last executing test programs: 23m5.488306126s ago: executing program 3 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r3 = syz_open_dev$evdev(0x0, 0x40, 0x141000) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) 23m1.569693584s ago: executing program 4 (id=76): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x8}, 0x1c) r0 = dup(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) 23m1.246395219s ago: executing program 3 (id=77): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m0.050933125s ago: executing program 4 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 22m58.114586128s ago: executing program 4 (id=82): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r3 = syz_open_dev$evdev(0x0, 0x40, 0x141000) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) 22m58.113673805s ago: executing program 1 (id=83): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="146f449cfcb3da783966ee9ecde817dc8ba41a658766339a708bbba692b11e41d5821f508d919010aad0a7f1e09e41c681", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="040e8f45fffff50e4c7910c171b127963769ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c3fa8622a5a36900c6a5ab314bb2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa6c3abce4cfaeb2ba130000000000000000", 0x8b}, {&(0x7f00000002c0)="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", 0x14f}, {&(0x7f0000000b80)="6f0070751b7d82b11bf815a5a39052adc265313a00e70250de1cf2af793b6fa1f5c5d603cf3fc8a89b0bebd59dc535fe23b45ea92cc77c6bd1b9e06eeb847e70cf231771050820bdc0521f72ba507ad7241fe7e91a1575c01cb37892c93cf0ea46dfb147", 0x64}, {&(0x7f0000000500)="38ebeb016e356fee4cda85d0cd971519cbb747f2f5dc8aa685667417945724349c2e53956a81cc01b96257be6cf756ee9a1d", 0x32}, {&(0x7f00000012c0)="ab07cb5269eaac6a6d8297a151f6ff8a153e45bf2a870dfe905021cdda98e2d6477ec965f23931447052dc921b69a55a12335828601119c981897e5f9d23246304c348b44d28b95fe7fb2e3464e8cbca139ef88350e5009432e741b1e76efaf855d18b7583abc382ae1007611eb41150ce1a7244f400691426252a7da7033ed275dbfa75153d247ab17aed244023c89edc8dae89d2748d2a59a87e7062d3d17c7c5fe0cbf61e709d5d62181d7c8bd12d21ff6f437150ef26fc26bbab9c00f788e1", 0xc1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d80)="c8c9bb0395733c925946bc562a54294b423cabffedb1436e2eeafec0dd5c365ee1453384a53151ac4520d0219b79105da2854cf859b2c67258d1b6e49b896188564a215ed2d8e36b81b1752c752f2ac52c559f562459a8b2f1f3da79b25b40062732bca7bf5b651c411cec17ef07fab31d5762eaaea7eaf30a5f52423d6c923b2125809279561c8000dad1c6fd86f3a4439a72d085fee666a9e251a92bde44605d4bca2dcc5a9ed5b751ee3c30646752fbbc797f2b4d593ec4ca4f898eb6c60c3fac28177e744b7c319bc8", 0xcb}, {&(0x7f0000000e80)="4634409e604cfb2078fb78d8bad8c1a0080000000504de0f98f8b7226856718342633bdf4331c04412363666e6b477e0e1ee9301000000260d3256c960341c6c8a3b52d1bcc900"/80, 0x50}], 0x2}}], 0x3, 0x40) 22m57.421562485s ago: executing program 1 (id=84): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 22m56.587504349s ago: executing program 1 (id=86): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r3 = syz_open_dev$evdev(0x0, 0x40, 0x141000) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) 22m56.558577934s ago: executing program 3 (id=87): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, r5, 0x0) readlinkat(r5, 0x0, &(0x7f0000000240)=""/65, 0x41) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x1, 0x6, 0xf000, 0x4, 0xfffffbfd, 0x12, 0x4, 0xa, 0x6, 0x2, 0x1, 0x6, 0x4, 0x2, 0x0, 0x4, 0x9, 0xffffff7f, 0x352f, 0x99, 0xcaa7, 0x2, 0x5, 0x7, 0x2000e77, 0x7a, 0xa, 0xaf7, 0x0, 0x385f]}) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) 22m54.66163712s ago: executing program 4 (id=89): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) syz_emit_vhci(0x0, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x24, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0), 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 22m54.615940137s ago: executing program 3 (id=90): io_uring_setup(0x6c4, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) 22m53.532024049s ago: executing program 3 (id=91): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x8}, 0x1c) r0 = dup(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) 22m52.183680603s ago: executing program 3 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 22m51.544692938s ago: executing program 1 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r3 = syz_open_dev$evdev(0x0, 0x40, 0x141000) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) 22m50.50499696s ago: executing program 4 (id=97): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) 22m48.934187689s ago: executing program 4 (id=99): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000380)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000008000840"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x401, @empty}, 0x1c) io_uring_setup(0x6993, &(0x7f0000000080)={0x0, 0x7eb3, 0x200, 0x1, 0x38f}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 22m29.382256119s ago: executing program 32 (id=96): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000380)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000008000840"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x401, @empty}, 0x1c) io_uring_setup(0x6993, &(0x7f0000000080)={0x0, 0x7eb3, 0x200, 0x1, 0x38f}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 22m29.241151865s ago: executing program 33 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r3 = syz_open_dev$evdev(0x0, 0x40, 0x141000) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) 22m29.01323401s ago: executing program 34 (id=98): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000380)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000008000840"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x401, @empty}, 0x1c) io_uring_setup(0x6993, &(0x7f0000000080)={0x0, 0x7eb3, 0x200, 0x1, 0x38f}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 22m28.858773126s ago: executing program 35 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 22m28.668652955s ago: executing program 36 (id=99): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000380)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000008000840"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x401, @empty}, 0x1c) io_uring_setup(0x6993, &(0x7f0000000080)={0x0, 0x7eb3, 0x200, 0x1, 0x38f}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 20m14.423568936s ago: executing program 7 (id=211): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xfffffcec, 0xffffffffffffffda, 0x8, {0x5, 0x2, 0x0, 0x401, 0x0, 0x4, {0x4, 0xfffffffffffffffb, 0x100, 0xa5, 0xa, 0x969b, 0x800007, 0x1003, 0x10000008, 0x6000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 20m13.303400188s ago: executing program 7 (id=212): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="146f449cfcb3da783966ee9ecde817dc8ba41a658766339a708bbba692b11e41d5821f508d919010aad0a7f1e09e41c681", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="040e8f45fffff50e4c7910c171b127963769ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c3fa8622a5a36900c6a5ab314bb2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa6c3abce4cfaeb2ba130000000000000000", 0x8b}, {&(0x7f00000002c0)="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", 0x14f}, {&(0x7f0000000b80)="6f0070751b7d82b11bf815a5a39052adc265313a00e70250de1cf2af793b6fa1f5c5d603cf3fc8a89b0bebd59dc535fe23b45ea92cc77c6bd1b9e06eeb847e70cf231771050820bdc0521f72ba507ad7241fe7e91a1575c01cb37892c93cf0ea46dfb147", 0x64}, {&(0x7f0000000500)="38ebeb016e356fee4cda85d0cd971519cbb747f2f5dc8aa685667417945724349c2e53956a81cc01b96257be6cf756ee9a1d", 0x32}, {&(0x7f00000012c0)="ab07cb5269eaac6a6d8297a151f6ff8a153e45bf2a870dfe905021cdda98e2d6477ec965f23931447052dc921b69a55a12335828601119c981897e5f9d23246304c348b44d28b95fe7fb2e3464e8cbca139ef88350e5009432e741b1e76efaf855d18b7583abc382ae1007611eb41150ce1a7244f400691426252a7da7033ed275dbfa75153d247ab17aed244023c89edc8dae89d2748d2a59a87e7062d3d17c7c5fe0cbf61e709d5d62181d7c8bd12d21ff6f437150ef26fc26bbab9c00f788e1", 0xc1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d80)="c8c9bb0395733c925946bc562a54294b423cabffedb1436e2eeafec0dd5c365ee1453384a53151ac4520d0219b79105da2854cf859b2c67258d1b6e49b896188564a215ed2d8e36b81b1752c752f2ac52c559f562459a8b2f1f3da79b25b40062732bca7bf5b651c411cec17ef07fab31d5762eaaea7eaf30a5f52423d6c923b2125809279561c8000dad1c6fd86f3a4439a72d085fee666a9e251a92bde44605d4bca2dcc5a9ed5b751ee3c30646752fbbc797f2b4d593ec4ca4f898eb6c60c3fac28177e744b7c319bc8", 0xcb}, {&(0x7f0000000e80)="4634409e604cfb2078fb78d8bad8c1a0080000000504de0f98f8b7226856718342633bdf4331c04412363666e6b477e0e1ee9301000000260d3256c960341c6c8a3b52d1bcc900"/80, 0x50}], 0x2}}], 0x3, 0x40) 20m13.217013091s ago: executing program 7 (id=213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) 20m12.23868485s ago: executing program 7 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x80000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 20m11.349790489s ago: executing program 7 (id=215): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) 20m11.25839233s ago: executing program 7 (id=216): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x200, 0xa2600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x580, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, r0, 0x1f8d2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x101000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 19m55.884651516s ago: executing program 37 (id=216): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x200, 0xa2600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x580, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, r0, 0x1f8d2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x101000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 7m59.833535282s ago: executing program 6 (id=1127): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="146f449cfcb3da783966ee9ecde817dc8ba41a658766339a708bbba692b11e41d5821f508d919010aad0a7f1e09e41c681", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="040e8f45fffff50e4c7910c171b127963769ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c3fa8622a5a36900c6a5ab314bb2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa6c3abce4cfaeb2ba130000000000000000", 0x8b}, {0x0}, {&(0x7f0000000b80)="6f0070751b7d82b11bf815a5a39052adc265313a00e70250de1cf2af793b6fa1f5c5d603cf3fc8a89b0bebd59dc535fe23b45ea92cc77c6bd1b9e06eeb847e70cf231771050820bdc0521f72ba507ad7241fe7e91a1575c01cb37892c93cf0ea46dfb147", 0x64}, {&(0x7f0000000500)="38ebeb016e356fee4cda85d0cd971519cbb747f2f5dc8aa685667417945724349c2e53956a81cc01b96257be6cf756ee9a1d", 0x32}, {&(0x7f00000012c0)="ab07cb5269eaac6a6d8297a151f6ff8a153e45bf2a870dfe905021cdda98e2d6477ec965f23931447052dc921b69a55a12335828601119c981897e5f9d23246304c348b44d28b95fe7fb2e3464e8cbca139ef88350e5009432e741b1e76efaf855d18b7583abc382ae1007611eb41150ce1a7244f400691426252a7da7033ed275dbfa75153d247ab17aed244023c89edc8dae89d2748d2a59a87e7062d3d17c7c5fe0cbf61e709d5d62181d7c8bd12d21ff6f437150ef26fc26bbab9c00f788e1", 0xc1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d80)="c8c9bb0395733c925946bc562a54294b423cabffedb1436e2eeafec0dd5c365ee1453384a53151ac4520d0219b79105da2854cf859b2c67258d1b6e49b896188564a215ed2d8e36b81b1752c752f2ac52c559f562459a8b2f1f3da79b25b40062732bca7bf5b651c411cec17ef07fab31d5762eaaea7eaf30a5f52423d6c923b2125809279561c8000dad1c6fd86f3a4439a72d085fee666a9e251a92bde44605d4bca2dcc5a9ed5b751ee3c30646752fbbc797f2b4d593ec4ca4f898eb6c60c3fac28177e744b7c319bc8", 0xcb}, {&(0x7f0000000e80)="4634409e604cfb2078fb78d8bad8c1a0080000000504de0f98f8b7226856718342633bdf4331c04412363666e6b477e0e1ee9301000000260d3256c960341c6c8a3b52d1bcc900"/80, 0x50}], 0x2}}], 0x3, 0x40) 7m59.429689717s ago: executing program 6 (id=1130): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @volatile={0x8}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @union={0x1, 0x3, 0x0, 0x5, 0x1, 0x30c2, [{0xd, 0x1}, {0xf, 0x3, 0x1}, {0xe, 0x2, 0xe}]}, @var={0x8, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61, 0x0, 0x0, 0x1e]}}, &(0x7f0000001900)=""/83, 0x82, 0x53, 0x1}, 