last executing test programs: 16.941708864s ago: executing program 1 (id=319): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f00000005c0)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0x1, '\\', 'S\'w', 0x2}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x109480, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000180)={0xca, 0x6, 0x12c, 0x0, "8935a5a852b6c1d7e05f649b1cc6464fe1f773cfa2baae0196b6fd91420f656057cae743bf944d110c5c57ad0b34f4b3ebd84ef586f50a69cd074326fa9e11cfe5475a8ea912bbe036858a9244f0e91bf1077987de8c998d91aa7b0c95bf9b8a4722da0d448a73a46debec15289179e04945486452bec44e81d7aa08d60785215e055fa6bce35280bbc31fac0cadef5b6f22a161f681a78e8da4b922b36f5143545cd8e8674c3aa236e5a8e673bdde60db72"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000003140)=""/4107, 0x100b}], 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) sendfile(r4, r4, 0x0, 0x8) bind(r4, &(0x7f00000001c0)=@hci={0x1f, 0x0, 0x4}, 0x80) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/dev/iommu\x00'}]}, 0x17) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12015002a10c8f08120a105d0b70010203010902390001040090100904"], &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) r6 = fsopen(&(0x7f0000000080)='erofs\x00', 0x1) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 13.753847695s ago: executing program 1 (id=327): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f0000000300)={0xc}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsetxattr(r1, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r4, r4) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x2020) socket$kcm(0x10, 0x2, 0x0) 13.166667924s ago: executing program 2 (id=329): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f0000000140)='fuseblk\x00', 0x1) socket(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 12.945078731s ago: executing program 2 (id=330): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 11.781529797s ago: executing program 2 (id=333): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x9, r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) 10.10089511s ago: executing program 2 (id=335): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f00000005c0)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0x1, '\\', 'S\'w', 0x2}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x109480, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000180)={0xca, 0x6, 0x12c, 0x0, "8935a5a852b6c1d7e05f649b1cc6464fe1f773cfa2baae0196b6fd91420f656057cae743bf944d110c5c57ad0b34f4b3ebd84ef586f50a69cd074326fa9e11cfe5475a8ea912bbe036858a9244f0e91bf1077987de8c998d91aa7b0c95bf9b8a4722da0d448a73a46debec15289179e04945486452bec44e81d7aa08d60785215e055fa6bce35280bbc31fac0cadef5b6f22a161f681a78e8da4b922b36f5143545cd8e8674c3aa236e5a8e673bdde60db72"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000003140)=""/4107, 0x100b}], 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) sendfile(r4, r4, 0x0, 0x8) bind(r4, &(0x7f00000001c0)=@hci={0x1f, 0x0, 0x4}, 0x80) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/dev/iommu\x00'}]}, 0x17) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12015002a10c8f08120a105d0b70010203010902390001040090100904"], &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) r6 = fsopen(&(0x7f0000000080)='erofs\x00', 0x1) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 8.879813579s ago: executing program 1 (id=337): openat$nvram(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ee1, 0x3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000"], 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xc, @mcast2, 0x8f}, 0x1c) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x7615cb14, 0x101]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.381550436s ago: executing program 0 (id=341): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.387836188s ago: executing program 0 (id=343): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='stat\x00') preadv(r5, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) 5.519873186s ago: executing program 3 (id=344): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/2, 0x2}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000500)}], 0x7, &(0x7f00000005c0)=""/142, 0x8e}, 0xf}, {{&(0x7f0000000680)=@tipc, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b80)=""/64, 0x40}, 0x9}], 0x2, 0x100, &(0x7f0000000c80)={r1, r2+10000000}) 5.315650482s ago: executing program 0 (id=345): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f0000000300)={0xc}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r1, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r4, r4) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x2020) socket$kcm(0x10, 0x2, 0x0) 5.156616467s ago: executing program 2 (id=346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40044}, 0x20000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4.015899123s ago: executing program 3 (id=347): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.954272615s ago: executing program 2 (id=348): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x20, 0xe}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.856554698s ago: executing program 1 (id=349): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f0000000140)='fuseblk\x00', 0x1) socket(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 3.767707921s ago: executing program 3 (id=350): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba06", 0x1b}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be1", 0x21b}], 0x1}}], 0x2, 0x2090) 3.648420065s ago: executing program 1 (id=351): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.47796842s ago: executing program 3 (id=352): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f000050f000/0x3000)=nil, 0x2) 2.873161709s ago: executing program 0 (id=353): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) semget(0x1, 0x4, 0x69c) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r6, 0x0, &(0x7f0000000180)) 2.542947929s ago: executing program 1 (id=354): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f00000005c0)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0x1, '\\', 