last executing test programs: 21.164896199s ago: executing program 0 (id=93): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x44002) 17.51854796s ago: executing program 0 (id=102): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.509577758s ago: executing program 0 (id=104): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f00000002c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe10, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x34, 0x0, 0x0, 0x0, "645b5d48da6811cd874f3c107bd10bc8831026d4072dd2c54bd79f35321619c67d39e5f49bae641ed1511200"}}, 0x80}, 0x1, 0x0, 0x0, 0x28041884}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x375040, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000100000000000000000000009700010000000000950000000000000014139e770a1a895d056b9059459dc8cdb8e1e16df84c6078d252babfb2b887d9dda6081d042a1d12eadf51af5a06fdffe01999004f576bd7b3419f785ab0280e175ef2fef17f8c70657489f234768c9fb66ec1e2c06166dab784e3278bb16524e0ed2daed32c9dc756e3"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 13.508916585s ago: executing program 3 (id=106): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.805234694s ago: executing program 0 (id=108): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = gettid() r5 = syz_io_uring_setup(0xa00, &(0x7f0000000080)={0x0, 0x1c5, 0x10000, 0x2, 0x2ff}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r5, 0x1, 0x719e, 0x29, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) unshare(0x6020400) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) 9.972478191s ago: executing program 2 (id=111): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 9.143585214s ago: executing program 2 (id=113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x44002) 9.141781053s ago: executing program 4 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000070000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000906f5c63330609942c1f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x3a9900603ab4c6c5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@inlinecrypt}, {@errors_remount}, {@abort}]}, 0x21, 0x4f3, &(0x7f0000000f80)="$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") r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d05"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) 8.723967086s ago: executing program 1 (id=115): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, 0x0) 8.701163013s ago: executing program 4 (id=116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f0000000500), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) pipe2(&(0x7f0000000000), 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f6873720000000008"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ptrace(0x10, 0x0) shutdown(r2, 0x1) 8.695403711s ago: executing program 3 (id=117): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424", 0x73}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.517794711s ago: executing program 1 (id=118): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 8.172082558s ago: executing program 3 (id=119): socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 5.524992524s ago: executing program 0 (id=120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x44002) 5.461142424s ago: executing program 2 (id=121): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'syzkaller\x00'}, {0x20, '&\'f:-@:%]-(!\\['}, {0x20, 'syzkaller\x00'}], 0xa, "ff992681070d19205087fe61b1e62b"}, 0x3f) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="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", 0x19b) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 5.393449269s ago: executing program 4 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r6, r6, 0x0, 0x101) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000000)) pread64(r5, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20c001, 0x143) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x32503e, 0x800}, 0x20) 5.386316524s ago: executing program 3 (id=123): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 5.245394589s ago: executing program 1 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)) 5.010299488s ago: executing program 2 (id=125): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.565987261s ago: executing program 4 (id=126): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 3.197718788s ago: executing program 3 (id=127): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.107080897s ago: executing program 4 (id=128): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.014609036s ago: executing program 2 (id=129): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f300000000008000140000000"], 0xd4}}, 0x4000010) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001d00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x90020100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r1, r1) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000200)=0x5) read$FUSE(r2, &(0x7f0000008400)={0x2020}, 0x2020) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) r4 = getpid() ptrace$setregset(0x4205, r4, 0x3, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.942719235s ago: executing program 1 (id=130): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x23, 0x5, 0x0) gettid() accept4$inet6(r3, 0x0, 0x0, 0x0) 2.559179004s ago: executing program 0 (id=131): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x44002) 1.33635086s ago: executing program 1 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) 1.236389708s ago: executing program 3 (id=133): socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.192472209s ago: executing program 4 (id=134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f0000000500), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) pipe2(&(0x7f0000000000), 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f6873720000000008"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ptrace(0x10, 0x0) shutdown(r2, 0x1) 135.935485ms ago: executing program 1 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 2 (id=136): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 91.075922][ T5593] cgroup: Unknown subsys name 'net' [ 91.308006][ T5593] cgroup: Unknown subsys name 'cpuset' [ 91.372251][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.049271][ T10] cfg80211: failed to load regulatory.db [ 