0x28) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000019c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0x58, &(0x7f0000001c00)}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x7fffffffffffffff}) signalfd4(r0, &(0x7f0000001d80)={[0xffffffffffff2b74]}, 0x8, 0x80800) 7m58.207749166s ago: executing program 6 (id=1131): r0 = io_uring_setup(0x437a, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) close_range(r0, r6, 0x200000000000000) r7 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) accept$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r8 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r8, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7m56.956390959s ago: executing program 6 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202"], &(0x7f0000000100)='GPL\x00'}, 0x94) 7m55.308746883s ago: executing program 6 (id=1135): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 7m54.984267909s ago: executing program 6 (id=1136): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m39.867009275s ago: executing program 38 (id=1136): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m38.226793348s ago: executing program 0 (id=1604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="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", 0xfd1}], 0x1}, 0x20000000) 4m36.110891046s ago: executing program 0 (id=1607): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 4m35.877957044s ago: executing program 0 (id=1609): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 4m35.06427899s ago: executing program 0 (id=1612): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) 4m33.306866208s ago: executing program 0 (id=1616): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r5 = io_uring_setup(0x43f, &(0x7f0000000000)={0x0, 0xc9f3, 0x400, 0x3, 0x2c7}) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000180)={0x5, 0xffffffffffffffff, 0x94e9a1b7b6714c02, {0x7d, 0x2}, 0xa}, 0x1) fcntl$addseals(r4, 0x409, 0x7) syz_open_dev$sndpcmp(0x0, 0xb, 0x1) r7 = syz_io_uring_setup(0x4e74, &(0x7f0000000080)={0x0, 0xe933, 0x80, 0xfffffffe, 0x130}, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x414}, 0x1}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1d19"], 0x20) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r9, @ANYRES64, @ANYBLOB="0000000001000000000000008400"], 0x48}}, 0x0) 4m31.898335679s ago: executing program 0 (id=1619): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) 4m15.72109002s ago: executing program 39 (id=1619): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) 17.703162346s ago: executing program 9 (id=2055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x400, 0x9004}, 0x4) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x2400) syz_usb_connect$uac1(0x80bbdf520f22f72b, 0xa4, &(0x7f0000000100)=ANY=[], 0x0) 11.738208898s ago: executing program 9 (id=2069): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x7fffffffffffffff}) signalfd4(r0, &(0x7f0000001d80)={[0xffffffffffff2b74]}, 0x8, 0x80800) 10.55312192s ago: executing program 9 (id=2071): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r6, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x6, 0x50424752, 0x6, 0x6, 0x3, @stepwise={{0xff, 0xb}, {0x1, 0x9}, {0x6, 0x1}}}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) 8.548048278s ago: executing program 2 (id=2077): socket$packet(0x11, 0x3, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 8.121445713s ago: executing program 5 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.79868143s ago: executing program 5 (id=2079): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0xd48a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40041) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000340)) 6.015389463s ago: executing program 9 (id=2080): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8, 0x4000000}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbf9}, 0x14}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x1, &(0x7f0000001200)=[{0x6}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c90023"], 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@usrquota}]}) r3 = openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, 0x0, 0x0) r4 = accept4$nfc_llcp(r2, &(0x7f0000000400), &(0x7f0000000180)=0x60, 0x80800) sendmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4848) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) 5.495474815s ago: executing program 2 (id=2083): unshare(0x6020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 5.47228926s ago: executing program 5 (id=2084): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x5, 0xf7, 0x0, 0x6}, 0xffffffffffffff55}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10002, 0x40000000000009, 0xfffffffdfffffffd, 0x800000000, 0x10000, 0x20000002, 0x4002004c2, 0xffe, 0x0, 0x0, 0x2, 0x1, 0x9f5, 0xd57b, 0x0, 0x5], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.11887418s ago: executing program 2 (id=2085): userfaultfd(0x80001) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x281, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 3.985798101s ago: executing program 2 (id=2086): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x40a}, {&(0x7f0000001140)="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", 0x7d7}, {&(0x7f00000000c0)="f3", 0x1}], 0x3}, 0x2000c080) 3.969068921s ago: executing program 8 (id=2087): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x129080, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xa0281, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4c7ca3e9, 0x4, 0xffffffffffffffff}, {0x3, 0x2, 0x2, 0x7fff}, 0x6, 0x8000}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac"], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.862834144s ago: executing program 9 (id=2088): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, 0x0) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff85, &(0x7f00000002c0)=0xe1a) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.764188763s ago: executing program 2 (id=2089): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r6, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x6, 0x50424752, 0x6, 0x6, 0x3, @stepwise={{0xff, 0xb}, {0x1, 0x9}, {0x6, 0x1}}}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) 3.710997865s ago: executing program 5 (id=2090): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3.652663754s ago: executing program 8 (id=2091): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x15, 0x7, 0x0, 0x0, 0x10, 0x0}) 3.366899885s ago: executing program 8 (id=2092): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x7323, 0x0, 0x5, 0x0, 0x0) 2.542054305s ago: executing program 5 (id=2093): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0x15, &(0x7f0000000100), 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) 2.207513352s ago: executing program 1 (id=1169): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, 0x0, 0x0, 0x1020000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1.457462077s ago: executing program 9 (id=2094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.456392673s ago: executing program 5 (id=2095): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000050000800000000000000000850000002c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b40d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.37884585s ago: executing program 8 (id=2096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) 725.490396ms ago: executing program 2 (id=2097): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8, 0x4000000}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbf9}, 0x14}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x1, &(0x7f0000001200)=[{0x6}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c90023"], 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@usrquota}]}) r3 = openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, 0x0, 0x0) r4 = accept4$nfc_llcp(r2, &(0x7f0000000400), &(0x7f0000000180)=0x60, 0x80800) sendmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4848) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) 322.084857ms ago: executing program 8 (id=2098): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="896b6bb38cf1b52353635304f9c9ceeccb7d09fa1c18ca6b3990bbbd0ace0d65ab59dd3198dcdc0c19d95fa6987e7d2232a213387e955785c6a6c9ad9b40de6cac8000832025aae7f263c0cd1199e09ee31f98c4bf2cfa1ee78cbfdca17e4d7f93ca727cbcaa97e8b155a92ac13350cc3ab6c20935cfaaec9cca3f6603641f1bedf1ad3fe6f5a152c9f7fe73771bb453325c7a41cb8d29398244da1f9e1d26f5a22a23fb76391b2619850c29ec2af0f1bd9a71d07dca6ee069c9ee10fd1f2b3db5a8d9bed329f20d99414b9208346605b94b3b0da3a53d107b6b172c0041a8c4e7098cc5b9a74fd4c330aa3990a1dadd6d70e765d008aedde7209e330ea38c10eb8be72248f3c68616dfcf55733344253756ec1bb87a30eb18afc83cde008b3f277371ac1b2b0876bfc140dfb2d47491ee2741992927a62f2fc7454a507bd49a7a6376fec5c7e4b3896cc808ecf145ef4f7c0bf9d3b551fa2ee6b0e46fc90aa664d63519ba7ad3dc5386b4155617c8a97e22e3975bdb4e61da16a59510ce92927ab0efe08866663f79abba6dd56d0e1480cdf11796113fade57062a931faf339b338d33e1e8c8ae62073b793f538f5c40b6b3f281dd4378e14528acc9dac5cbc973b0fa62ee101e9c3a5d0a9913a50404b0ed589e1e7f13037e4902b11cef0d1329f2854f6a68bec39d071dcbf4ce9189d7bf46b58e715b2eb2ab70c1678c40cea2af9b5343cfaf3f5e0270958cdd21bb61462912df70b5c12d3234b5c1ab33fc96ea787094e5c07f38bf309441e14a3bac70eff5d3407df39c6a3869ea2acb75321eefbb1e48606104207648a00d42fff3ae6103b764bba1a579a20728d7bb05b0208fdaff709b44e32df79b25c9587af5ef34ee426b3649811908323bcc32287afbabf7367f427c180ae2312330034a5b32f85380e2d0c092646fa4c42198f1504ed16c27d03a26eb381fc89d0dd12d277f700393d7316a6fc1435e174cbbf378728e9c005868d373e13bd1c6ae7127ea070df511b7ecb282aa934c9ad2842ed8bf4cb2b34b0e92faa5babdf64004c4c736ab57e2f29cfc6586e8e02b5ee143c98f22e867f009abe1416e2fc07365f7ebba8c42415a6c4e106de463496827af474e78c843a904ca8a4db58b161119f7bd7114dc419c9c81f208b35b208061d2f7f81b54e31f8388a725645617c101d9fb9f1f7aa8fcba7a44450aaf09aec5f172183d9d6c28c2b8a6fcace6497c5d19d77bb832d9b10b87c8a11e004f28408f95c7a1e575ba574a577c464f8b5abea6421d8e265a297bc6c0bd12af8adad64f81bb2f54c1cc2b778d22e32eb9131690b21fec1cc137831891e97f1c5947642e90891b27a0d1ac79c5b116b4da91d4ae11a1e94c50e6760a4dcd3248caffc62c36e80f946b75bf777e2977fa1d7c2a810dea28bdc6be1965991548da5d30eb1faa3005f2d9b7a43a4c8", 0x40a}, {&(0x7f0000001140)="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", 0x7d7}, {&(0x7f00000000c0)="f3", 0x1}], 0x3}, 0x2000c080) 57.46032ms ago: executing program 1 (id=2099): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0x800000, 0x10000, 0x2, 0x7}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0}, 0x1) 0s ago: executing program 8 (id=2100): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x129080, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xa0281, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4c7ca3e9, 0x4, 0xffffffffffffffff}, {0x3, 0x2, 0x2, 0x7fff}, 0x6, 0x8000}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac"], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): err -32 [ 1028.739238][ T5810] vc032x 9-1:0.0: probe with driver vc032x failed with error -32 [ 1029.350089][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.760324][ T7986] bond0 (unregistering): Released all slaves [ 1029.907079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.389279][ T5810] usb 9-1: USB disconnect, device number 2 [ 1031.124597][T11511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.247525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.309983][ T7560] libceph: connect (1)[c::]:6789 error -101 [ 1031.310104][ T7560] libceph: mon0 (1)[c::]:6789 connect error [ 1031.310519][ T7560] libceph: connect (1)[c::]:6789 error -101 [ 1031.310627][ T7560] libceph: mon0 (1)[c::]:6789 connect error [ 1031.391431][T11904] ceph: No mds server is up or the cluster is laggy [ 