'S\'w', 0x2}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x109480, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000180)={0xca, 0x6, 0x12c, 0x0, "8935a5a852b6c1d7e05f649b1cc6464fe1f773cfa2baae0196b6fd91420f656057cae743bf944d110c5c57ad0b34f4b3ebd84ef586f50a69cd074326fa9e11cfe5475a8ea912bbe036858a9244f0e91bf1077987de8c998d91aa7b0c95bf9b8a4722da0d448a73a46debec15289179e04945486452bec44e81d7aa08d60785215e055fa6bce35280bbc31fac0cadef5b6f22a161f681a78e8da4b922b36f5143545cd8e8674c3aa236e5a8e673bdde60db72"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000003140)=""/4107, 0x100b}], 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) sendfile(r4, r4, 0x0, 0x8) bind(r4, &(0x7f00000001c0)=@hci={0x1f, 0x0, 0x4}, 0x80) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/dev/iommu\x00'}]}, 0x17) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12015002a10c8f08120a105d0b70010203010902390001040090100904"], &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) r6 = fsopen(&(0x7f0000000080)='erofs\x00', 0x1) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.379511056s ago: executing program 0 (id=355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r5, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) 1.379324356s ago: executing program 3 (id=356): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/2, 0x2}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000500)}], 0x7, &(0x7f00000005c0)=""/142, 0x8e}, 0xf}, {{&(0x7f0000000680)=@tipc, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b80)=""/64, 0x40}, 0x9}], 0x2, 0x100, &(0x7f0000000c80)={r1, r2+10000000}) 443.731996ms ago: executing program 3 (id=357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40044}, 0x20000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 0s ago: executing program 0 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 66.884506][ T5758] cgroup: Unknown subsys name 'net' [ 67.013326][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.399248][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.421718][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.430932][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.435038][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.446503][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.454719][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.462158][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.471970][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.477656][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.479116][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.498890][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.507172][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.514662][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.516858][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.529772][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.537444][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.545430][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.554003][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.561675][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.570032][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.580071][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.587699][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.595169][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.603151][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.611328][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.911224][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 71.022894][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.099984][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 71.164710][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.173035][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.182161][ T5771] bridge_slave_0: entered allmulticast mode [ 71.189684][ T5771] bridge_slave_0: entered promiscuous mode [ 71.219546][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.226849][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.234033][ T5771] bridge_slave_1: entered allmulticast mode [ 71.241198][ T5771] bridge_slave_1: entered promiscuous mode [ 71.248437][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 71.323006][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.330370][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.338004][ T5772] bridge_slave_0: entered allmulticast mode [ 71.344726][ T5772] bridge_slave_0: entered promiscuous mode [ 71.354596][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.384302][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.391752][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.399654][ T5772] bridge_slave_1: entered allmulticast mode [ 71.406431][ T5772] bridge_slave_1: entered promiscuous mode [ 71.414752][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.442077][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.450379][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.458337][ T5769] bridge_slave_0: entered allmulticast mode [ 71.465060][ T5769] bridge_slave_0: entered promiscuous mode [ 71.493770][ T5771] team0: Port device team_slave_0 added [ 71.504172][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.511447][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.519063][ T5769] bridge_slave_1: entered allmulticast mode [ 71.525894][ T5769] bridge_slave_1: entered promiscuous mode [ 71.552081][ T5771] team0: Port device team_slave_1 added [ 71.574857][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.581753][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.595098][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.612166][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.621367][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.650314][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.675395][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.686998][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.697418][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.704467][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.731344][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.743146][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.752711][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.760339][ T5770] bridge_slave_0: entered allmulticast mode [ 71.767613][ T5770] bridge_slave_0: entered promiscuous mode [ 71.775745][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.785257][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.792853][ T5770] bridge_slave_1: entered allmulticast mode [ 71.801970][ T5770] bridge_slave_1: entered promiscuous mode [ 71.828250][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.863497][ T5772] team0: Port device team_slave_0 added [ 71.883942][ T5769] team0: Port device team_slave_0 added [ 71.903928][ T5772] team0: Port device team_slave_1 added [ 71.937332][ T5769] team0: Port device team_slave_1 added [ 71.945046][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.963286][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.971185][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.997755][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.020250][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.040974][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.048385][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.074701][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.111599][ T5771] hsr_slave_0: entered promiscuous mode [ 72.120257][ T5771] hsr_slave_1: entered promiscuous mode [ 72.128742][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.135730][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.161827][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.174186][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.181255][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.207370][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.257641][ T5770] team0: Port device team_slave_0 added [ 72.300587][ T5770] team0: Port device team_slave_1 added [ 72.312876][ T5772] hsr_slave_0: entered promiscuous mode [ 72.319390][ T5772] hsr_slave_1: entered promiscuous mode [ 72.325425][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.333591][ T5772] Cannot create hsr debugfs directory [ 72.343147][ T5769] hsr_slave_0: entered promiscuous mode [ 72.349407][ T5769] hsr_slave_1: entered promiscuous mode [ 72.355502][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.363120][ T5769] Cannot create hsr debugfs directory [ 72.392278][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.400160][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.426621][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.461495][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.468821][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.494919][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.607818][ T5776] Bluetooth: hci3: command tx timeout [ 72.607830][ T51] Bluetooth: hci0: command tx timeout [ 72.654488][ T5770] hsr_slave_0: entered promiscuous mode [ 72.660899][ T5770] hsr_slave_1: entered promiscuous mode [ 72.668001][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.675699][ T5770] Cannot create hsr debugfs directory [ 72.686907][ T5776] Bluetooth: hci2: command tx timeout [ 72.687414][ T51] Bluetooth: hci1: command tx timeout [ 72.863206][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.890610][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.900201][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.912356][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.017431][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.037316][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.059691][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.079486][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.138923][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.154439][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.164621][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.185772][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.258187][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.269904][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.281753][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.294378][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.343900][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.411443][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.425260][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.466370][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.473688][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.497992][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.505105][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.514689][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.558979][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.566106][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.579074][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.586152][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.614574][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.656502][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.694381][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.719175][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.731942][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.745310][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.752430][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.777820][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.809381][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.816558][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.913762][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.963665][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.970844][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.020312][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.027545][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.141627][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.152562][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.186207][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.236325][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.348958][ T5771] veth0_vlan: entered promiscuous mode [ 74.376262][ T5771] veth1_vlan: entered promiscuous mode [ 74.468614][ T5772] veth0_vlan: entered promiscuous mode [ 74.479363][ T5771] veth0_macvtap: entered promiscuous mode [ 74.490683][ T5771] veth1_macvtap: entered promiscuous mode [ 74.512506][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.523828][ T5772] veth1_vlan: entered promiscuous mode [ 74.554265][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.581262][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.605636][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616564][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.626460][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.635337][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.653760][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.674273][ T5772] veth0_macvtap: entered promiscuous mode [ 74.685772][ T5772] veth1_macvtap: entered promiscuous mode [ 74.693784][ T51] Bluetooth: hci3: command tx timeout [ 74.693834][ T5776] Bluetooth: hci0: command tx timeout [ 74.732089][ T5769] veth0_vlan: entered promiscuous mode [ 74.762304][ T5769] veth1_vlan: entered promiscuous mode [ 74.767920][ T5776] Bluetooth: hci2: command tx timeout [ 74.771383][ T51] Bluetooth: hci1: command tx timeout [ 74.801673][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.812828][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.824668][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.857599][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.868725][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.880518][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.891998][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.901202][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.910432][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.919344][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.953221][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.976175][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.003012][ T5769] veth0_macvtap: entered promiscuous mode [ 75.025575][ T5770] veth0_vlan: entered promiscuous mode [ 75.044922][ T5769] veth1_macvtap: entered promiscuous mode [ 75.073998][ T5770] veth1_vlan: entered promiscuous mode [ 75.097824][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.105684][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.144804][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.156367][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.181298][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.192023][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.204632][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.252669][ T5770] veth0_macvtap: entered promiscuous mode [ 75.262674][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.275881][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.287825][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.298503][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.309675][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.321277][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.331752][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.340957][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.349981][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.363914][ T5770] veth1_macvtap: entered promiscuous mode [ 75.381546][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.392459][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.472664][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.499021][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.514338][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.517218][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.535270][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.545840][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.557472][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.569071][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.689177][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.747595][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.758358][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.777263][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.788049][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.798360][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.819096][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.851086][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.925313][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.938033][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.947699][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.962508][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.059646][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.078877][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.155592][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.181431][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.837271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.927436][ T51] Bluetooth: hci3: command tx timeout [ 76.927683][ T5776] Bluetooth: hci0: command tx timeout [ 76.933509][ T51] Bluetooth: hci2: command tx timeout [ 76.940152][ T5776] Bluetooth: hci1: command tx timeout [ 77.938979][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.980514][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.392981][ T1301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.471832][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.007933][ T5787] Bluetooth: hci2: command tx timeout [ 79.013945][ T5787] Bluetooth: hci0: command tx timeout [ 79.022369][ T5776] Bluetooth: hci1: command tx timeout [ 79.026398][ T51] Bluetooth: hci3: command tx timeout [ 79.702513][ T5866] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.546768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 86.949296][ T8] cfg80211: failed to load regulatory.db [ 94.346763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.912151][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.117919][ T8] usb 2-1: device descriptor read/64, error -71 [ 106.396999][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.597623][ T8] usb 2-1: device descriptor read/64, error -71 [ 106.774255][ T8] usb usb2-port1: attempt power cycle [ 107.262428][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.134900][ T8] usb 2-1: device descriptor read/8, error -71 [ 112.266763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 114.036863][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.276887][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.377698][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 115.515246][ T8] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 115.518980][ T23] usb 2-1: device descriptor read/64, error -71 [ 115.536757][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.572894][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 115.987755][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.147046][ T23] usb 2-1: device descriptor read/64, error -71 [ 116.270751][ T23] usb usb2-port1: attempt power cycle [ 116.642821][ T8] gspca_nw80x: reg_r err -71 [ 116.651200][ T5760] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.664597][ T8] nw80x: probe of 3-1:16.0 failed with error -71 [ 116.697232][ T8] usb 3-1: USB disconnect, device number 2 [ 116.716946][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.859990][ T5760] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 116.873987][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 116.884210][ T23] usb 2-1: device descriptor read/8, error -71 [ 116.885691][ T5760] usb 1-1: Product: syz [ 116.902885][ T5760] usb 1-1: config 0 descriptor?? [ 116.912866][ T5760] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 116.922964][ T5760] usb 1-1: Detected FT232H [ 117.157433][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.606930][ T23] usb 2-1: device descriptor read/8, error -71 [ 117.697342][ T5760] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 117.767020][ T23] usb usb2-port1: unable to enumerate USB device [ 119.083272][ T5760] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 119.100281][ T5760] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 119.136261][ T5760] usb 1-1: USB disconnect, device number 2 [ 119.216605][ T5760] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.247474][ T5760] ftdi_sio 1-1:0.0: device disconnected [ 128.446775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.977087][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.157146][ T8] usb 4-1: device descriptor read/64, error -71 [ 129.507551][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.767134][ T8] usb 4-1: device descriptor read/64, error -71 [ 130.037167][ T8] usb usb4-port1: attempt power cycle [ 130.771308][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.006824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 131.253069][ T27] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 131.275889][ T27] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 131.331623][ T27] usb 1-1: Product: syz [ 131.384031][ T27] usb 1-1: config 0 descriptor?? [ 131.419190][ T27] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 131.437206][ T27] usb 1-1: Detected FT232H [ 131.752859][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 132.036703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.086708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.116710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.266710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.884397][ T27] ftdi_sio 1-1:0.0: GPIO initialisation failed: -32 [ 133.013976][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.022081][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.076851][ T27] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 133.270386][ T27] usb 1-1: USB disconnect, device number 3 [ 133.299865][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 133.314375][ T27] ftdi_sio 1-1:0.0: device disconnected [ 135.474960][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.696923][ T27] usb 3-1: device descriptor read/64, error -71 [ 135.968598][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.182457][ T27] usb 3-1: device descriptor read/64, error -71 [ 137.065893][ T27] usb usb3-port1: attempt power cycle [ 142.287043][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.552348][ T27] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 142.566772][ T27] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 142.574986][ T27] usb 3-1: Product: syz [ 142.612827][ T27] usb 3-1: config 0 descriptor?? [ 142.639162][ T27] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 143.497790][ T27] usb 3-1: Detected FT232H [ 143.839290][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 144.267524][ T27] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 144.553534][ T27] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.604918][ T27] usb 3-1: USB disconnect, device number 6 [ 144.623040][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.668023][ T27] ftdi_sio 3-1:0.0: device disconnected [ 144.796812][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.149010][ T8] usb 4-1: device descriptor read/64, error -71 [ 146.416968][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.576834][ T8] usb 4-1: device descriptor read/64, error -71 [ 146.697511][ T8] usb usb4-port1: attempt power cycle [ 147.797329][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.868065][ T8] usb 4-1: device descriptor read/8, error -71 [ 156.476685][ C1] sched: RT throttling activated [ 157.256945][ T6307] Zero length message leads to an empty skb [ 160.636523][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.599525][ T27] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 161.611216][ T27] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 161.619864][ T27] usb 4-1: Product: syz [ 