93.488093][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.029437][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.039479][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.040650][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.048845][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.057577][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.145554][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.165706][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.168844][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.170902][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.197914][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.319720][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.344771][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.362070][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.379378][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.383824][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.386256][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.390396][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.390796][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.391233][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.406127][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.406489][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.406901][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.418165][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.418534][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.486422][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.124454][ T5624] Bluetooth: hci0: command tx timeout [ 98.283324][ T5624] Bluetooth: hci1: command tx timeout [ 98.602042][ T4927] Bluetooth: hci2: command tx timeout [ 98.602254][ T4927] Bluetooth: hci3: command tx timeout [ 98.602757][ T5624] Bluetooth: hci4: command tx timeout [ 99.067938][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.069284][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.069537][ T5612] bridge_slave_0: entered allmulticast mode [ 99.073567][ T5612] bridge_slave_0: entered promiscuous mode [ 99.173479][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.173739][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.173974][ T5612] bridge_slave_1: entered allmulticast mode [ 99.176463][ T5612] bridge_slave_1: entered promiscuous mode [ 99.177697][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.177929][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.178365][ T5616] bridge_slave_0: entered allmulticast mode [ 99.180854][ T5616] bridge_slave_0: entered promiscuous mode [ 99.284371][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.284614][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.284808][ T5616] bridge_slave_1: entered allmulticast mode [ 99.287323][ T5616] bridge_slave_1: entered promiscuous mode [ 99.428443][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.516857][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.531604][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.533218][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.535791][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.536634][ T5620] bridge_slave_0: entered allmulticast mode [ 99.550296][ T5620] bridge_slave_0: entered promiscuous mode [ 99.632316][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.632792][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.633104][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.633304][ T5620] bridge_slave_1: entered allmulticast mode [ 99.635748][ T5620] bridge_slave_1: entered promiscuous mode [ 99.637716][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.637953][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.638146][ T5617] bridge_slave_0: entered allmulticast mode [ 99.640611][ T5617] bridge_slave_0: entered promiscuous mode [ 99.704641][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.704952][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.705241][ T5619] bridge_slave_0: entered allmulticast mode [ 99.707774][ T5619] bridge_slave_0: entered promiscuous mode [ 99.786557][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.786813][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.787012][ T5617] bridge_slave_1: entered allmulticast mode [ 99.789529][ T5617] bridge_slave_1: entered promiscuous mode [ 99.791518][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.795925][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.796861][ T5619] bridge_slave_1: entered allmulticast mode [ 99.839227][ T5619] bridge_slave_1: entered promiscuous mode [ 99.862276][ T5612] team0: Port device team_slave_0 added [ 99.944538][ T5612] team0: Port device team_slave_1 added [ 99.947933][ T5616] team0: Port device team_slave_0 added [ 99.957145][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.029798][ T5616] team0: Port device team_slave_1 added [ 100.039242][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.055169][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.060822][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.140327][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.154404][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.156371][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.156384][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.156404][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.201757][ T5624] Bluetooth: hci0: command tx timeout [ 100.274630][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.274643][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.274662][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.276693][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.276705][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.276725][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.305654][ T5620] team0: Port device team_slave_0 added [ 100.361807][ T5624] Bluetooth: hci1: command tx timeout [ 100.416670][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.416684][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.416703][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.420304][ T5620] team0: Port device team_slave_1 added [ 100.681512][ T5624] Bluetooth: hci4: command tx timeout [ 100.681565][ T5624] Bluetooth: hci3: command tx timeout [ 100.681588][ T5624] Bluetooth: hci2: command tx timeout [ 100.736658][ T5617] team0: Port device team_slave_0 added [ 100.740025][ T5619] team0: Port device team_slave_0 added [ 100.784287][ T5617] team0: Port device team_slave_1 added [ 100.787944][ T5619] team0: Port device team_slave_1 added [ 