0x80000000, 0x1, 0x3, 0x0, 0x6e64295d, 0xfffffffb, 0x2, 0x1ff, 0x2, 0x7, 0x0, 0x1, 0x8, 0x5, 0x7fffffff, 0x908e, 0x4, 0x4, 0xb, 0x21, 0x0, 0x9, 0x2, 0x67, 0x6, 0x38e, 0x5, 0x7, 0x2, 0x6]}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x6b}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x3}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 24.828714709s ago: executing program 5 (id=815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 24.538307075s ago: executing program 5 (id=816): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x200, 0x3a0, 0x5, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000280)=0xfffffffe, 0xf) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) dup(0xffffffffffffffff) 24.402231495s ago: executing program 6 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 15.682814658s ago: executing program 6 (id=818): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 15.673745465s ago: executing program 5 (id=819): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x1, 0x0, &(0x7f0000000000)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x33, r4}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 272.026698ms ago: executing program 37 (id=818): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 38 (id=819): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x1, 0x0, &(0x7f0000000000)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x33, r4}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 81.618990][ T5826] cgroup: Unknown subsys name 'net' [ 81.727937][ T5826] cgroup: Unknown subsys name 'cpuset' [ 81.737688][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.316168][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.810622][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.823295][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.855417][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.874812][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.891179][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.900347][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.910215][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.910636][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.925878][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.926223][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.933867][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.941832][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.949190][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.965254][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.973895][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.974110][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.990464][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.002781][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.010891][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.030067][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.044689][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.051928][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.074479][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.085895][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.095799][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.674965][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 86.782101][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 87.041069][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 87.091566][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 87.132994][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.143357][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.151278][ T5856] bridge_slave_0: entered allmulticast mode [ 87.159068][ T5856] bridge_slave_0: entered promiscuous mode [ 87.189961][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.197270][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.204811][ T5856] bridge_slave_1: entered allmulticast mode [ 87.211865][ T5856] bridge_slave_1: entered promiscuous mode [ 87.287400][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.294801][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.301967][ T5850] bridge_slave_0: entered allmulticast mode [ 87.310096][ T5850] bridge_slave_0: entered promiscuous mode [ 87.317539][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 87.353953][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.361205][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.368563][ T5850] bridge_slave_1: entered allmulticast mode [ 87.376261][ T5850] bridge_slave_1: entered promiscuous mode [ 87.396995][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.409142][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.502719][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.556500][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.565818][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.572956][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.580623][ T5852] bridge_slave_0: entered allmulticast mode [ 87.588525][ T5852] bridge_slave_0: entered promiscuous mode [ 87.601540][ T5856] team0: Port device team_slave_0 added [ 87.642157][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.649492][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.656995][ T5852] bridge_slave_1: entered allmulticast mode [ 87.664772][ T5852] bridge_slave_1: entered promiscuous mode [ 87.688644][ T5856] team0: Port device team_slave_1 added [ 87.707867][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.716020][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.723194][ T5857] bridge_slave_0: entered allmulticast mode [ 87.731572][ T5857] bridge_slave_0: entered promiscuous mode [ 87.811002][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.818765][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.826255][ T5857] bridge_slave_1: entered allmulticast mode [ 87.833522][ T5857] bridge_slave_1: entered promiscuous mode [ 87.841158][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.848759][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.856010][ T5855] bridge_slave_0: entered allmulticast mode [ 87.863247][ T5855] bridge_slave_0: entered promiscuous mode [ 87.872666][ T5850] team0: Port device team_slave_0 added [ 87.881182][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.894987][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.909771][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.916776][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.943654][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.968827][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.976221][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.983390][ T5855] bridge_slave_1: entered allmulticast mode [ 87.990614][ T5855] bridge_slave_1: entered promiscuous mode [ 87.999547][ T5850] team0: Port device team_slave_1 added [ 88.017618][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.024900][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.051159][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.068880][ T5845] Bluetooth: hci2: command tx timeout [ 88.118516][ T5852] team0: Port device team_slave_0 added [ 88.134737][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.144844][ T5845] Bluetooth: hci4: command tx timeout [ 88.155268][ T5158] Bluetooth: hci1: command tx timeout [ 88.161062][ T5845] Bluetooth: hci3: command tx timeout [ 88.182753][ T5852] team0: Port device team_slave_1 added [ 88.206631][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.218136][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.227952][ T5845] Bluetooth: hci0: command tx timeout [ 88.235222][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.245272][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.252229][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.278268][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.290936][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.297980][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.324062][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.403730][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.411373][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.437817][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.491207][ T5856] hsr_slave_0: entered promiscuous mode [ 88.498221][ T5856] hsr_slave_1: entered promiscuous mode [ 88.505418][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.512369][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.538852][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.565454][ T5857] team0: Port device team_slave_0 added [ 88.573649][ T5855] team0: Port device team_slave_0 added [ 88.581228][ T5857] team0: Port device team_slave_1 added [ 88.615257][ T5855] team0: Port device team_slave_1 added [ 88.666228][ T5850] hsr_slave_0: entered promiscuous mode [ 88.672534][ T5850] hsr_slave_1: entered promiscuous mode [ 88.679250][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 88.685101][ T5850] Cannot create hsr debugfs directory [ 88.734200][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.741302][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.767539][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.780917][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.788475][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.814460][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.843119][ T5852] hsr_slave_0: entered promiscuous mode [ 88.849852][ T5852] hsr_slave_1: entered promiscuous mode [ 88.856419][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 88.862189][ T5852] Cannot create hsr debugfs directory [ 88.904213][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.911338][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.938532][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.951269][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.958819][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.985225][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.158158][ T5857] hsr_slave_0: entered promiscuous mode [ 89.165059][ T5857] hsr_slave_1: entered promiscuous mode [ 89.171111][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 89.177620][ T5857] Cannot create hsr debugfs directory [ 89.340040][ T5855] hsr_slave_0: entered promiscuous mode [ 89.348668][ T5855] hsr_slave_1: entered promiscuous mode [ 89.355005][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 89.360807][ T5855] Cannot create hsr debugfs directory [ 89.616257][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.645948][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.676650][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.701361][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.774146][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.793632][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.814613][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.828003][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.900121][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.916743][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.930388][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.941400][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.062020][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.078704][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.090208][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.103662][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.144785][ T5845] Bluetooth: hci2: command tx timeout [ 90.224863][ T5158] Bluetooth: hci1: command tx timeout [ 90.230305][ T5158] Bluetooth: hci4: command tx timeout [ 90.236516][ T5845] Bluetooth: hci3: command tx timeout [ 90.251698][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.261774][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.284303][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.297479][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.305610][ T5158] Bluetooth: hci0: command tx timeout [ 