1032.043913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.204924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.278179][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.332506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.525937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.999401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.446450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.494238][T11511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.037036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.366932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.637865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.106539][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 1036.106578][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.106611][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 1036.527588][ T995] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1036.677716][ T995] usb 9-1: Using ep0 maxpacket: 8 [ 1036.680973][ T995] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.681031][ T995] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1036.681053][ T995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.719520][ T995] usb 9-1: config 0 descriptor?? [ 1036.786794][ T995] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1037.015885][ T995] gspca_vc032x: reg_r err -32 [ 1037.016042][ T995] vc032x 9-1:0.0: probe with driver vc032x failed with error -32 [ 1037.536148][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1037.536364][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1037.784650][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1037.795059][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1037.795255][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1037.795517][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1037.796699][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1037.798261][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1037.798981][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1038.753142][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1038.753438][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1039.007100][T11949] ceph: No mds server is up or the cluster is laggy [ 1039.215206][ T5865] usb 9-1: USB disconnect, device number 3 [ 1042.121189][T11993] ceph: No mds server is up or the cluster is laggy [ 1042.126588][T10852] Bluetooth: hci5: command tx timeout [ 1042.185860][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1042.186080][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1043.319795][ T7986] hsr_slave_0: left promiscuous mode [ 1043.463452][ T7986] hsr_slave_1: left promiscuous mode [ 1043.465445][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.465463][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.646340][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.646367][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.881116][ T7986] veth1_macvtap: left promiscuous mode [ 1043.897864][ T7986] veth0_macvtap: left promiscuous mode [ 1043.898168][ T7986] veth1_vlan: left promiscuous mode [ 1043.898315][ T7986] veth0_vlan: left promiscuous mode [ 1044.177643][ T5812] Bluetooth: hci5: command tx timeout [ 1045.171309][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1045.171327][ T37] audit: type=1326 audit(1760666477.608:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.187343][ T37] audit: type=1326 audit(1760666477.638:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.187566][ T37] audit: type=1326 audit(1760666477.638:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.191777][ T37] audit: type=1326 audit(1760666477.648:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.191818][ T37] audit: type=1326 audit(1760666477.648:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.209078][ T37] audit: type=1326 audit(1760666477.658:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.278251][ T37] audit: type=1326 audit(1760666477.708:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.285036][ T37] audit: type=1326 audit(1760666477.738:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.288769][ T37] audit: type=1326 audit(1760666477.738:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x7ffc0000 [ 1045.319871][ T37] audit: type=1326 audit(1760666477.778:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12020 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68ad47d710 code=0x7ffc0000 [ 1046.393612][ T5812] Bluetooth: hci5: command tx timeout [ 1048.427456][ T5812] Bluetooth: hci5: command tx timeout [ 1053.598877][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1053.599100][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1053.676590][T12085] ceph: No mds server is up or the cluster is laggy [ 1053.857793][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1053.857998][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1054.511656][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.511806][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.567401][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 1054.569258][ T37] audit: type=1326 audit(1760666487.018:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.577158][ T37] audit: type=1326 audit(1760666487.018:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.577336][ T37] audit: type=1326 audit(1760666487.018:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.580547][ T37] audit: type=1326 audit(1760666487.018:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.582632][ T37] audit: type=1326 audit(1760666487.018:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.591723][ T37] audit: type=1326 audit(1760666487.018:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.595933][ T37] audit: type=1326 audit(1760666487.028:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.608175][ T37] audit: type=1326 audit(1760666487.028:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.608227][ T37] audit: type=1326 audit(1760666487.038:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x7ffc0000 [ 1054.608270][ T37] audit: type=1326 audit(1760666487.038:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.9.