100.876202][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.876215][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.876234][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.999538][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.999552][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.999573][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.009114][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.009173][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.009248][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.027965][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.027981][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.028005][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.075446][ T5612] hsr_slave_0: entered promiscuous mode [ 101.083879][ T5612] hsr_slave_1: entered promiscuous mode [ 101.180366][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.180380][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.180400][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.187860][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.187921][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.188004][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.226570][ T5616] hsr_slave_0: entered promiscuous mode [ 101.239378][ T5616] hsr_slave_1: entered promiscuous mode [ 101.245947][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 101.246297][ T5616] Cannot create hsr debugfs directory [ 101.484482][ T5620] hsr_slave_0: entered promiscuous mode [ 101.486109][ T5620] hsr_slave_1: entered promiscuous mode [ 101.487366][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 101.487391][ T5620] Cannot create hsr debugfs directory [ 101.742895][ T5617] hsr_slave_0: entered promiscuous mode [ 101.744608][ T5617] hsr_slave_1: entered promiscuous mode [ 101.745938][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 101.745962][ T5617] Cannot create hsr debugfs directory [ 101.767638][ T5619] hsr_slave_0: entered promiscuous mode [ 101.780266][ T5619] hsr_slave_1: entered promiscuous mode [ 101.787617][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 101.787647][ T5619] Cannot create hsr debugfs directory [ 102.281781][ T5624] Bluetooth: hci0: command tx timeout [ 102.447503][ T5624] Bluetooth: hci1: command tx timeout [ 102.744349][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.761570][ T5624] Bluetooth: hci2: command tx timeout [ 102.761603][ T5624] Bluetooth: hci4: command tx timeout [ 102.762480][ T4927] Bluetooth: hci3: command tx timeout [ 102.799151][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.815793][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.853627][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.857632][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.897080][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.924027][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.960289][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.124713][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.189745][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.196356][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.239084][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.251969][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.278066][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.330472][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.359830][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.521085][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.563495][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.603631][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.638184][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.655560][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.688279][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.722892][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.766348][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.921441][ T5617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.963120][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.008907][ T5617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.038471][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.054498][ T5617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.113920][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.150750][ T5617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.188660][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.293594][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.362817][ T4927] Bluetooth: hci0: command tx timeout [ 104.453813][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.486713][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.508582][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.523487][ T4927] Bluetooth: hci1: command tx timeout [ 104.547512][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.578335][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.616283][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.633399][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.634997][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.677848][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.756274][ T1366] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.756861][ T1366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.823261][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.842584][ T5624] Bluetooth: hci4: command tx timeout [ 104.842619][ T5624] Bluetooth: hci2: command tx timeout [ 104.842679][ T4927] Bluetooth: hci3: command tx timeout [ 104.847101][ T1366] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.847909][ T1366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.024330][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.096420][ T1366] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.096580][ T1366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.126204][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.189865][ T1366] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.190059][ T1366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.303298][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.383465][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.407071][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.426723][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.510977][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.511220][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.664750][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.731834][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.746943][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.747198][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.863042][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.863212][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.978054][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.038668][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.038919][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.160038][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.169447][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.573538][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.207352][ T5612] veth0_vlan: entered promiscuous mode [ 107.293669][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.364564][ T5612] veth1_vlan: entered promiscuous mode [ 107.399880][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.710636][ T5612] veth0_macvtap: entered promiscuous mode [ 107.826726][ T5612] veth1_macvtap: entered promiscuous mode [ 107.862722][ T5616] veth0_vlan: entered promiscuous mode [ 107.876174][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.958510][ T5620] veth0_vlan: entered promiscuous mode [ 107.996089][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.033678][ T5616] veth1_vlan: entered promiscuous mode [ 108.070902][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.104942][ T5620] veth1_vlan: entered promiscuous mode [ 108.140523][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.267201][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.290212][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.324643][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.365303][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.595452][ T5616] veth0_macvtap: entered promiscuous mode [ 108.768433][ T5620] veth0_macvtap: entered promiscuous mode [ 108.811723][ T5616] veth1_macvtap: entered promiscuous mode [ 108.816581][ T5619] veth0_vlan: entered promiscuous mode [ 108.874023][ T5620] veth1_macvtap: entered promiscuous mode [ 108.956010][ T5619] veth1_vlan: entered promiscuous mode [ 109.027101][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.057998][ T1443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.058020][ T1443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.119834][ T5617] veth0_vlan: entered promiscuous mode [ 109.140957][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.157985][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.254303][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.256042][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.260369][ T1450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.260388][ T1450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.302322][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.321012][ T5617] veth1_vlan: entered promiscuous mode [ 109.343183][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.387082][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.431715][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.484791][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.527646][ T827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.558491][ T827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.635637][ T5619] veth0_macvtap: entered promiscuous mode [ 109.877704][ T5619] veth1_macvtap: entered promiscuous mode [ 111.201405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.827530][ T5617] veth0_macvtap: entered promiscuous mode [ 112.028722][ T1366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.028744][ T1366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.192916][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.234336][ T5617] veth1_macvtap: entered promiscuous mode [ 112.454424][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.457175][ T1450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.457196][ T1450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.651956][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.651976][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.706676][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.784272][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.812185][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.835141][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.859825][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.907173][ T1450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.907202][ T1450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.018199][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.086989][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.129122][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.149277][ T1176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.176019][ T1176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.453753][ T5818] loop2: detected capacity change from 0 to 16 [ 114.339195][ T5818] erofs (device loop2): mounted with root inode @ nid 36. [ 114.397195][ T5817] syz.2.9: attempt to access beyond end of device [ 114.397195][ T5817] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 114.494404][ T5817] syz.2.9: attempt to access beyond end of device [ 114.494404][ T5817] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 114.500886][ T5817] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 114.500929][ T5817] erofs (device loop2): read error -117 @ 1 of nid 89 [ 114.625780][ T38] audit: type=1800 audit(1777541901.126:2): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 115.380142][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.380165][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.788247][ T1419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.788396][ T1419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.182082][ T5831] Zero length message leads to an empty skb [ 116.226904][ T5831] syz_tun: entered allmulticast mode [ 116.227926][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.227945][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.294724][ T5829] syz_tun: left allmulticast mode [ 116.755383][ T827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.755404][ T827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.309006][ T5852] loop3: detected capacity change from 0 to 32768 [ 119.373679][ T5852] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16 (5852) [ 119.613424][ T5852] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.613471][ T5852] BTRFS info (device loop3): using sha256 checksum algorithm [ 120.024353][ T5852] BTRFS info (device loop3): enabling ssd optimizations [ 120.024386][ T5852] BTRFS info (device loop3): turning on async discard [ 120.024403][ T5852] BTRFS info (device loop3): enabling free space tree [ 121.007524][ T5882] loop1: detected capacity change from 0 to 8 [ 121.048896][ T5882] SQUASHFS error: xz decompression failed, data probably corrupt [ 121.048934][ T5882] SQUASHFS error: Failed to read block 0x108: -5 [ 121.048952][ T5882] SQUASHFS error: Unable to read metadata cache entry [106] [ 121.048974][ T5882] SQUASHFS error: Unable to read inode 0x11f [ 121.110636][ T38] audit: type=1800 audit(1777541907.346:3): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 122.653065][ T5616] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.827727][ T5922] 9p: Bad value for 'rfdno' [ 131.885822][ T5942] loop2: detected capacity change from 0 to 7 [ 132.144252][ T5942] Dev loop2: unable to read RDB block 7 [ 132.144299][ T5942] loop2: unable to read partition table [ 132.144518][ T5942] loop2: partition table beyond EOD, truncated [ 132.144575][ T5942] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.298349][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.298744][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.850357][ T5744] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.450499][ T5971] netlink: 'syz.4.43': attribute type 11 has an invalid length. [ 138.466244][ T5972] 9p: Bad value for 'rfdno' [ 138.771860][ T5971] loop4: detected capacity change from 0 to 512 [ 138.798114][ T5971] EXT4-fs: inline encryption not supported [ 139.827327][ T5971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.827611][ T5971] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.742691][ T5625] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.971525][ T5625] usb 1-1: Using ep0 maxpacket: 8 [ 141.019866][ T5625] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.077523][ T5625] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 141.078144][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.078167][ T5625] usb 1-1: Product: syz [ 141.078181][ T5625] usb 1-1: Manufacturer: syz [ 141.078195][ T5625] usb 1-1: SerialNumber: syz [ 141.282359][ T5992] serio: Serial port ttyS3 [ 141.464262][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.330100][ T5625] usb 1-1: config 0 descriptor?? [ 145.057451][ T5625] usb 1-1: USB disconnect, device number 2 [ 147.008955][ T6033] loop0: detected capacity change from 0 to 16 [ 147.977692][ T6033] erofs (device loop0): mounted with root inode @ nid 36. [ 148.010649][ T6033] syz.0.59: attempt to access beyond end of device [ 148.010649][ T6033] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 148.343252][ T38] audit: type=1800 audit(1777541934.866:4): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.59" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 148.386623][ T6029] 9p: Bad value for 'rfdno' [ 150.354143][ T6046] loop0: detected capacity change from 0 to 8 [ 150.549341][ T6046] SQUASHFS error: xz decompression failed, data probably corrupt [ 150.549377][ T6046] SQUASHFS error: Failed to read block 0x108: -5 [ 150.549395][ T6046] SQUASHFS error: Unable to read metadata cache entry [106] [ 150.549411][ T6046] SQUASHFS error: Unable to read inode 0x11f [ 153.621669][ T5725] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.648546][ T6065] loop0: detected capacity change from 0 to 512 [ 153.783661][ T5725] usb 4-1: device descriptor read/64, error -71 [ 154.012990][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.086442][ T5725] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.253357][ T5725] usb 4-1: device descriptor read/64, error -71 [ 154.366586][ T5725] usb usb4-port1: attempt power cycle [ 154.528865][ T38] audit: type=1800 audit(1777541941.066:5): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.70" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 154.840018][ T5725] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.862737][ T5725] usb 4-1: device descriptor read/8, error -71 [ 155.135559][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.211597][ T5725] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.245796][ T5725] usb 4-1: device descriptor read/8, error -71 [ 155.355449][ T5725] usb usb4-port1: unable to enumerate USB device [ 155.679020][ T6083] 9p: Bad value for 'rfdno' [ 157.947671][ T6096] netlink: 'syz.3.78': attribute type 11 has an invalid length. [ 158.044377][ T6096] loop3: detected capacity change from 0 to 512 [ 158.208192][ T6096] EXT4-fs: inline encryption not supported [ 158.378941][ T6096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.379081][ T6096] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.734500][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.214858][ T5725] IPVS: starting estimator thread 0... [ 159.331842][ T6116] IPVS: using max 8 ests per chain, 19200 per kthread [ 159.355670][ T6119] fuse: Bad value for 'fd' [ 160.811531][ T5725] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.005277][ T5725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.005305][ T5725] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.005341][ T5725] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.005366][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.227335][ T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.456955][ T5725] usb 5-1: config 0 descriptor?? [ 161.729280][ T32] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 161.729344][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 161.729387][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.729413][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.891232][ T5725] usb 5-1: string descriptor 0 read error: -71 [ 161.938442][ T5725] usb 5-1: USB disconnect, device number 2 [ 161.973301][ T32] usb 1-1: config 0 descriptor?? [ 162.205770][ T32] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 163.156106][ T6166] loop2: detected capacity change from 0 to 16 [ 164.026973][ T6166] erofs (device loop2): mounted with root inode @ nid 36. [ 164.084703][ T6166] syz.2.99: attempt to access beyond end of device [ 164.084703][ T6166] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 164.142028][ T6166] syz.2.99: attempt to access beyond end of device [ 164.142028][ T6166] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 164.148397][ T6166] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 164.148436][ T6166] erofs (device loop2): read error -117 @ 1 of nid 89 [ 164.153737][ T38] audit: type=1800 audit(1777541950.766:6): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.99" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 164.391544][ T5800] usb 1-1: USB disconnect, device number 3 [ 164.572614][ T6172] 9p: Bad value for 'rfdno' [ 170.331503][ T5800] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.537393][ T5800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.537427][ T5800] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.537466][ T5800] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.537491][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.678522][ T5800] usb 3-1: config 0 descriptor?? [ 170.998218][ T5800] usb 3-1: string descriptor 0 read error: -71 [ 171.082776][ T5800] usb 3-1: USB disconnect, device number 3 [ 172.562310][ T6207] netlink: 'syz.1.112': attribute type 11 has an invalid length. [ 172.654323][ T6207] loop1: detected capacity change from 0 to 512 [ 172.673540][ T6207] EXT4-fs: inline encryption not supported [ 172.931184][ T6207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.944452][ T6207] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.010022][ T6214] netlink: 'syz.4.114': attribute type 11 has an invalid length. [ 173.031223][ T6214] loop4: detected capacity change from 0 to 512 [ 173.044092][ T6214] EXT4-fs: inline encryption not supported [ 173.138244][ T6214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.138385][ T6214] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.195917][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.300305][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.305984][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.465675][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 173.465730][ T37] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.465755][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.486807][ T37] usb 3-1: config 0 descriptor?? [ 173.643287][ T37] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 175.491368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.591364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.664192][ T5969] usb 3-1: USB disconnect, device number 4 [ 176.841554][ T5800] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.013743][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.013771][ T5800] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.013806][ T5800] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.013828][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.039083][ T6245] 9p: Bad value for 'rfdno' [ 178.359540][ T5800] usb 1-1: config 0 descriptor?? [ 178.661028][ T5800] usb 1-1: string descriptor 0 read error: -71 [ 178.692360][ T5800] usb 1-1: USB disconnect, device number 4 [ 178.794137][ T6254] syz_tun: entered allmulticast mode [ 180.921557][ T5800] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.189589][ T6277] NILFS (nullb0): couldn't find nilfs on the device [ 181.671362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.864086][ T5800] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 181.864138][ T5800] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.864165][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.958239][ T5800] usb 1-1: config 0 descriptor?? [ 182.021364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.031365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.041370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.051365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.061354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.071363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.769980][ T5800] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 288.581305][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 288.581328][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16/3:b..l P1176/3:b..l [ 288.581378][ C1] rcu: (detected by 1, t=10502 jiffies, g=18025, q=118 ncpus=2) [ 288.581413][ C1] task:kworker/u8:8 state:R running task stack:21600 pid:1176 tgid:1176 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 288.581496][ C1] Workqueue: bat_events batadv_bla_periodic_work [ 288.581546][ C1] Call Trace: [ 288.581555][ C1] [ 288.581570][ C1] __schedule+0x169e/0x54f0 [ 288.581622][ C1] ? __kasan_slab_free+0x5c/0x80 [ 288.581648][ C1] ? kfree+0x1c5/0x6c0 [ 288.581674][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cb0 [ 288.581719][ C1] ? __pfx___schedule+0x10/0x10 [ 288.581764][ C1] preempt_schedule_irq+0x4d/0xa0 [ 288.581811][ C1] irqentry_exit+0x14f/0x730 [ 288.581842][ C1] ? trace_irq_disable+0x3b/0x140 [ 288.581877][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.581902][ C1] RIP: 0010:unwind_get_return_address+0x6/0x90 [ 288.581937][ C1] Code: 3e b7 00 4c 89 f7 4c 89 fe e9 29 ff ff ff e8 81 33 b0 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 [ 288.581955][ C1] RSP: 0000:ffffc9000636edd8 EFLAGS: 00000202 [ 288.581973][ C1] RAX: 000000009095ff01 RBX: ffffc9000636eea0 RCX: 0000000000000046 [ 288.581989][ C1] RDX: 0000000000000005 RSI: ffffffff8d881ae1 RDI: ffffc9000636ede8 [ 288.582005][ C1] RBP: ffffc9000636ee70 R08: ffffc9000636f268 R09: 0000000000000000 [ 288.582020][ C1] R10: ffffc9000636ee38 R11: fffff52000c6ddc9 R12: ffff8880294d8000 [ 288.582037][ C1] R13: 0000000000000000 R14: ffffffff81afb250 R15: ffffc9000636ede8 [ 288.582054][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.582102][ C1] arch_stack_walk+0xfb/0x150 [ 288.582140][ C1] ? __kfree_skb+0x5d/0x210 [ 288.582175][ C1] stack_trace_save+0xa9/0x100 [ 288.582213][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 288.582245][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 288.582284][ C1] kasan_save_track+0x3e/0x80 [ 288.582307][ C1] ? kasan_save_track+0x3e/0x80 [ 288.582330][ C1] ? kasan_save_free_info+0x46/0x50 [ 288.582363][ C1] ? __kasan_slab_free+0x5c/0x80 [ 288.582387][ C1] ? kfree+0x1c5/0x6c0 [ 288.582409][ C1] ? skb_release_data+0x828/0xa60 [ 288.582491][ C1] kasan_save_free_info+0x46/0x50 [ 288.582525][ C1] __kasan_slab_free+0x5c/0x80 [ 288.582552][ C1] kfree+0x1c5/0x6c0 [ 288.582576][ C1] ? skb_release_data+0x828/0xa60 [ 288.582611][ C1] skb_release_data+0x828/0xa60 [ 288.582652][ C1] __kfree_skb+0x5d/0x210 [ 288.582682][ C1] arp_process+0xfb2/0x18a0 [ 288.582725][ C1] ? __pfx_arp_process+0x10/0x10 [ 288.582761][ C1] ? NF_HOOK+0xa2/0x3c0 [ 288.582795][ C1] NF_HOOK+0x33a/0x3c0 [ 288.582824][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 288.582857][ C1] ? __pfx_arp_process+0x10/0x10 [ 288.582888][ C1] ? NF_HOOK+0xa2/0x3c0 [ 