161.634888][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.643909][ T27] usb 4-1: config 0 descriptor?? [ 161.933831][ T27] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 161.951099][ T27] usb 4-1: Detected FT232H [ 162.147644][ T23] usb 3-1: no configurations [ 162.155444][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 162.166711][ T23] usb 3-1: can't read configurations, error -22 [ 163.386905][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.571291][ T27] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 163.618455][ T27] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 164.438010][ T27] usb 4-1: USB disconnect, device number 9 [ 164.456251][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.477295][ T27] ftdi_sio 4-1:0.0: device disconnected [ 168.207443][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 173.096825][ T5812] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.058900][ T5812] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 174.096841][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 174.115196][ T5812] usb 1-1: Product: syz [ 174.153819][ T5812] usb 1-1: config 0 descriptor?? [ 174.365220][ T5812] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 174.374675][ T5812] usb 1-1: Detected FT232H [ 174.600453][ T5812] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 174.996784][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.024873][ T5812] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 175.039972][ T5812] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 175.187626][ T23] usb 4-1: no configurations [ 175.196205][ T23] usb 4-1: can't read configurations, error -22 [ 175.224802][ T9] usb 1-1: USB disconnect, device number 4 [ 175.244817][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 175.860458][ T9] ftdi_sio 1-1:0.0: device disconnected [ 175.991406][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.302158][ T23] usb 4-1: no configurations [ 176.307185][ T23] usb 4-1: can't read configurations, error -22 [ 176.315487][ T23] usb usb4-port1: attempt power cycle [ 176.756874][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.738315][ T23] usb 4-1: device descriptor read/8, error -71 [ 181.627541][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.928627][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 182.046255][ T6467] 9pnet_fd: Insufficient options for proto=fd [ 182.052737][ T9] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 182.063035][ T9] usb 1-1: Product: syz [ 182.073975][ T9] usb 1-1: config 0 descriptor?? [ 182.082795][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 182.127913][ T9] usb 1-1: Detected FT232H [ 182.289141][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 183.611061][ T9] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 183.620876][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 183.887065][ T23] usb 1-1: USB disconnect, device number 5 [ 183.951285][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 183.997533][ T23] ftdi_sio 1-1:0.0: device disconnected [ 186.594365][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.179'. [ 188.021283][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 188.300915][ T23] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 188.424387][ T23] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 189.040125][ T23] usb 1-1: Product: syz [ 189.047679][ T23] usb 1-1: config 0 descriptor?? [ 189.071426][ T23] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 189.108768][ T23] usb 1-1: Detected FT232H [ 189.277581][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 190.215882][ T23] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 190.317524][ T23] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 190.333391][ T23] usb 1-1: USB disconnect, device number 6 [ 190.343986][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 190.356361][ T23] ftdi_sio 1-1:0.0: device disconnected [ 190.706883][ T5812] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.915976][ T5812] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 190.928111][ T6563] fuse: Unknown parameter 'grou00000000000000000000' [ 190.933175][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.943222][ T5812] usb 3-1: Product: syz [ 190.949975][ T5812] usb 3-1: Manufacturer: syz [ 190.954799][ T5812] usb 3-1: SerialNumber: syz [ 190.962835][ T5812] usb 3-1: config 0 descriptor?? [ 191.196497][ T5812] usb 3-1: selecting invalid altsetting 1 [ 191.206988][ T5812] comedi comedi5: could not switch to alternate setting 1 [ 191.214268][ T5812] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 191.272694][ T5812] usb 3-1: USB disconnect, device number 9 [ 191.366912][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.569645][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 191.595846][ T23] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 191.611206][ T23] usb 1-1: config 0 has no interface number 0 [ 191.619928][ T23] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 191.645916][ T23] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 191.672417][ T23] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 191.684693][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.693533][ T23] usb 1-1: Product: syz [ 191.715619][ T23] usb 1-1: Manufacturer: syz [ 191.755307][ T23] usb 1-1: SerialNumber: syz [ 191.799261][ T23] usb 1-1: config 0 descriptor?? [ 191.824426][ T6565] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 191.886951][ T6565] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.147444][ T6565] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.182440][ T6565] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.408332][ T23] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 192.811768][ T6586] fuse: Unknown parameter 'grou00000000000000000000' [ 194.462193][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469305][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.536014][ T23] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.570915][ T23] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 194.627387][ T23] asix: probe of 1-1:0.34 failed with error -71 [ 194.689014][ T23] usb 1-1: USB disconnect, device number 7 [ 195.456591][ T6605] netlink: 224 bytes leftover after parsing attributes in process `syz.1.211'. [ 195.825871][ T6612] fuse: Unknown parameter 'grou00000000000000000000' [ 196.590595][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 196.696807][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 196.877903][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 196.884494][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 200.364545][ T6641] fuse: Unknown parameter 'group_i00000000000000000000' [ 201.053110][ T27] kernel write not supported for file /vcs (pid: 27 comm: kworker/1:1) [ 203.633728][ T6681] fuse: Unknown parameter 'group_i00000000000000000000' [ 203.882729][ T6683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.235'. [ 204.828707][ T6683] syz.2.235 (6683): drop_caches: 2 [ 206.192625][ T5760] kernel write not supported for file /vcs (pid: 5760 comm: kworker/0:3) [ 212.396547][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.240'. [ 213.287357][ T6715] fuse: Unknown parameter 'group_i00000000000000000000' [ 215.523729][ T6747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 217.961821][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.923288][ T27] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 219.035318][ T27] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 219.054226][ T27] usb 2-1: Product: syz [ 219.060956][ T27] usb 2-1: config 0 descriptor?? [ 219.098715][ T27] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 219.107315][ T27] usb 2-1: Detected FT232H [ 219.321586][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 219.357222][ T27] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 219.366852][ T27] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 219.397138][ T27] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 219.427717][ T27] usb 2-1: USB disconnect, device number 10 [ 219.448221][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 219.487182][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 219.493380][ T27] ftdi_sio 2-1:0.0: device disconnected [ 219.852693][ T9] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 219.901726][ T9] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 219.984007][ T9] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 220.007910][ T9] usb 1-1: config 8 has no interface number 0 [ 220.014105][ T9] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 220.065085][ T9] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 220.081456][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.089694][ T9] usb 1-1: Product: syz [ 220.095038][ T9] usb 1-1: Manufacturer: syz [ 220.099924][ T9] usb 1-1: SerialNumber: syz [ 220.341086][ T9] usb 1-1: USB disconnect, device number 8 [ 220.880835][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.265'. [ 223.916993][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 225.854678][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'. [ 226.863569][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.279'. [ 229.227161][ T5760] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.436817][ T5760] usb 4-1: Using ep0 maxpacket: 8 [ 229.449148][ T5760] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.465701][ T5760] usb 4-1: config index 0 descriptor too short (expected 57, got 27) [ 229.484256][ T5760] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 229.509471][ T5760] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 229.532862][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.556733][ T5760] usb 4-1: Product: syz [ 229.561015][ T5760] usb 4-1: Manufacturer: syz [ 229.565648][ T5760] usb 4-1: SerialNumber: syz [ 229.653094][ T6845] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 229.785994][ T6847] bond1: (slave dummy0): making interface the new active one [ 229.812498][ T6829] syz.3.279 uses obsolete (PF_INET,SOCK_PACKET) [ 229.838140][ T6847] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 229.871059][ T6848] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 229.915390][ T6848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.286'. [ 229.941315][ T6848] dummy0: entered promiscuous mode [ 229.949618][ T6848] bond1: (slave dummy0): Releasing active interface [ 230.111804][ T5760] usb 4-1: USB disconnect, device number 14 [ 237.530932][ T6907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.302'. [ 238.797889][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 238.977094][ T5886] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 239.309590][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 239.429812][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.472564][ T5886] usb 3-1: config index 0 descriptor too short (expected 57, got 27) [ 239.493464][ T5886] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 239.555960][ T5886] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 239.641717][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.711517][ T5886] usb 3-1: Product: syz [ 239.733742][ T5886] usb 3-1: Manufacturer: syz [ 239.758627][ T5886] usb 3-1: SerialNumber: syz [ 240.145271][ T27] usb 3-1: USB disconnect, device number 10 [ 246.826045][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.319'. [ 247.226847][ T5886] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 247.566876][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 247.577484][ T5886] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.621988][ T5886] usb 2-1: config index 0 descriptor too short (expected 57, got 27) [ 247.640877][ T5886] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 247.738480][ T5886] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 247.757436][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.781695][ T5886] usb 2-1: Product: syz [ 247.799312][ T5886] usb 2-1: Manufacturer: syz [ 247.808038][ T5886] usb 2-1: SerialNumber: syz [ 248.102107][ T5835] usb 2-1: USB disconnect, device number 11 [ 250.968294][ T7000] 9pnet_fd: Insufficient options for