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f831c79d710 code=0x7ffc0000 [ 1058.980312][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 1059.208742][ T995] libceph: connect (1)[c::]:6789 error -101 [ 1059.208956][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 1059.209440][ T995] libceph: connect (1)[c::]:6789 error -101 [ 1059.209615][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 1059.284232][T12130] ceph: No mds server is up or the cluster is laggy [ 1059.438269][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 1059.473393][ T995] libceph: connect (1)[c::]:6789 error -101 [ 1059.473615][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 1061.070761][T12144] fuse: Unknown parameter 'fd0x0000000000000005' [ 1061.259507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.821720][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1165'. [ 1061.871337][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.034528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.499603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.535427][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.742778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.836312][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1063.836501][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1063.836978][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1063.837166][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1063.888830][T12164] ceph: No mds server is up or the cluster is laggy [ 1063.952540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1064.118218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1064.118922][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1064.119134][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1064.972875][T10852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1065.032941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.036877][T10852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1065.056089][T10852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1065.067657][T10852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1065.068777][T10852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1065.427709][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.555585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.773082][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.892488][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.939662][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.483005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.137396][T10852] Bluetooth: hci3: command tx timeout [ 1068.256092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.444019][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.253807][T10852] Bluetooth: hci3: command tx timeout [ 1069.850444][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.297414][ T7560] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1070.444863][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1187'. [ 1070.487399][ T7560] usb 1-1: Using ep0 maxpacket: 8 [ 1070.489679][ T7560] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.489732][ T7560] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1070.489754][ T7560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.539382][ T7560] usb 1-1: config 0 descriptor?? [ 1070.608710][ T7560] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1072.058243][ T7560] gspca_vc032x: reg_r err -32 [ 1072.058350][ T7560] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 1072.062150][T10852] Bluetooth: hci3: command tx timeout [ 1073.107790][T11961] chnl_net:caif_netlink_parms(): no params data found [ 1073.166354][ T5790] usb 1-1: USB disconnect, device number 23 [ 1074.123319][T10852] Bluetooth: hci3: command tx timeout [ 1075.348340][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 1075.348552][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 1075.351067][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 1075.351260][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 1075.617510][T12282] ceph: No mds server is up or the cluster is laggy [ 1075.850021][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1075.850240][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1075.911309][T12179] chnl_net:caif_netlink_parms(): no params data found [ 1076.794229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.957512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.121367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.433184][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.433259][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.433445][T11961] bridge_slave_0: entered allmulticast mode [ 1078.479412][T11961] bridge_slave_0: entered promiscuous mode [ 1078.521365][ T992] libceph: connect (1)[c::]:6789 error -101 [ 1078.521561][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 1078.522021][ T992] libceph: connect (1)[c::]:6789 error -101 [ 1078.522181][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 1078.535582][ T5790] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1078.667332][T12329] ceph: No mds server is up or the cluster is laggy [ 1078.912842][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1078.913058][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1079.027355][ T5790] usb 1-1: Using ep0 maxpacket: 8 [ 1079.030721][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.030946][T11961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.031678][T11961] bridge_slave_1: entered allmulticast mode [ 1079.032416][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.032471][ T5790] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1079.032491][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.139708][T11961] bridge_slave_1: entered promiscuous mode [ 1079.187121][ T5790] usb 1-1: config 0 descriptor?? [ 1079.233414][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.252565][ T5790] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1079.753217][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 1079.753230][ T37] audit: type=1326 audit(1760666512.208:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.753661][ T37] audit: type=1326 audit(1760666512.208:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.754702][ T37] audit: type=1326 audit(1760666512.208:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.819294][ T37] audit: type=1326 audit(1760666512.208:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.819331][ T37] audit: type=1326 audit(1760666512.218:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.819355][ T37] audit: type=1326 audit(1760666512.218:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.819378][ T37] audit: type=1326 audit(1760666512.228:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.819400][ T37] audit: type=1326 audit(1760666512.228:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.819456][ T37] audit: type=1326 audit(1760666512.228:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.819480][ T37] audit: type=1326 audit(1760666512.238:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12346 comm="syz.8.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x7ffc0000 [ 1079.865572][ T5790] gspca_vc032x: reg_r err -32 [ 1079.865632][ T5790] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 1080.785116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.468694][ T9] usb 1-1: USB disconnect, device number 24 [ 1081.716033][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.139740][ T995] libceph: connect (1)[c::]:6789 error -101 [ 1084.139950][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 1084.143693][T12374] ceph: No mds server is up or the cluster is laggy [ 1084.172815][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.172962][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.173199][T12179] bridge_slave_0: entered allmulticast mode [ 1084.230804][T12179] bridge_slave_0: entered promiscuous mode [ 1084.324642][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.345633][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.345776][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.346012][T12179] bridge_slave_1: entered allmulticast mode [ 1084.619576][T12179] bridge_slave_1: entered promiscuous mode [ 1084.982325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.084050][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.175843][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.752445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.004336][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.153756][ T7986] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.520019][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1087.784653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.821169][ T7560] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1088.258517][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.297424][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1088.299734][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.299789][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1088.299813][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.361726][ T9] usb 10-1: config 0 descriptor?? [ 1088.391033][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1088.417488][ T7560] usb 9-1: Using ep0 maxpacket: 8 [ 1088.423600][ T7560] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.423657][ T7560] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1088.423729][ T7560] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.490259][ T7560] usb 9-1: config 0 descriptor?? [ 1088.545275][ T7986] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.562056][ T7560] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1088.832189][T11961] team0: Port device team_slave_0 added [ 1088.837970][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.843490][T11961] team0: Port device team_slave_1 added [ 1088.851431][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.716187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.725639][ T7560] gspca_vc032x: reg_w err -110 [ 1089.725733][ T7560] vc032x 9-1:0.0: probe with driver vc032x failed with error -110 [ 1089.740551][ T9] gspca_vc032x: reg_r err -32 [ 1089.740650][ T9] vc032x 10-1:0.0: probe with driver vc032x failed with error -32 [ 1091.099464][ T44] usb 10-1: USB disconnect, device number 5 [ 1091.630623][T10305] usb 9-1: USB disconnect, device number 4 [ 1091.861607][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.201457][ C1] vkms_vblank_simulate: vblank timer overrun [ 1093.235145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1093.363368][ T7986] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.384382][T12440] ceph: No mds server is up or the cluster is laggy [ 1093.394852][ T44] libceph: connect (1)[c::]:6789 error -101 [ 1093.395053][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 1093.450278][T11961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.450289][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.450303][T11961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.453545][T12179] team0: Port device team_slave_0 added [ 1093.454294][T11961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.454301][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.454315][T11961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.638378][T12179] team0: Port device team_slave_1 added [ 1093.997131][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.079057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.275137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.279630][T12456] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1096.282196][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.864245][ T7986] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.957320][ T44] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1097.137322][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 1097.171235][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.171274][ T44] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1097.171287][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.286362][T12469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1097.286387][T12469] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1097.304689][T12469] vhci_hcd