288.582917][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 288.582949][ C1] ? process_backlog+0x271/0xc60 [ 288.582988][ C1] ? __asan_memset+0x22/0x50 [ 288.583010][ C1] ? arp_rcv+0x2f8/0x500 [ 288.583041][ C1] ? process_backlog+0x271/0xc60 [ 288.583063][ C1] ? __pfx_arp_rcv+0x10/0x10 [ 288.583095][ C1] process_backlog+0x5e1/0xc60 [ 288.583139][ C1] __napi_poll+0xab/0x550 [ 288.583164][ C1] net_rx_action+0x696/0xe00 [ 288.583209][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 288.583232][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 288.583269][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 288.583295][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 288.583327][ C1] handle_softirqs+0x1de/0x6d0 [ 288.583366][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 288.583396][ C1] netif_rx+0xb9/0xf0 [ 288.583425][ C1] batadv_bla_send_claim+0xa12/0xeb0 [ 288.583462][ C1] ? __pfx_batadv_bla_send_claim+0x10/0x10 [ 288.583486][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 288.583512][ C1] ? batadv_bla_periodic_work+0x5f7/0xae0 [ 288.583551][ C1] batadv_bla_periodic_work+0x629/0xae0 [ 288.583592][ C1] ? batadv_bla_periodic_work+0x333/0xae0 [ 288.583634][ C1] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 288.583681][ C1] ? process_one_work+0x8b7/0x1710 [ 288.583705][ C1] process_one_work+0x9a3/0x1710 [ 288.583753][ C1] ? __pfx_process_one_work+0x10/0x10 [ 288.583795][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.583842][ C1] worker_thread+0xba8/0x11e0 [ 288.583891][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 288.583923][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 288.583951][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 288.583985][ C1] kthread+0x388/0x470 [ 288.584014][ C1] ? __pfx_worker_thread+0x10/0x10 [ 288.584038][ C1] ? __pfx_kthread+0x10/0x10 [ 288.584070][ C1] ret_from_fork+0x514/0xb70 [ 288.584100][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 288.584145][ C1] ? __switch_to+0xc79/0x1410 [ 288.584172][ C1] ? __pfx_kthread+0x10/0x10 [ 288.584212][ C1] ret_from_fork_asm+0x1a/0x30 [ 288.584261][ C1] [ 288.584274][ C1] task:ktimers/0 state:R running task stack:23528 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 288.584339][ C1] Call Trace: [ 288.584346][ C1] [ 288.584371][ C1] __schedule+0x169e/0x54f0 [ 288.584430][ C1] ? __pfx___schedule+0x10/0x10 [ 288.584475][ C1] schedule_rtlock+0x30/0x70 [ 288.584502][ C1] rtlock_slowlock_locked+0x3638/0x3c80 [ 288.584549][ C1] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 288.584584][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 288.584624][ C1] ? rcu_is_watching+0x15/0xb0 [ 288.584653][ C1] rt_spin_lock+0x165/0x400 [ 288.584697][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 288.584725][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 288.584752][ C1] ? cfg80211_inform_single_bss_data+0xba3/0x1b80 [ 288.584784][ C1] cfg80211_inform_single_bss_data+0xbbf/0x1b80 [ 288.584812][ C1] ? cfg80211_inform_single_bss_data+0xba3/0x1b80 [ 288.584847][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 288.584905][ C1] ? cfg80211_inform_bss_data+0x253/0x3c40 [ 288.584937][ C1] cfg80211_inform_bss_data+0x266/0x3c40 [ 288.584963][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 288.584994][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 288.585017][ C1] ? reacquire_held_locks+0x104/0x190 [ 288.585040][ C1] ? rt_spin_lock+0x1e0/0x400 [ 288.585074][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 288.585101][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 288.585137][ C1] ? ieee80211_rx_handlers+0xc88f/0xc900 [ 288.585160][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 288.585228][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 288.585258][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 288.585308][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 288.585346][ C1] ? ieee80211_bss_info_update+0x316/0xa40 [ 288.585384][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 288.585419][ C1] ? ieee80211_bss_info_update+0x316/0xa40 [ 288.585458][ C1] ieee80211_bss_info_update+0x794/0xa40 [ 288.585500][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 288.585537][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 288.585569][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 288.585597][ C1] ? rt_spin_unlock+0x14f/0x200 [ 288.585620][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 288.585647][ C1] ieee80211_scan_rx+0x552/0xa40 [ 288.585690][ C1] ieee80211_rx_list+0x2a2f/0x37a0 [ 288.585738][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 288.585759][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 288.585806][ C1] ? ieee80211_rx_napi+0xd3/0x3e0 [ 288.585830][ C1] ? ieee80211_rx_napi+0xd3/0x3e0 [ 288.585855][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 288.585887][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 288.585909][ C1] ? rt_spin_lock+0x1e0/0x400 [ 288.585937][ C1] ? ieee80211_rx_napi+0xd3/0x3e0 [ 288.585957][ C1] ieee80211_rx_napi+0x1b1/0x3e0 [ 288.585984][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 288.586008][ C1] ? rt_spin_unlock+0x160/0x200 [ 288.586036][ C1] ? skb_dequeue+0x11a/0x150 [ 288.586061][ C1] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 288.586099][ C1] tasklet_action_common+0x31c/0x610 [ 288.586139][ C1] handle_softirqs+0x1de/0x6d0 [ 288.586176][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 288.586211][ C1] run_ktimerd+0x69/0x100 [ 288.586241][ C1] smpboot_thread_fn+0x541/0xa50 [ 288.586273][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 288.586312][ C1] kthread+0x388/0x470 [ 288.586345][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 288.586373][ C1] ? __pfx_kthread+0x10/0x10 [ 288.586408][ C1] ret_from_fork+0x514/0xb70 [ 288.586439][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 288.586467][ C1] ? __switch_to+0xc79/0x1410 [ 288.586493][ C1] ? __pfx_kthread+0x10/0x10 [ 288.586527][ C1] ret_from_fork_asm+0x1a/0x30 [ 288.586576][ C1] [ 288.586590][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g18025 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 288.586614][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=6123 [ 288.586625][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g18025 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 288.586648][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 288.586659][ C1] rcu: RCU grace-period kthread stack dump: [ 288.586667][ C1] task:rcu_preempt state:I