90.333164][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.356956][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.380707][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.429850][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.439732][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.457178][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.472792][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.480061][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.511469][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.518610][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.529377][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.536506][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.553063][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.560223][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.576771][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.583912][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.630917][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.638069][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.714036][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.773606][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.786317][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.811704][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.833649][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.859515][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.866638][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.885081][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.892513][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.919243][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.958899][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.966070][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.982187][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.989320][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.002872][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.072631][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.099566][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.202937][ T5852] veth0_vlan: entered promiscuous mode [ 91.228968][ T5856] veth0_vlan: entered promiscuous mode [ 91.254262][ T5852] veth1_vlan: entered promiscuous mode [ 91.266941][ T5856] veth1_vlan: entered promiscuous mode [ 91.277527][ T5850] veth0_vlan: entered promiscuous mode [ 91.317239][ T5850] veth1_vlan: entered promiscuous mode [ 91.339195][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.380479][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.391559][ T5852] veth0_macvtap: entered promiscuous mode [ 91.411065][ T5856] veth0_macvtap: entered promiscuous mode [ 91.421075][ T5852] veth1_macvtap: entered promiscuous mode [ 91.443987][ T5856] veth1_macvtap: entered promiscuous mode [ 91.497231][ T5850] veth0_macvtap: entered promiscuous mode [ 91.508075][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.519160][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.530525][ T5855] veth0_vlan: entered promiscuous mode [ 91.547935][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.561743][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.571365][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.582463][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.596974][ T5850] veth1_macvtap: entered promiscuous mode [ 91.609737][ T5855] veth1_vlan: entered promiscuous mode [ 91.628060][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.637316][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.663604][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.675183][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.705082][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.718549][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.733251][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747007][ T2154] cfg80211: failed to load regulatory.db [ 91.761242][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.783916][ T5857] veth0_vlan: entered promiscuous mode [ 91.821457][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.832933][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.848131][ T5855] veth0_macvtap: entered promiscuous mode [ 91.862175][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.871337][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.885035][ T5857] veth1_vlan: entered promiscuous mode [ 91.891752][ T5855] veth1_macvtap: entered promiscuous mode [ 91.933003][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.978377][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.997974][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.015006][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.052405][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.061119][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.086114][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.097947][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.116208][ T1335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.125997][ T1335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.176883][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.178327][ T5857] veth0_macvtap: entered promiscuous mode [ 92.192599][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.210906][ T5857] veth1_macvtap: entered promiscuous mode [ 92.218163][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.225225][ T5158] Bluetooth: hci2: command tx timeout [ 92.232756][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.258687][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.271185][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.303383][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.324956][ T5158] Bluetooth: hci4: command tx timeout [ 92.327368][ T5840] Bluetooth: hci1: command tx timeout [ 92.336215][ T5845] Bluetooth: hci3: command tx timeout [ 92.369647][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385289][ T5845] Bluetooth: hci0: command tx timeout [ 92.392677][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.415892][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.423886][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.443471][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.453644][ T1004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.521210][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.530224][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.564861][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.572724][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.672282][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.728272][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.769666][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.813846][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.840856][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.951661][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.994094][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.984924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.993542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.114962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.115080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.244492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.248645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.261223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.295426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.313318][ T5845] Bluetooth: hci2: command tx timeout [ 94.385514][ T5845] Bluetooth: hci4: command tx timeout [ 94.390970][ T5845] Bluetooth: hci3: command tx timeout [ 94.397172][ T5840] Bluetooth: hci1: command tx timeout [ 94.466322][ T5845] Bluetooth: hci0: command tx timeout [ 94.625901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.964677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.785706][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 102.217144][ T6095] tipc: Started in network mode [ 102.223151][ T6095] tipc: Node identity b, cluster identity 4711 [ 102.234602][ T6095] tipc: Node number set to 11 [ 102.240660][ T6095] tipc: Cannot configure node identity twice [ 103.014958][ T2154] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.202718][ T2154] usb 4-1: Using ep0 maxpacket: 32 [ 103.222988][ T2154] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 103.251562][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.272442][ T2154] usb 4-1: Product: syz [ 103.277057][ T2154] usb 4-1: Manufacturer: syz [ 103.281672][ T2154] usb 4-1: SerialNumber: syz [ 103.423470][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.58'. [ 103.529816][ T2154] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 103.585285][ T2154] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 103.604548][ T6110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 103.619174][ T2154] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 103.697834][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 103.753063][ T2154] usb 4-1: USB disconnect, device number 2 [ 103.791154][ T2154] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 103.794891][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.862565][ T2154] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 103.894248][ T2154] visor 4-1:1.0: device disconnected [ 103.918815][ T6110] bridge_slave_0 (unregistering): left allmulticast mode [ 103.934177][ T6110] bridge_slave_0 (unregistering): left promiscuous mode [ 103.957833][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.388623][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73'. [ 105.473605][ T6146] Zero length message leads to an empty skb [ 105.743622][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 105.802496][ T6155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.77'. [ 105.859122][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 105.894909][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 106.508594][ T6155] team0: Port device team_slave_0 removed [ 110.299879][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 113.670859][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 113.689362][ T6266] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.214459][ T5918] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.804397][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 114.858164][ T5918] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 114.867854][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.906828][ T5918] usb 5-1: Product: syz [ 114.912775][ T5918] usb 5-1: Manufacturer: syz [ 114.931295][ T5918] usb 5-1: SerialNumber: syz [ 114.959380][ T5918] usb 5-1: config 0 descriptor?? [ 114.973969][ T5918] hub 5-1:0.0: bad descriptor, ignoring hub [ 114.981356][ T5918] hub 5-1:0.0: probe with driver hub failed with error -5 [ 115.017151][ T5918] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 115.606708][ T5918] gspca_vc032x: reg_w err -110 [ 115.615992][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.689081][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.710213][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.725312][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.734409][ T2154] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.769309][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.799757][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.823434][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.846898][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.874211][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.905621][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.917237][ T2154] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 115.945862][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.955224][ T2154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.965758][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.971174][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.977218][ T2154] usb 2-1: config 0 has no interface number 0 [ 115.983672][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.990730][ T2154] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 116.000948][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.006698][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.012405][ T2154] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.034362][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.053486][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.070043][ T2154] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 116.080306][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.089864][ T5918] gspca_vc032x: Unknown sensor... [ 116.099395][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.125665][ T5918] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 116.156431][ T2154] usb 2-1: Product: syz [ 116.178634][ T2154] usb 2-1: Manufacturer: syz [ 116.210822][ T2154] usb 2-1: SerialNumber: syz [ 116.250129][ T2154] usb 2-1: config 0 descriptor?? [ 116.615619][ T5918] usb 5-1: USB disconnect, device number 2 [ 118.307303][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 119.344455][ T5942] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.527710][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 119.570123][ T5942] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 119.624650][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.663297][ T5942] usb 3-1: Product: syz [ 119.678643][ T5942] usb 3-1: Manufacturer: syz [ 119.683267][ T5942] usb 3-1: SerialNumber: syz [ 119.699499][ T2154] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 119.724138][ T5942] usb 3-1: config 0 descriptor?? [ 119.758203][ T5942] hub 3-1:0.0: bad descriptor, ignoring hub [ 119.767311][ T2154] usb 2-1: USB disconnect, device number 2 [ 119.773331][ T5942] hub 3-1:0.0: probe with driver hub failed with error -5 [ 119.809023][ T5942] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 120.252435][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 120.645053][ T5942] gspca_vc032x: reg_w err -110 [ 120.668511][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.682451][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.733002][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.743190][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.007414][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.013682][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.020215][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.042353][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.059208][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.074971][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.086839][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.101301][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.121856][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.137276][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.153810][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.205511][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.229222][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.247675][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.271807][ T5942] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.306715][ T5942] gspca_vc032x: Unknown sensor... [ 121.320714][ T5942] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 121.514697][ T5931] usb 3-1: USB disconnect, device number 2 [ 121.784431][ T2154] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.980808][ T2154] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 121.998438][ T2154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.039749][ T2154] usb 3-1: config 0 has no interface number 0 [ 122.064958][ T2154] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 122.113522][ T2154] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.164241][ T2154] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 122.177976][ T6404] netlink: 868 bytes leftover after parsing attributes in process `syz.1.172'. [ 122.182839][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.210801][ T2154] usb 3-1: Product: syz [ 122.222752][ T2154] usb 3-1: Manufacturer: syz [ 122.231126][ T2154] usb 3-1: SerialNumber: syz [ 122.279405][ T2154] usb 3-1: config 0 descriptor?? [ 122.294636][ T6409] netlink: 868 bytes leftover after parsing attributes in process `syz.1.172'. [ 123.158597][ T6425] netlink: 'syz.1.180': attribute type 10 has an invalid length. [ 123.252075][ T6428] netlink: 'syz.1.180': attribute type 10 has an invalid length. [ 123.351326][ T6425] team0: Port device dummy0 added [ 123.387740][ T6428] team0: Port device dummy0 removed [ 123.412970][ T6428] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 123.660443][ T6425] syz.1.180 (6425) used greatest stack depth: 19384 bytes left [ 124.729857][ T6452] process 'syz.1.193' launched '/dev/fd/4' with NULL argv: empty string added [ 125.154979][ T2154] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 125.190114][ T2154] usb 3-1: USB disconnect, device number 3 [ 125.775698][ T6493] netlink: 'syz.1.212': attribute type 10 has an invalid length. [ 125.845310][ T2154] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.048317][ T2154] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 126.084176][ T2154] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.114396][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.121993][ T2154] usb 1-1: config 0 has no interface number 0 [ 126.143686][ T2154] usb 1-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.210256][ T2154] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 126.232504][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.244564][ T2154] usb 1-1: Product: syz [ 126.248818][ T2154] usb 1-1: Manufacturer: syz [ 126.259360][ T2154] usb 1-1: SerialNumber: syz [ 126.266267][ T6510] netlink: 'syz.1.221': attribute type 10 has an invalid length. [ 126.267851][ T2154] usb 1-1: config 0 descriptor?? [ 126.290497][ T6510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.221'. [ 126.311048][ T24] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 126.325611][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.330806][ T6510] dummy0: entered promiscuous mode [ 126.362726][ T24] usb 3-1: config 0 has no interface number 0 [ 126.388565][ T24] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 126.410349][ T6510] bond0: (slave dummy0): Releasing backup interface [ 126.414431][ T24] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.443453][ T6510] bridge0: port 3(dummy0) entered blocking state [ 126.452085][ T24] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 126.462946][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.471635][ T6510] bridge0: port 3(dummy0) entered disabled state [ 126.485514][ T24] usb 3-1: Product: syz [ 126.489707][ T24] usb 3-1: Manufacturer: syz [ 126.498846][ T24] usb 3-1: SerialNumber: syz [ 126.516681][ T6510] dummy0: entered allmulticast mode [ 126.524047][ T24] usb 3-1: config 0 descriptor?? [ 129.490411][ T5942] usb 1-1: USB disconnect, device number 2 [ 129.607546][ T24] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 129.973923][ T24] usb 3-1: USB disconnect, device number 4 [ 130.228716][ T6592] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.554478][ T5917] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 131.067877][ T5917] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.080881][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.112547][ T5917] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 131.144007][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.529673][ T5917] usb 5-1: config 0 descriptor?? [ 132.711045][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.717851][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.384562][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.491432][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 133.506648][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.550705][ T5917] usb 5-1: USB disconnect, device number 3 [ 133.655466][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 134.662586][ T6693] blktrace: Concurrent blktraces are not allowed on sg0 [ 134.845503][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 134.874745][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 134.891823][ T9] usb 3-1: no configurations [ 134.927437][ T9] usb 3-1: can't read configurations, error -22 [ 135.924375][ T1069] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 136.153235][ T1069] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.205881][ T1069] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.213365][ T1069] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 136.274452][ T1069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.330346][ T1069] usb 1-1: config 0 descriptor?? [ 138.634511][ T5918] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.175336][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 139.291172][ T1069] usbhid 1-1:0.0: can't add hid device: -71 [ 139.313240][ T1069] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 139.334778][ T5918] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 139.381940][ T1069] usb 1-1: USB disconnect, device number 3 [ 139.381963][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.430192][ T5918] usb 3-1: Product: syz [ 139.464927][ T5918] usb 3-1: Manufacturer: syz [ 139.469557][ T5918] usb 3-1: SerialNumber: syz [ 139.509486][ T5918] usb 3-1: config 0 descriptor?? [ 139.539007][ T5918] hub 3-1:0.0: bad descriptor, ignoring hub [ 139.571380][ T5918] hub 3-1:0.0: probe with driver hub failed with error -5 [ 139.618464][ T5918] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 140.155579][ T5918] gspca_vc032x: reg_w err -110 [ 140.168943][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.199594][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.216607][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.238256][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.252852][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.265075][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.275599][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.287462][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.298881][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.312141][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.324235][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.345993][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.361886][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.369601][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.379538][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.396273][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.414081][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.437849][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 140.577306][ T6836] warning: `syz.1.356' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.036627][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.058122][ T5918] gspca_vc032x: Unknown sensor... [ 141.063467][ T5918] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 141.178103][ T5918] usb 3-1: USB disconnect, device number 7 [ 141.764444][ T1069] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.952292][ T1069] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 141.960559][ T1069] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.113504][ T1069] usb 5-1: config 0 has no interface number 0 [ 142.184444][ T1069] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 142.211987][ T1069] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.372967][ T1069] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 142.461073][ T1069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.494479][ T5918] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.563012][ T1069] usb 5-1: Product: syz [ 142.581360][ T1069] usb 5-1: Manufacturer: syz [ 142.616020][ T1069] usb 5-1: SerialNumber: syz [ 142.654562][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 142.664859][ T1069] usb 5-1: config 0 descriptor?? [ 142.682742][ T5918] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 142.694588][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.707445][ T5918] usb 1-1: Product: syz [ 142.712008][ T5918] usb 1-1: Manufacturer: syz [ 142.717434][ T5918] usb 1-1: SerialNumber: syz [ 142.805116][ T5918] usb 1-1: config 0 descriptor?? [ 142.839536][ T5918] hub 1-1:0.0: bad descriptor, ignoring hub [ 142.852376][ T5918] hub 1-1:0.0: probe with driver hub failed with error -5 [ 142.879005][ T5918] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 143.561637][ T5918] gspca_vc032x: reg_w err -110 [ 