proto=fd [ 251.696879][ T5886] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 251.880827][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.909185][ T5886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.050054][ T5886] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 252.059201][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.070237][ T5886] usb 1-1: config 0 descriptor?? [ 255.927827][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934483][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.028262][ T9] usb 1-1: USB disconnect, device number 10 [ 256.217011][ T7029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.335'. [ 256.246042][ T7032] 9pnet_fd: Insufficient options for proto=fd [ 256.596872][ T969] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 256.596874][ T5886] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 256.796789][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 256.804801][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.815606][ T5886] usb 3-1: config index 0 descriptor too short (expected 57, got 27) [ 256.827389][ T5886] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 256.851234][ T5886] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 256.861819][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.866850][ T969] usb 2-1: Using ep0 maxpacket: 16 [ 256.869982][ T5886] usb 3-1: Product: syz [ 256.879338][ T5886] usb 3-1: Manufacturer: syz [ 256.881244][ T969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.884013][ T5886] usb 3-1: SerialNumber: syz [ 256.895788][ T969] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 256.913667][ T969] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 256.923279][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.936556][ T969] usb 2-1: config 0 descriptor?? [ 257.153397][ T5760] usb 3-1: USB disconnect, device number 11 [ 257.259904][ T5835] usb 2-1: USB disconnect, device number 12 [ 257.438551][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 260.817013][ T5886] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 261.148657][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.178464][ T5886] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.255782][ T7080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.354'. [ 262.268980][ T5886] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.296800][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.322081][ T5886] usb 3-1: config 0 descriptor?? [ 263.732088][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 263.793026][ T7098] warning: `syz.0.358' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 263.817657][ T7097] [ 263.820756][ T7097] ============================= [ 263.825598][ T7097] WARNING: suspicious RCU usage [ 263.830495][ T7097] syzkaller #0 Not tainted [ 263.834897][ T7097] ----------------------------- [ 263.839798][ T7097] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 263.848569][ T7097] [ 263.848569][ T7097] other info that might help us debug this: [ 263.848569][ T7097] [ 263.858877][ T7097] [ 263.858877][ T7097] rcu_scheduler_active = 2, debug_locks = 1 [ 263.867050][ T7097] 1 lock held by syz.0.358/7097: [ 263.871996][ T7097] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 263.880967][ T7097] [ 263.880967][ T7097] stack backtrace: [ 263.887160][ T7097] CPU: 0 PID: 7097 Comm: syz.0.358 Not tainted syzkaller #0 [ 263.894452][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.904509][ T7097] Call Trace: [ 263.907788][ T7097] [ 263.910710][ T7097] dump_stack_lvl+0x18c/0x250 [ 263.915383][ T7097] ? show_regs_print_info+0x20/0x20 [ 263.920568][ T7097] ? load_image+0x420/0x420 [ 263.925081][ T7097] lockdep_rcu_suspicious+0x1e1/0x300 [ 263.930453][ T7097] ieee80211_check_concurrent_iface+0x475/0x950 [ 263.936709][ T7097] ieee80211_open+0xc1/0x200 [ 263.941326][ T7097] __dev_open+0x2cb/0x430 [ 263.945649][ T7097] ? dev_open+0x190/0x190 [ 263.949974][ T7097] __dev_change_flags+0x211/0x6a0 [ 263.954990][ T7097] ? dev_get_flags+0x1c0/0x1c0 [ 263.959743][ T7097] ? mutex_lock_nested+0x20/0x20 [ 263.964674][ T7097] dev_change_flags+0x88/0x1a0 [ 263.969437][ T7097] dev_ioctl+0x7b4/0x1140 [ 263.973845][ T7097] sock_do_ioctl+0x239/0x310 [ 263.978455][ T7097] ? sock_show_fdinfo+0xb0/0xb0 [ 263.983321][ T7097] sock_ioctl+0x5ba/0x7e0 [ 263.987677][ T7097] ? sock_poll+0x3e0/0x3e0 [ 263.992100][ T7097] ? bpf_lsm_file_ioctl+0x9/0x10 [ 263.997035][ T7097] ? security_file_ioctl+0x80/0xa0 [ 264.002139][ T7097] ? sock_poll+0x3e0/0x3e0 [ 264.006544][ T7097] __se_sys_ioctl+0xfd/0x170 [ 264.011132][ T7097] do_syscall_64+0x55/0xb0 [ 264.015537][ T7097] ? clear_bhb_loop+0x40/0x90 [ 264.020196][ T7097] ? clear_bhb_loop+0x40/0x90 [ 264.024870][ T7097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.030785][ T7097] RIP: 0033:0x7fa50cd9ce59 [ 264.035203][ T7097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.054804][ T7097] RSP: 002b:00007fa50dd3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.063257][ T7097] RAX: ffffffffffffffda RBX: 00007fa50d015fa0 RCX: 00007fa50cd9ce59 [ 264.071220][ T7097] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000009 [ 264.079174][ T7097] RBP: 00007fa50ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 264.087165][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.095122][ T7097] R13: 00007fa50d016038 R14: 00007fa50d015fa0 R15: 00007ffc890459c8 [ 264.103087][ T7097] [ 264.136858][ T5812] usb 3-1: USB disconnect, device number 12 [ 264.207101][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 264.215426][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 264.225972][ T9] usb 2-1: config index 0 descriptor too short (expected 57, got 27) [ 264.235608][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 264.251065][ T9] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 264.260304][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.269978][ T9] usb 2-1: Product: syz [ 264.277892][ T9] usb 2-1: Manufacturer: syz [ 264.282602][ T9] usb 2-1: SerialNumber: syz [ 264.528115][ T9] usb 2-1: USB disconnect, device number 13