stack:27112 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 288.586731][ C1] Call Trace: [ 288.586738][ C1] [ 288.586750][ C1] __schedule+0x169e/0x54f0 [ 288.586811][ C1] ? __pfx___schedule+0x10/0x10 [ 288.586849][ C1] ? schedule+0x90/0x360 [ 288.586880][ C1] schedule+0x164/0x360 [ 288.586910][ C1] schedule_timeout+0x158/0x2c0 [ 288.586941][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 288.586970][ C1] ? __pfx_process_timeout+0x10/0x10 [ 288.587002][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 288.587034][ C1] ? prepare_to_swait_event+0x340/0x370 [ 288.587071][ C1] rcu_gp_fqs_loop+0x312/0x11b0 [ 288.587106][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 288.587137][ C1] ? rcu_gp_init+0x136b/0x1610 [ 288.587174][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 288.587222][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 288.587257][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 288.587292][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 288.587325][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 288.587354][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 288.587385][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 288.587414][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 288.587448][ C1] kthread+0x388/0x470 [ 288.587480][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 288.587509][ C1] ? __pfx_kthread+0x10/0x10 [ 288.587542][ C1] ret_from_fork+0x514/0xb70 [ 288.587571][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 288.587598][ C1] ? __switch_to+0xc79/0x1410 [ 288.587622][ C1] ? __pfx_kthread+0x10/0x10 [ 288.587655][ C1] ret_from_fork_asm+0x1a/0x30 [ 288.587701][ C1] [ 288.587709][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 288.587730][ C1] Sending NMI from CPU 1 to CPUs 0: [ 288.587762][ C0] NMI backtrace for cpu 0 [ 288.587792][ C0] CPU: 0 UID: 0 PID: 6279 Comm: vhost-6276 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 288.587826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.587836][ C0] RIP: 0010:__lock_acquire+0x9/0x2d10 [ 288.587862][ C0] Code: 0a 00 00 00 5b e9 e7 55 00 00 5b e9 51 82 8a 09 cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 <53> 48 81 ec e8 00 00 00 65 48 8b 05 a7 d7 ce 10 48 89 84 24 e0 00 [ 288.587876][ C0] RSP: 0018:ffffc9000685fb68 EFLAGS: 00000046 [ 288.587890][ C0] RAX: 0000000000000000 RBX: ffffc9000685fc14 RCX: 0000000000000002 [ 288.587901][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8dfc81c0 [ 288.587912][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 288.587923][ C0] R10: 0000000000000000 R11: fffffbfff1f14edf R12: 0000000000000001 [ 288.587934][ C0] R13: 0000000000000001 R14: ffff88802cb80c44 R15: 0000000000000000 [ 288.587950][ C0] FS: 00007fc6ff1866c0(0000) GS:ffff888125f2d000(0000) knlGS:0000000000000000 [ 288.587965][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.587976][ C0] CR2: 0000001b33623ffc CR3: 0000000034d00000 CR4: 00000000003526f0 [ 288.587991][ C0] Call Trace: [ 288.587998][ C0] [ 288.588006][ C0] reacquire_held_locks+0x104/0x190 [ 288.588024][ C0] ? rt_spin_lock+0x1e0/0x400 [ 288.588044][ C0] lock_release+0x199/0x3c0 [ 288.588069][ C0] ? kcov_remote_stop+0x499/0x680 [ 288.588092][ C0] rt_spin_unlock+0x29/0x200 [ 288.588111][ C0] kcov_remote_stop+0x499/0x680 [ 288.588135][ C0] vhost_run_work_list+0x152/0x1e0 [ 288.588158][ C0] ? __pfx_vhost_run_work_list+0x10/0x10 [ 288.588179][ C0] vhost_task_fn+0x2ef/0x4a0 [ 288.588210][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 288.588238][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 288.588258][ C0] ? rt_spin_unlock+0x14f/0x200 [ 288.588279][ C0] ? rt_spin_unlock+0x160/0x200 [ 288.588296][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 288.588323][ C0] ret_from_fork+0x514/0xb70 [ 288.588345][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 288.588366][ C0] ? __switch_to+0xc79/0x1410 [ 288.588384][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 288.588411][ C0] ret_from_fork_asm+0x1a/0x30 [ 288.588441][ C0] [ 392.790474][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.790657][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.794923][ T6298] usb 1-1: USB disconnect, device number 5 [ 397.003053][ T6283] Bluetooth: hci4: command 0x0406 tx timeout [ 397.004418][ T6283] Bluetooth: hci3: command 0x0406 tx timeout [ 397.181672][ T6306] Bluetooth: hci1: command 0x0406 tx timeout [ 397.181712][ T6306] Bluetooth: hci0: command 0x0406 tx timeout [ 397.181734][ T6306] Bluetooth: hci2: command 0x0406 tx timeout SYZFAIL: failed to send rpc fd=3 want=832 sent=0 n=-1 (errno 32: Broken pipe) [ 399.122655][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.157240][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.178987][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.223159][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.224195][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.235254][ T5617] syz_tun (unregistering): left allmulticast mode [ 400.919146][ T827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.176362][ T827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.322281][ T4927] Bluetooth: hci5: command tx timeout [ 401.415678][ T827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.649830][ T827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.592250][ T827] bridge_slave_1: left allmulticast mode [ 402.592422][ T827] bridge_slave_1: left promiscuous mode [ 402.602020][ T827] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.680864][ T827] bridge_slave_0: left allmulticast mode [ 402.680893][ T827] bridge_slave_0: left promiscuous mode [ 402.681158][ T827] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.402815][ T4927] Bluetooth: hci5: command tx timeout [ 403.452047][ T827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.533426][ T827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.554295][ T827] bond0 (unregistering): Released all slaves [ 403.610733][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 403.717987][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.718435][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.718721][ T6309] bridge_slave_0: entered allmulticast mode [ 403.725903][ T6309] bridge_slave_0: entered promiscuous mode [ 403.775718][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.776086][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.776297][ T6309] bridge_slave_1: entered allmulticast mode [ 403.778976][ T6309] bridge_slave_1: entered promiscuous mode