143.573808][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.595230][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.607538][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.625009][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.632651][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.643993][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.667193][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.733192][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.753220][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.776820][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.102048][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.178211][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.190142][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.207038][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.227351][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.266301][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.297909][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.376901][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.406420][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.426147][ T5918] gspca_vc032x: Unknown sensor... [ 144.440291][ T5918] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 145.761385][ T6906] fuse: Bad value for 'fd' [ 145.844650][ T9] usb 1-1: USB disconnect, device number 4 [ 146.350102][ T1069] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 146.422098][ T1069] usb 5-1: USB disconnect, device number 4 [ 146.770299][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.394'. [ 147.804459][ T5868] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.034097][ T5868] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 148.051552][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.132897][ T5868] usb 1-1: config 0 has no interface number 0 [ 148.168080][ T5868] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 148.202741][ T5868] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.280166][ T5868] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 148.289831][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.322705][ T5868] usb 1-1: Product: syz [ 148.346498][ T5868] usb 1-1: Manufacturer: syz [ 148.369080][ T5868] usb 1-1: SerialNumber: syz [ 148.409046][ T5868] usb 1-1: config 0 descriptor?? [ 152.261093][ T7008] blktrace: Concurrent blktraces are not allowed on sg0 [ 152.534458][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.702796][ T5868] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 152.707621][ T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 152.788530][ T5868] usb 1-1: USB disconnect, device number 5 [ 152.871832][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.224429][ T9] usb 3-1: config 0 has no interface number 0 [ 153.251013][ T9] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.508846][ T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 153.518904][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.546717][ T9] usb 3-1: Product: syz [ 153.581407][ T9] usb 3-1: Manufacturer: syz [ 153.904601][ T9] usb 3-1: SerialNumber: syz [ 153.929289][ T9] usb 3-1: config 0 descriptor?? [ 157.828889][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 158.008593][ T9] usb 3-1: USB disconnect, device number 8 [ 159.914395][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 160.641717][ T7113] PKCS7: Unknown OID: [5] (bad) [ 160.646965][ T7113] PKCS7: Only support pkcs7_signedData type [ 160.827332][ T7113] syz.2.442 uses obsolete (PF_INET,SOCK_PACKET) [ 163.368580][ T7152] PKCS7: Unknown OID: [5] (bad) [ 163.374808][ T7152] PKCS7: Only support pkcs7_signedData type [ 163.615172][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.814369][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 164.059391][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.070335][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.084375][ T9] usb 5-1: Product: syz [ 164.088974][ T9] usb 5-1: Manufacturer: syz [ 164.104028][ T9] usb 5-1: SerialNumber: syz [ 164.368035][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 164.953920][ T5868] usb 5-1: USB disconnect, device number 5 [ 164.966134][ T5868] usblp0: removed [ 165.961070][ T5868] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 166.172974][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 166.353914][ T5868] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 166.398781][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 166.493663][ T7197] fuse: Bad value for 'fd' [ 166.523856][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.553240][ T5868] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.739517][ T5868] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.782949][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.960210][ T7212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'. [ 169.860958][ T5868] usb 2-1: usb_control_msg returned -71 [ 169.936412][ T5868] usbtmc 2-1:16.0: can't read capabilities [ 169.982214][ T5868] usb 2-1: USB disconnect, device number 3 [ 170.208333][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 170.233025][ T7252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.495'. [ 170.263965][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 170.288329][ T7254] netlink: 104 bytes leftover after parsing attributes in process `syz.0.496'. [ 170.319902][ T7254] netlink: 104 bytes leftover after parsing attributes in process `syz.0.496'. [ 172.037944][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 173.482139][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.521'. [ 174.920199][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.531'. [ 178.662307][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 183.267525][ T5942] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 183.470630][ T7506] syz_tun: entered promiscuous mode [ 183.506177][ T5942] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.531141][ T5942] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.549651][ T7506] syz_tun: left promiscuous mode [ 183.573882][ T5942] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 183.605528][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.644533][ T5942] usb 2-1: config 0 descriptor?? [ 184.245190][ T7519] syzkaller1: entered promiscuous mode [ 184.262534][ T7519] syzkaller1: entered allmulticast mode [ 186.031122][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 186.044683][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 186.062975][ T5942] usb 2-1: USB disconnect, device number 4 [ 186.874513][ T1069] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 187.136340][ T1069] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 187.144632][ T1069] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.177313][ T1069] usb 5-1: config 0 has no interface number 0 [ 187.326600][ T1069] usb 5-1: config 0 interface 117 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.357910][ T1069] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.466736][ T1069] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 187.484321][ T1069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.512760][ T1069] usb 5-1: Product: syz [ 187.532536][ T1069] usb 5-1: Manufacturer: syz [ 187.542977][ T1069] usb 5-1: SerialNumber: syz [ 187.581270][ T1069] usb 5-1: config 0 descriptor?? [ 188.904415][ T1069] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 189.078003][ T1069] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.092639][ T1069] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.449874][ T1069] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 189.481380][ T1069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.517855][ T1069] usb 4-1: config 0 descriptor?? [ 190.051185][ T5942] usb 5-1: USB disconnect, device number 6 [ 190.280859][ T7630] syzkaller1: entered promiscuous mode [ 190.290206][ T7630] syzkaller1: entered allmulticast mode [ 191.626522][ T1069] usbhid 4-1:0.0: can't add hid device: -71 [ 191.645575][ T1069] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 191.686741][ T1069] usb 4-1: USB disconnect, device number 3 [ 193.612620][ T7698] syz_tun: entered promiscuous mode [ 193.892317][ T7704] netlink: 892 bytes leftover after parsing attributes in process `syz.2.662'. [ 194.264820][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271974][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.604412][ T1069] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.796889][ T1069] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 197.806341][ T1069] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.839343][ T1069] usb 5-1: config 0 has no interface number 0 [ 197.861682][ T1069] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 197.880997][ T1069] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.900212][ T1069] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 197.912313][ T1069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.932671][ T1069] usb 5-1: Product: syz [ 197.940428][ T1069] usb 5-1: Manufacturer: syz [ 197.948543][ T1069] usb 5-1: SerialNumber: syz [ 197.971142][ T1069] usb 5-1: config 0 descriptor?? [ 200.246717][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 200.569177][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 200.769924][ T1069] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 200.848451][ T1069] usb 5-1: USB disconnect, device number 7 [ 200.953915][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 201.202739][ T7808] PKCS7: Unknown OID: [5] (bad) [ 201.209785][ T7808] PKCS7: Only support pkcs7_signedData type [ 201.335038][ T7819] netlink: 'syz.4.698': attribute type 72 has an invalid length. [ 201.348761][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 201.493133][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.700'. [ 201.588072][ T7824] fuse: Bad value for 'fd' [ 202.053706][ T7834] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 202.121864][ T7834] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 202.668715][ T7840] fuse: Bad value for 'fd' [ 204.454364][ T1069] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 204.574575][ T5868] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.811587][ T5868] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 204.833084][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.837723][ T1069] usb 2-1: Using ep0 maxpacket: 8 [ 204.858521][ T5868] usb 3-1: config 0 has no interface number 0 [ 204.865657][ T5868] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 204.933809][ T5868] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.232293][ T5868] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 205.241429][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.249737][ T5868] usb 3-1: Product: syz [ 205.253934][ T5868] usb 3-1: Manufacturer: syz [ 205.258628][ T5868] usb 3-1: SerialNumber: syz [ 205.293911][ T5868] usb 3-1: config 0 descriptor?? [ 205.340454][ T1069] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 205.431047][ T1069] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 205.553315][ T1069] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.580358][ T1069] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.691004][ T1069] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.723871][ T1069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.974773][ T7895] PKCS7: Unknown OID: [5] (bad) [ 206.979908][ T7895] PKCS7: Only support pkcs7_signedData type [ 208.544608][ T5868] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 208.659694][ T1069] usb 2-1: usb_control_msg returned -71 [ 208.669100][ T5868] usb 3-1: USB disconnect, device number 9 [ 208.674347][ T1069] usbtmc 2-1:16.0: can't read capabilities [ 208.774731][ T1069] usb 2-1: USB disconnect, device number 5 [ 210.004391][ T5917] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 210.164423][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 210.173093][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 210.182781][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.199601][ T5917] usb 5-1: Product: syz [ 210.210326][ T5917] usb 5-1: Manufacturer: syz [ 210.229642][ T5917] usb 5-1: SerialNumber: syz [ 210.483894][ T5917] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 210.522318][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 210.558272][ T7938] vlan2: entered promiscuous mode [ 210.580764][ T7938] batadv0: entered promiscuous mode [ 210.864595][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.074343][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 211.085520][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 211.097092][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.106690][ T24] usb 3-1: Product: syz [ 211.111285][ T24] usb 3-1: Manufacturer: syz [ 211.116541][ T24] usb 3-1: SerialNumber: syz [ 211.371811][ T24] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 211.665629][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 211.671719][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.674662][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 211.681129][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.687184][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 213.529965][ T1069] usb 3-1: USB disconnect, device number 10 [ 213.559490][ T1069] usblp1: removed [ 215.454551][ T2154] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 215.646263][ T2154] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.673032][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.685037][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 215.695249][ T2154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.709764][ T2154] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.719196][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.749665][ T2154] usb 4-1: config 0 descriptor?? [ 215.865728][ T1069] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 216.356310][ T1069] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 216.370865][ T1069] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.381687][ T1069] usb 3-1: config 0 has no interface number 0 [ 216.391533][ T1069] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 216.404658][ T1069] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.422946][ T1069] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 216.432435][ T1069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.440869][ T1069] usb 3-1: Product: syz [ 216.445649][ T1069] usb 3-1: Manufacturer: syz [ 216.450562][ T1069] usb 3-1: SerialNumber: syz [ 216.465103][ T1069] usb 3-1: config 0 descriptor?? [ 216.558659][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 216.570459][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 216.582737][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 216.599460][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 216.608382][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 216.620679][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 216.658975][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 216.672542][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 216.683614][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 217.254449][ T2154] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 217.348120][ T2154] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 217.409270][ T2154] usb 4-1: USB disconnect, device number 4 [ 217.853540][ T9] usb 5-1: USB disconnect, device number 8 [ 217.871048][ T9] usblp0: removed [ 217.945432][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 218.264537][ T8033] fido_id[8033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 218.278892][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 218.295892][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 218.331537][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.388830][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.429949][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.522030][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.594967][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.610276][ T8051] netlink: 892 bytes leftover after parsing attributes in process `syz.1.773'. [ 220.270168][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 220.741369][ T1069] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 220.880342][ T1069] usb 3-1: USB disconnect, device number 11 [ 221.438112][ T24] usb 1-1: usb_control_msg returned -71 [ 221.484854][ T24] usbtmc 1-1:16.0: can't read capabilities [ 221.547742][ T24] usb 1-1: USB disconnect, device number 6 [ 222.446626][ T8088] netlink: 892 bytes leftover after parsing attributes in process `syz.3.784'. [ 224.493119][ T8122] netlink: 892 bytes leftover after parsing attributes in process `syz.0.796'. [ 224.514348][ T2154] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 224.690636][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.741309][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.804346][ T2154] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 224.804375][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.976875][ T2154] usb 4-1: config 0 descriptor?? [ 225.449570][ T2154] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 225.995273][ T2154] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 226.666176][ T2154] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 227.158688][ T5931] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 228.837695][ T5868] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.244044][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 229.380073][ T5868] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 229.595800][ T5868] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 229.728159][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.769583][ T2154] usb 4-1: USB disconnect, device number 5 [ 229.973151][ T2154] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 244.265513][ T5868] usb 2-1: Product: syz [ 244.269842][ T5868] usb 2-1: Manufacturer: syz [ 244.274725][ C1] sched: DL replenish lagged too much [ 249.589811][ T5868] usb 2-1: SerialNumber: syz [ 252.097949][ T5868] usb 2-1: config 0 descriptor?? [ 252.135087][ T5868] usb 2-1: can't set config #0, error -71 [ 254.667224][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.678706][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.690476][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.697945][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.706623][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.716077][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.725725][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.733771][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.743030][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.750708][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.758849][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.784880][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.794457][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.803870][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.811965][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.820478][ T5158] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.837428][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.851146][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.862640][ T5158] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.870021][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.878211][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.888544][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.896799][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.930952][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.939913][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.589883][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.603573][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.440536][ T5868] usb 2-1: USB disconnect, device number 6 [ 260.305047][ T5158] Bluetooth: hci6: command tx timeout [ 260.310967][ T5158] Bluetooth: hci7: command tx timeout [ 260.317078][ T5846] Bluetooth: hci5: command tx timeout [ 260.323862][ T5846] Bluetooth: hci1: command tx timeout [ 260.335821][ T5845] Bluetooth: hci2: command tx timeout [ 262.384478][ T5158] Bluetooth: hci7: command tx timeout [ 262.389934][ T5158] Bluetooth: hci1: command tx timeout [ 262.395406][ T5846] Bluetooth: hci5: command tx timeout [ 262.400817][ T5846] Bluetooth: hci6: command tx timeout [ 264.464433][ T5845] Bluetooth: hci2: command tx timeout [ 264.469886][ T5845] Bluetooth: hci5: command tx timeout [ 264.475977][ T5843] Bluetooth: hci7: command tx timeout [ 268.645978][ T5846] Bluetooth: hci6: command tx timeout [ 268.651447][ T5846] Bluetooth: hci1: command tx timeout [ 268.656957][ T5158] Bluetooth: hci7: command tx timeout [ 268.662374][ T5158] Bluetooth: hci2: command tx timeout [ 271.034308][ T5846] Bluetooth: hci1: command tx timeout [ 271.039760][ T5846] Bluetooth: hci2: command tx timeout [ 271.045281][ T5846] Bluetooth: hci5: command tx timeout [ 271.050695][ T5846] Bluetooth: hci6: command tx timeout [ 271.245035][ T8148] syz_tun (unregistering): left promiscuous mode [ 271.820140][ T1111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.789593][ T8185] chnl_net:caif_netlink_parms(): no params data found [ 272.969251][ T8184] chnl_net:caif_netlink_parms(): no params data found [ 273.044605][ T8186] chnl_net:caif_netlink_parms(): no params data found [ 273.272567][ T8188] chnl_net:caif_netlink_parms(): no params data found [ 273.411068][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 274.058611][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.077731][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.092035][ T8185] bridge_slave_0: entered allmulticast mode [ 274.100480][ T8185] bridge_slave_0: entered promiscuous mode [ 274.237139][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.251011][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.260772][ T8185] bridge_slave_1: entered allmulticast mode [ 274.274377][ T8185] bridge_slave_1: entered promiscuous mode [ 274.337367][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.353174][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.361215][ T8186] bridge_slave_0: entered allmulticast mode [ 274.385979][ T8186] bridge_slave_0: entered promiscuous mode [ 274.476775][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.483983][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.492254][ T8184] bridge_slave_0: entered allmulticast mode [ 274.500535][ T8184] bridge_slave_0: entered promiscuous mode [ 274.616329][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.623493][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.639257][ T8186] bridge_slave_1: entered allmulticast mode [ 274.653194][ T8186] bridge_slave_1: entered promiscuous mode [ 274.712648][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.723964][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.734454][ T8184] bridge_slave_1: entered allmulticast mode [ 274.749791][ T8184] bridge_slave_1: entered promiscuous mode [ 274.843858][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.905788][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.913118][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.924713][ T8188] bridge_slave_0: entered allmulticast mode [ 274.943368][ T8188] bridge_slave_0: entered promiscuous mode [ 275.119741][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.131787][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.141106][ T8187] bridge_slave_0: entered allmulticast mode [ 275.157041][ T8187] bridge_slave_0: entered promiscuous mode [ 275.174033][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.309565][ T8186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.333987][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.354827][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.362091][ T8188] bridge_slave_1: entered allmulticast mode [ 275.378949][ T8188] bridge_slave_1: entered promiscuous mode [ 275.399819][ T8184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.413564][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.425438][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.432701][ T8187] bridge_slave_1: entered allmulticast mode [ 275.456740][ T8187] bridge_slave_1: entered promiscuous mode [ 275.598355][ T8186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.658748][ T8184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.876468][ T8185] team0: Port device team_slave_0 added [ 275.901843][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.058744][ T8185] team0: Port device team_slave_1 added [ 276.078387][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.160384][ T8188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.176714][ T8184] team0: Port device team_slave_0 added [ 276.303382][ T8186] team0: Port device team_slave_0 added [ 276.317897][ T8188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.336286][ T8184] team0: Port device team_slave_1 added [ 276.422764][ T8187] team0: Port device team_slave_0 added [ 276.449722][ T8187] team0: Port device team_slave_1 added [ 276.461344][ T8186] team0: Port device team_slave_1 added [ 276.533714][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.541956][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.580665][ T8185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.780342][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.796049][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.832154][ T8184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.864031][ T8188] team0: Port device team_slave_0 added [ 276.990085][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.008406][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.047937][ T8185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.060652][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.068253][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.096463][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.122636][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.139564][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.173310][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.185748][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.193082][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.228726][ T8186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.253997][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.262920][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.300373][ T8186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.319513][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.332558][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.370878][ T8184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.405064][ T8188] team0: Port device team_slave_1 added [ 277.781098][ T8187] hsr_slave_0: entered promiscuous mode [ 277.790293][ T8187] hsr_slave_1: entered promiscuous mode [ 277.802456][ T8187] debugfs: 'hsr0' already exists in 'hsr' [ 277.818132][ T8187] Cannot create hsr debugfs directory [ 277.824820][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.833083][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.862351][ T8188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.084053][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.095444][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.131030][ T8188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.239816][ T8185] hsr_slave_0: entered promiscuous mode [ 278.253717][ T8185] hsr_slave_1: entered promiscuous mode [ 278.270460][ T8185] debugfs: 'hsr0' already exists in 'hsr' [ 278.279533][ T8185] Cannot create hsr debugfs directory [ 278.360062][ T8184] hsr_slave_0: entered promiscuous mode [ 278.381723][ T8184] hsr_slave_1: entered promiscuous mode [ 278.393964][ T8184] debugfs: 'hsr0' already exists in 'hsr' [ 278.403272][ T8184] Cannot create hsr debugfs directory [ 278.451910][ T8186] hsr_slave_0: entered promiscuous mode [ 278.458706][ T8186] hsr_slave_1: entered promiscuous mode [ 278.485516][ T8186] debugfs: 'hsr0' already exists in 'hsr' [ 278.491337][ T8186] Cannot create hsr debugfs directory [ 278.937834][ T8188] hsr_slave_0: entered promiscuous mode [ 278.951845][ T8188] hsr_slave_1: entered promiscuous mode [ 278.960768][ T8188] debugfs: 'hsr0' already exists in 'hsr' [ 278.968594][ T8188] Cannot create hsr debugfs directory [ 280.164890][ T8185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.224923][ T8185] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.271369][ T8185] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.310782][ T8185] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.519380][ T8184] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 280.554059][ T8184] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.648902][ T8184] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.705282][ T8184] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.010876][ T8186] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 281.070927][ T8186] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 281.142634][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.170633][ T8186] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 281.272116][ T8186] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 281.483081][ T8185] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.540856][ T8185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.551386][ T8185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.625291][ T8187] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 281.649184][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.656434][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.697211][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.704419][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.747891][ T8187] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 281.852131][ T8187] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 281.964167][ T8187] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 282.018437][ T8184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.207111][ T8184] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.303879][ T8184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.323196][ T8184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.409498][ T8184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.470176][ T8188] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 282.549159][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.556364][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.577766][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.584944][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.685636][ T8188] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 282.731771][ T8185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.799862][ T8188] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 282.851591][ T8188] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 283.237864][ T8186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.326342][ T8184] veth0_vlan: entered promiscuous mode [ 283.410535][ T8185] veth0_vlan: entered promiscuous mode [ 283.430147][ T8186] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.481550][ T8185] veth1_vlan: entered promiscuous mode [ 283.529162][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.536374][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.556514][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.563673][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.622678][ T8184] veth1_vlan: entered promiscuous mode [ 283.876279][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.939498][ T8184] veth0_macvtap: entered promiscuous mode [ 284.008268][ T8185] veth0_macvtap: entered promiscuous mode [ 284.023523][ T8184] veth1_macvtap: entered promiscuous mode [ 284.079928][ T8185] veth1_macvtap: entered promiscuous mode [ 284.172664][ T8187] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.211378][ T8184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.300008][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.353592][ T8188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.372872][ T8184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.406704][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.413883][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.483043][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.522002][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.549607][ T8188] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.581429][ T8186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.643905][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.670592][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.677883][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.758219][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.776635][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.807451][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.814666][ T8164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.864013][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.970728][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.977968][ T8164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.031082][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.141553][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.173036][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.338347][ T8188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.474027][ T8186] veth0_vlan: entered promiscuous mode [ 285.553128][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.574817][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.643850][ T8187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.684745][ T8186] veth1_vlan: entered promiscuous mode [ 285.708762][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.739723][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.755946][ T8188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.943038][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.982657][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.017720][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.065143][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.263572][ T8186] veth0_macvtap: entered promiscuous mode [ 286.303798][ T8188] veth0_vlan: entered promiscuous mode [ 286.337297][ T8187] veth0_vlan: entered promiscuous mode [ 286.352598][ T8186] veth1_macvtap: entered promiscuous mode [ 286.519884][ T8188] veth1_vlan: entered promiscuous mode [ 286.601935][ T8187] veth1_vlan: entered promiscuous mode [ 286.667676][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.751829][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.890996][ T1335] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.927518][ T1335] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.001087][ T1335] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.043513][ T1335] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.210957][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.6.813'. [ 287.234146][ T8188] veth0_macvtap: entered promiscuous mode [ 287.271463][ T8187] veth0_macvtap: entered promiscuous mode [ 287.333912][ T8188] veth1_macvtap: entered promiscuous mode [ 287.427936][ T8187] veth1_macvtap: entered promiscuous mode [ 287.674029][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.832558][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.929936][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.021698][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.118073][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.161909][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.761921][ T1111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.896804][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.940914][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.072288][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 305.800764][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.133081][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.350131][ T1111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.334415][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.778140][ T8285] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.194764][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.201094][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.254791][ T8285] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.298066][ T8275] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.504196][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 436.511288][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8282/1:b..l P8292/1:b..l P1004/1:b..l P8186/1:b..l [ 436.522890][ C1] rcu: (detected by 1, t=10502 jiffies, g=26545, q=850378 ncpus=2) [ 436.530890][ C1] task:syz-executor state:R running task stack:21544 pid:8186 tgid:8186 ppid:1 task_flags:0x40054c flags:0x20004006 [ 436.544986][ C1] Call Trace: [ 436.548304][ C1] [ 436.551264][ C1] __schedule+0x1737/0x4d30 [ 436.555809][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 436.561103][ C1] ? __pfx___schedule+0x10/0x10 [ 436.566019][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 436.571311][ C1] preempt_schedule_irq+0xb5/0x150 [ 436.576427][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 436.582168][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 436.588003][ C1] irqentry_exit+0x6f/0x90 [ 436.592418][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.598416][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 436.603706][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab ae fc 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 436.623305][ C1] RSP: 0018:ffffc9000459f498 EFLAGS: 00000206 [ 436.629369][ C1] RAX: 9de4141e026f6900 RBX: 0000000000000000 RCX: 9de4141e026f6900 [ 436.637330][ C1] RDX: 0000000000000001 RSI: ffffffff8db664d4 RDI: ffffffff8be30a80 [ 436.645297][ C1] RBP: ffffffff8172cd05 R08: 0000000000000000 R09: ffffffff8172cd05 [ 436.653276][ C1] R10: ffffc9000459f658 R11: ffffffff81ac39b0 R12: 0000000000000002 [ 436.661238][ C1] R13: ffffffff8e13c5a0 R14: 0000000000000000 R15: 0000000000000246 [ 436.669229][ C1] ? unwind_next_frame+0xa5/0x2390 [ 436.674341][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 436.680493][ C1] ? unwind_next_frame+0xa5/0x2390 [ 436.685629][ C1] ? unwind_next_frame+0xa5/0x2390 [ 436.690731][ C1] ? __do_fast_syscall_32+0x1f4/0x2b0 [ 436.696100][ C1] ? unwind_next_frame+0xa5/0x2390 [ 436.701209][ C1] unwind_next_frame+0xc2/0x2390 [ 436.706160][ C1] ? unwind_next_frame+0xa5/0x2390 [ 436.711270][ C1] ? unwind_next_frame+0xa5/0x2390 [ 436.716368][ C1] ? exit_to_user_mode_loop+0x75/0x110 [ 436.721825][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 436.727992][ C1] arch_stack_walk+0x11c/0x150 [ 436.732759][ C1] ? __do_fast_syscall_32+0x1f4/0x2b0 [ 436.738141][ C1] stack_trace_save+0x9c/0xe0 [ 436.742814][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 436.748194][ C1] save_stack+0xf5/0x1f0 [ 436.752441][ C1] ? __pfx_save_stack+0x10/0x10 [ 436.757291][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 436.762573][ C1] ? vfree+0x25a/0x400 [ 436.766646][ C1] ? kcov_close+0x28/0x50 [ 436.770976][ C1] ? __fput+0x449/0xa70 [ 436.775127][ C1] ? task_work_run+0x1d1/0x260 [ 436.779883][ C1] ? do_exit+0x6b5/0x2300 [ 436.784215][ C1] ? do_group_exit+0x21c/0x2d0 [ 436.788975][ C1] ? get_signal+0x1286/0x1340 [ 436.793654][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 436.799378][ C1] ? exit_to_user_mode_loop+0x75/0x110 [ 436.804945][ C1] ? __do_fast_syscall_32+0x1f4/0x2b0 [ 436.810324][ C1] ? page_ext_put+0x97/0xc0 [ 436.814833][ C1] __reset_page_owner+0x71/0x1f0 [ 436.819776][ C1] __free_frozen_pages+0xc71/0xe70 [ 436.824888][ C1] vfree+0x25a/0x400 [ 436.828797][ C1] ? __pfx_kcov_close+0x10/0x10 [ 436.833663][ C1] kcov_close+0x28/0x50 [ 436.837829][ C1] __fput+0x449/0xa70 [ 436.841818][ C1] task_work_run+0x1d1/0x260 [ 436.846410][ C1] ? __pfx_task_work_run+0x10/0x10 [ 436.851545][ C1] ? kmem_cache_free+0x18f/0x400 [ 436.856510][ C1] do_exit+0x6b5/0x2300 [ 436.860692][ C1] ? do_raw_spin_lock+0x121/0x290 [ 436.865727][ C1] ? __pfx_do_exit+0x10/0x10 [ 436.870327][ C1] do_group_exit+0x21c/0x2d0 [ 436.875015][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.880212][ C1] get_signal+0x1286/0x1340 [ 436.884725][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 436.890274][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.895470][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 436.901637][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 436.907102][ C1] exit_to_user_mode_loop+0x75/0x110 [ 436.912406][ C1] __do_fast_syscall_32+0x1f4/0x2b0 [ 436.917619][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.922818][ C1] do_fast_syscall_32+0x34/0x80 [ 436.927668][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 436.933992][ C1] RIP: 0023:0xf7f85539 [ 436.938065][ C1] RSP: 002b:00000000f756fe74 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 436.946474][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000008914 [ 436.954451][ C1] RDX: 00000000f756fec0 RSI: 00000000f7414ff4 RDI: 0000000000000005 [ 436.962437][ C1] RBP: 0000000000000048 R08: 0000000000000000 R09: 0000000000000000 [ 436.970402][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 436.978369][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.986347][ C1] [ 436.989358][ C1] task:kworker/u8:6 state:R running task stack:24072 pid:1004 tgid:1004 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 437.002917][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 437.009173][ C1] Call Trace: [ 437.012463][ C1] [ 437.015411][ C1] __schedule+0x1737/0x4d30 [ 437.019929][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.025033][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 437.030311][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 437.035590][ C1] ? __pfx___schedule+0x10/0x10 [ 437.040444][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.045557][ C1] ? __lock_acquire+0xab9/0xd20 [ 437.050415][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 437.055714][ C1] preempt_schedule_irq+0xb5/0x150 [ 437.060832][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 437.066604][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 437.072423][ C1] irqentry_exit+0x6f/0x90 [ 437.076846][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.082823][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 437.088109][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab ae fc 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 437.107795][ C1] RSP: 0018:ffffc90003bee9d8 EFLAGS: 00000206 [ 437.113865][ C1] RAX: 1c28e24ee0ed7500 RBX: 0000000000000000 RCX: 1c28e24ee0ed7500 [ 437.121854][ C1] RDX: 0000000000000000 RSI: ffffffff8db664d4 RDI: ffffffff8be30a80 [ 437.129822][ C1] RBP: ffffffff8172cd05 R08: 0000000000000000 R09: ffffffff8172cd05 [ 437.137787][ C1] R10: ffffc90003beeb98 R11: ffffffff81ac39b0 R12: 0000000000000002 [ 437.145768][ C1] R13: ffffffff8e13c5a0 R14: 0000000000000000 R15: 0000000000000246 [ 437.153733][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.158838][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.165009][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.170147][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.175261][ C1] ? ret_from_fork+0x3fc/0x770 [ 437.180029][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.185129][ C1] unwind_next_frame+0xc2/0x2390 [ 437.190077][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.195180][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.200278][ C1] ? kthread+0x711/0x8a0 [ 437.204514][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.210660][ C1] arch_stack_walk+0x11c/0x150 [ 437.215425][ C1] ? ret_from_fork+0x3fc/0x770 [ 437.220191][ C1] stack_trace_save+0x9c/0xe0 [ 437.224864][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 437.230244][ C1] kasan_save_track+0x3e/0x80 [ 437.234919][ C1] ? kasan_save_track+0x3e/0x80 [ 437.239765][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 437.244541][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 437.249565][ C1] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 437.255973][ C1] ? cfg80211_inform_bss_data+0x1fb/0x3b30 [ 437.261770][ C1] ? cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 437.268020][ C1] ? ieee80211_bss_info_update+0x746/0x9e0 [ 437.273829][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 437.280067][ C1] ? ieee80211_iface_work+0x85f/0x12d0 [ 437.285522][ C1] ? cfg80211_wiphy_work+0x2df/0x460 [ 437.290831][ C1] ? process_scheduled_works+0xade/0x17b0 [ 437.296552][ C1] ? worker_thread+0x8a0/0xda0 [ 437.301317][ C1] ? kthread+0x711/0x8a0 [ 437.305554][ C1] ? ret_from_fork+0x3fc/0x770 [ 437.310348][ C1] __kasan_kmalloc+0x93/0xb0 [ 437.314961][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 437.319813][ C1] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 437.326227][ C1] cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 437.332475][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 437.339170][ C1] ? _ieee802_11_parse_elems_full+0x44aa/0x4550 [ 437.345409][ C1] ? arch_stack_walk+0x11c/0x150 [ 437.350346][ C1] ? cfg80211_inform_bss_data+0x1e8/0x3b30 [ 437.356153][ C1] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 437.361818][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 437.367938][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 437.374437][ C1] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 437.380516][ C1] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 437.386329][ C1] ieee80211_bss_info_update+0x746/0x9e0 [ 437.391977][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 437.398133][ C1] ? sta_info_get+0x4f/0x2a0 [ 437.402734][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 437.408977][ C1] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 437.415053][ C1] ? worker_thread+0x8a0/0xda0 [ 437.419819][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 437.424779][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 437.431015][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 437.437519][ C1] ? __lock_acquire+0xab9/0xd20 [ 437.442394][ C1] ieee80211_iface_work+0x85f/0x12d0 [ 437.447775][ C1] cfg80211_wiphy_work+0x2df/0x460 [ 437.452884][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 437.458612][ C1] process_scheduled_works+0xade/0x17b0 [ 437.464220][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.470221][ C1] worker_thread+0x8a0/0xda0 [ 437.474851][ C1] kthread+0x711/0x8a0 [ 437.478923][ C1] ? __pfx_worker_thread+0x10/0x10 [ 437.484035][ C1] ? __pfx_kthread+0x10/0x10 [ 437.488621][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.493831][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.499025][ C1] ? __pfx_kthread+0x10/0x10 [ 437.503645][ C1] ret_from_fork+0x3fc/0x770 [ 437.508240][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 437.513373][ C1] ? __switch_to_asm+0x39/0x70 [ 437.518158][ C1] ? __switch_to_asm+0x33/0x70 [ 437.522915][ C1] ? __pfx_kthread+0x10/0x10 [ 437.527508][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.532277][ C1] [ 437.535286][ C1] task:syz-executor state:R running task stack:24104 pid:8292 tgid:8292 ppid:5826 task_flags:0x400000 flags:0x20004000 [ 437.548775][ C1] Call Trace: [ 437.552050][ C1] [ 437.554999][ C1] __schedule+0x1737/0x4d30 [ 437.559526][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.564644][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 437.569954][ C1] ? __pfx___schedule+0x10/0x10 [ 437.574837][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 437.580144][ C1] preempt_schedule_irq+0xb5/0x150 [ 437.585308][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 437.591048][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 437.596864][ C1] irqentry_exit+0x6f/0x90 [ 437.601295][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.607282][ C1] RIP: 0010:lock_acquire+0xa9/0x360 [ 437.612491][ C1] Code: b4 24 90 00 00 00 4c 89 ef e8 33 3d 85 00 83 3d 9c 4e 03 0e 00 0f 84 fa 00 00 00 65 8b 05 8f ef fc 10 85 c0 0f 85 eb 00 00 00 <65> 48 8b 04 25 08 20 9a 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 [ 437.632112][ C1] RSP: 0018:ffffc900035d6ed8 EFLAGS: 00000246 [ 437.638182][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: cc6b0943d582db00 [ 437.646153][ C1] RDX: 0000000000000000 RSI: ffffffff8172cd22 RDI: 1ffffffff1c278b4 [ 437.654122][ C1] RBP: ffffffff8172cd05 R08: 0000000000000000 R09: 0000000000000000 [ 437.662106][ C1] R10: ffffc900035d7098 R11: ffffffff81ac39b0 R12: 0000000000000002 [ 437.670095][ C1] R13: ffffffff8e13c5a0 R14: 0000000000000000 R15: 0000000000000000 [ 437.678100][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.683226][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.689394][ C1] ? unwind_next_frame+0xc2/0x2390 [ 437.694509][ C1] ? lock_acquire+0x8d/0x360 [ 437.699106][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.704237][ C1] ? do_filp_open+0x1fa/0x410 [ 437.708963][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.714074][ C1] unwind_next_frame+0xc2/0x2390 [ 437.719014][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.724154][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.729287][ C1] ? path_openat+0x2ee5/0x3830 [ 437.734052][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.740199][ C1] arch_stack_walk+0x11c/0x150 [ 437.744959][ C1] ? do_filp_open+0x1fa/0x410 [ 437.749647][ C1] stack_trace_save+0x9c/0xe0 [ 437.754352][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 437.759745][ C1] save_stack+0xf5/0x1f0 [ 437.764011][ C1] ? __pfx_save_stack+0x10/0x10 [ 437.768874][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 437.774199][ C1] ? __put_partials+0x156/0x1a0 [ 437.779087][ C1] ? put_cpu_partial+0x17c/0x250 [ 437.784058][ C1] ? __slab_free+0x2d5/0x3c0 [ 437.788667][ C1] ? qlist_free_all+0x97/0x140 [ 437.793524][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 437.799153][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 437.803917][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 437.808947][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 437.814676][ C1] ? tomoyo_check_open_permission+0x1c1/0x3b0 [ 437.820740][ C1] ? security_file_open+0xb1/0x270 [ 437.825869][ C1] ? do_dentry_open+0x35e/0x1970 [ 437.830802][ C1] ? vfs_open+0x3b/0x340 [ 437.835035][ C1] ? path_openat+0x2ee5/0x3830 [ 437.839794][ C1] ? do_filp_open+0x1fa/0x410 [ 437.844474][ C1] __reset_page_owner+0x71/0x1f0 [ 437.849422][ C1] __free_frozen_pages+0xc71/0xe70 [ 437.854538][ C1] __put_partials+0x156/0x1a0 [ 437.859242][ C1] put_cpu_partial+0x17c/0x250 [ 437.864006][ C1] ? put_cpu_partial+0x6d/0x250 [ 437.868859][ C1] __slab_free+0x2d5/0x3c0 [ 437.873282][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 437.879174][ C1] ? __phys_addr+0xd3/0x180 [ 437.883701][ C1] qlist_free_all+0x97/0x140 [ 437.888301][ C1] kasan_quarantine_reduce+0x148/0x160 [ 437.893770][ C1] __kasan_kmalloc+0x22/0xb0 [ 437.898384][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 437.903249][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 437.908986][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 437.914551][ C1] tomoyo_check_open_permission+0x1c1/0x3b0 [ 437.920443][ C1] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 437.926502][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 437.932938][ C1] ? mnt_get_write_access+0x68/0x2a0 [ 437.938229][ C1] ? tomoyo_file_open+0x165/0x220 [ 437.943289][ C1] security_file_open+0xb1/0x270 [ 437.948239][ C1] do_dentry_open+0x35e/0x1970 [ 437.953035][ C1] vfs_open+0x3b/0x340 [ 437.957124][ C1] ? path_openat+0x2ecd/0x3830 [ 437.961888][ C1] path_openat+0x2ee5/0x3830 [ 437.966492][ C1] ? arch_stack_walk+0xfc/0x150 [ 437.971364][ C1] ? __lock_acquire+0xab9/0xd20 [ 437.976223][ C1] ? __pfx_path_openat+0x10/0x10 [ 437.981159][ C1] ? do_fast_syscall_32+0x34/0x80 [ 437.986196][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.992717][ C1] do_filp_open+0x1fa/0x410 [ 437.997223][ C1] ? __lock_acquire+0xab9/0xd20 [ 438.002081][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 438.007147][ C1] ? _raw_spin_unlock+0x28/0x50 [ 438.012001][ C1] ? alloc_fd+0x64c/0x6c0 [ 438.016362][ C1] do_sys_openat2+0x121/0x1c0 [ 438.021036][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.026233][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.031468][ C1] __ia32_compat_sys_openat+0x131/0x160 [ 438.037046][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 438.042183][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.047394][ C1] do_fast_syscall_32+0x34/0x80 [ 438.052258][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.058587][ C1] RIP: 0023:0xf7f76539 [ 438.062656][ C1] RSP: 002b:00000000fff5c400 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 438.071088][ C1] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7286b89 [ 438.079076][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7404ff4 [ 438.087048][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 438.095016][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 438.102980][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.110955][ C1] [ 438.113995][ C1] task:syz.6.818 state:R running task stack:24856 pid:8282 tgid:8278 ppid:8184 task_flags:0x40044c flags:0x20004006 [ 438.127474][ C1] Call Trace: [ 438.130767][ C1] [ 438.133700][ C1] __schedule+0x1737/0x4d30 [ 438.138223][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 438.143507][ C1] ? __pfx___schedule+0x10/0x10 [ 438.148372][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 438.154274][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 438.160213][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 438.165521][ C1] preempt_schedule_irq+0xb5/0x150 [ 438.170650][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 438.176486][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 438.182294][ C1] irqentry_exit+0x6f/0x90 [ 438.186718][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.192710][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 438.198033][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab ae fc 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 438.217636][ C1] RSP: 0018:ffffc90003d2f438 EFLAGS: 00000206 [ 438.223701][ C1] RAX: e9248d70a97f1d00 RBX: 0000000000000000 RCX: e9248d70a97f1d00 [ 438.231662][ C1] RDX: 0000000000000001 RSI: ffffffff8db664d4 RDI: ffffffff8be30a80 [ 438.239626][ C1] RBP: ffffffff8172cd05 R08: 0000000000000000 R09: ffffffff8172cd05 [ 438.247588][ C1] R10: ffffc90003d2f658 R11: fffff520007a5ecd R12: 0000000000000002 [ 438.255579][ C1] R13: ffffffff8e13c5a0 R14: 0000000000000000 R15: 0000000000000246 [ 438.263560][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.268676][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.273819][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.278930][ C1] ? arch_stack_walk+0xe4/0x150 [ 438.283778][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.288892][ C1] unwind_next_frame+0xc2/0x2390 [ 438.293845][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.298983][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.304096][ C1] ? __unwind_start+0xf8/0x760 [ 438.308865][ C1] __unwind_start+0x5b9/0x760 [ 438.313545][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.319696][ C1] arch_stack_walk+0xe4/0x150 [ 438.324393][ C1] ? arch_stack_walk+0xe4/0x150 [ 438.329241][ C1] stack_trace_save+0x9c/0xe0 [ 438.333917][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 438.339301][ C1] save_stack+0xf5/0x1f0 [ 438.343551][ C1] ? __pfx_save_stack+0x10/0x10 [ 438.348409][ C1] ? page_ext_put+0x97/0xc0 [ 438.352917][ C1] __reset_page_owner+0x71/0x1f0 [ 438.357877][ C1] __free_frozen_pages+0xc71/0xe70 [ 438.362998][ C1] vfree+0x25a/0x400 [ 438.366899][ C1] ? __pfx_kcov_close+0x10/0x10 [ 438.371753][ C1] kcov_close+0x28/0x50 [ 438.375905][ C1] __fput+0x449/0xa70 [ 438.379896][ C1] task_work_run+0x1d1/0x260 [ 438.384489][ C1] ? __pfx_task_work_run+0x10/0x10 [ 438.389599][ C1] ? kmem_cache_free+0x18f/0x400 [ 438.394552][ C1] do_exit+0x6b5/0x2300 [ 438.398718][ C1] ? do_raw_spin_lock+0x121/0x290 [ 438.403737][ C1] ? __pfx_do_exit+0x10/0x10 [ 438.408332][ C1] do_group_exit+0x21c/0x2d0 [ 438.412941][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.418146][ C1] get_signal+0x1286/0x1340 [ 438.422665][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 438.428213][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 438.434366][ C1] ? __sys_recvmmsg+0x19d/0x280 [ 438.439232][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 438.444690][ C1] exit_to_user_mode_loop+0x75/0x110 [ 438.449992][ C1] __do_fast_syscall_32+0x1f4/0x2b0 [ 438.455202][ C1] do_fast_syscall_32+0x34/0x80 [ 438.460052][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.466376][ C1] RIP: 0023:0xf7fc8539 [ 438.470434][ C1] RSP: 002b:00000000f50c555c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 438.478843][ C1] RAX: 0000000000010106 RBX: 0000000000000003 RCX: 00000000800000c0 [ 438.486807][ C1] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 438.494773][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.502761][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 438.510729][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.518726][ C1] [ 438.521741][ C1] rcu: rcu_preempt kthread starved for 10205 jiffies! g26545 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 438.532921][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 438.542877][ C1] rcu: RCU grace-period kthread stack dump: [ 438.548759][ C1] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 438.562242][ C1] Call Trace: [ 438.565514][ C1] [ 438.568440][ C1] __schedule+0x1737/0x4d30 [ 438.572958][ C1] ? schedule+0x165/0x360 [ 438.577292][ C1] ? __pfx___schedule+0x10/0x10 [ 438.582154][ C1] ? schedule+0x91/0x360 [ 438.586396][ C1] schedule+0x165/0x360 [ 438.590553][ C1] schedule_timeout+0x12b/0x270 [ 438.595398][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 438.600765][ C1] ? __pfx_process_timeout+0x10/0x10 [ 438.606054][ C1] ? prepare_to_swait_event+0x341/0x380 [ 438.611616][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 438.616476][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 438.622657][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 438.628046][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 438.633251][ C1] rcu_gp_kthread+0x99/0x390 [ 438.637845][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 438.643042][ C1] ? __kthread_parkme+0x7b/0x200 [ 438.648035][ C1] ? __kthread_parkme+0x1a1/0x200 [ 438.653072][ C1] kthread+0x711/0x8a0 [ 438.657161][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 438.662368][ C1] ? __pfx_kthread+0x10/0x10 [ 438.666967][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.672180][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.677392][ C1] ? __pfx_kthread+0x10/0x10 [ 438.681988][ C1] ret_from_fork+0x3fc/0x770 [ 438.686593][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 438.691714][ C1] ? __switch_to_asm+0x39/0x70 [ 438.696481][ C1] ? __switch_to_asm+0x33/0x70 [ 438.701250][ C1] ? __pfx_kthread+0x10/0x10 [ 438.705874][ C1] ret_from_fork_asm+0x1a/0x30 [ 438.710651][ C1] [ 438.713667][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 438.719993][ C1] Sending NMI from CPU 1 to CPUs 0: [ 438.725216][ C0] NMI backtrace for cpu 0 [ 438.725243][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 438.725262][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.725272][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 438.725297][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 5f 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 438.725311][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 438.725327][ C0] RAX: ae1731ff52a48e00 RBX: ffffffff81969b38 RCX: ae1731ff52a48e00 [ 438.725340][ C0] RDX: 0000000000000001 RSI: ffffffff8d979737 RDI: ffffffff8be30a80 [ 438.725351][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 438.725363][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa08df0 [ 438.725375][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a18 [ 438.725385][ C0] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 438.725398][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.725409][ C0] CR2: 000055d5291aaa58 CR3: 000000007c396000 CR4: 00000000003526f0 [ 438.725424][ C0] Call Trace: [ 438.725431][ C0] [ 438.725437][ C0] default_idle+0x13/0x20 [ 438.725452][ C0] default_idle_call+0x74/0xb0 [ 438.725467][ C0] do_idle+0x1e8/0x510 [ 438.725495][ C0] ? __pfx_do_idle+0x10/0x10 [ 438.725535][ C0] cpu_startup_entry+0x44/0x60 [ 438.725559][ C0] rest_init+0x2de/0x300 [ 438.725576][ C0] start_kernel+0x3a9/0x410 [ 438.725599][ C0] x86_64_start_reservations+0x24/0x30 [ 438.725625][ C0] x86_64_start_kernel+0x143/0x1c0 [ 438.725650][ C0] common_startup_64+0x13e/0x147 [ 438.725678][ C0] [ 440.525211][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.531652][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.676767][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.683091][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.771331][ T5848] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 442.786990][ T5840] Bluetooth: hci7: command 0x0406 tx timeout [ 442.793124][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 442.800082][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 442.883278][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.080357][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 443.173864][ T8292] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 443.322739][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 445.571765][ T5848] Bluetooth: hci3: Opcode 0x1001 failed: -110 [ 445.585231][ T8286] Bluetooth: hci3: Opcode 0x0c03 failed: -4