vhci_hcd.0: Device attached [ 1097.341757][ T44] usb 9-1: config 0 descriptor?? [ 1097.488664][ T7560] vhci_hcd: vhci_device speed not set [ 1097.504510][ T44] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1097.737770][ T7560] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1097.824928][T12179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.824945][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.824978][T12179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.901676][T12179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.902725][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.902754][T12179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.019597][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1098.027012][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1098.037064][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1098.115416][T12471] vhci_hcd: connection reset by peer [ 1098.159574][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1098.177707][T11806] vhci_hcd: stop threads [ 1098.177728][T11806] vhci_hcd: release socket [ 1098.177799][T11806] vhci_hcd: disconnect device [ 1098.184338][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1098.561041][ T44] gspca_vc032x: reg_r err -71 [ 1098.561132][ T44] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 1098.582463][ T44] usb 9-1: USB disconnect, device number 5 [ 1099.812196][T12179] hsr_slave_0: entered promiscuous mode [ 1099.813539][T12179] hsr_slave_1: entered promiscuous mode [ 1099.814498][T12179] debugfs: 'hsr0' already exists in 'hsr' [ 1099.814521][T12179] Cannot create hsr debugfs directory [ 1100.043283][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1100.043481][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1100.045527][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1100.045704][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1100.074035][T12488] ceph: No mds server is up or the cluster is laggy [ 1100.257342][T10852] Bluetooth: hci2: command tx timeout [ 1100.779315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.894628][T12501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.410470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.828656][ C0] vkms_vblank_simulate: vblank timer overrun [ 1102.531441][ C0] vkms_vblank_simulate: vblank timer overrun [ 1102.536139][T10852] Bluetooth: hci2: command tx timeout [ 1103.155678][T12505] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1103.158135][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.292129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.292623][ T7560] vhci_hcd: vhci_device speed not set [ 1103.508547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.673071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.805193][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.298490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.777368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.778241][T10852] Bluetooth: hci2: command tx timeout [ 1106.139958][ T995] libceph: connect (1)[c::]:6789 error -101 [ 1106.140167][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 1106.140659][ T995] libceph: connect (1)[c::]:6789 error -101 [ 1106.140842][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 1107.191609][T10852] Bluetooth: hci2: command tx timeout [ 1107.192512][ T995] libceph: connect (1)[c::]:6789 error -101 [ 1107.192708][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 1107.289195][ T7986] bridge_slave_1: left allmulticast mode [ 1107.289216][ T7986] bridge_slave_1: left promiscuous mode [ 1107.289379][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.396041][T12537] ceph: No mds server is up or the cluster is laggy [ 1107.840140][ T995] libceph: connect (1)[c::]:6789 error -101 [ 1107.840349][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 1107.938453][ T7986] bridge_slave_0: left allmulticast mode [ 1107.938482][ T7986] bridge_slave_0: left promiscuous mode [ 1107.938744][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.045803][ C0] vkms_vblank_simulate: vblank timer overrun [ 1108.159766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1108.206582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1109.202229][T12554] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1109.228778][ T7986] bridge_slave_1: left allmulticast mode [ 1109.230812][ T7986] bridge_slave_1: left promiscuous mode [ 1109.231068][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.323847][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.730940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.732807][ T7986] bridge_slave_0: left allmulticast mode [ 1111.732833][ T7986] bridge_slave_0: left promiscuous mode [ 1111.733094][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.975022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.727154][T12576] syz.9.1256 (12576) used greatest stack depth: 18328 bytes left [ 1116.749592][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.749667][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.579509][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.638025][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.663593][ T7986] bond0 (unregistering): Released all slaves [ 1118.818406][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.908276][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.969537][ T7986] bond0 (unregistering): Released all slaves [ 1119.243313][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 1119.243331][ T37] audit: type=1326 audit(1760666551.698:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz.0.1263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x0 [ 1126.885207][T10852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1126.915007][T10852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1126.927406][T10852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1126.928070][ T7986] hsr_slave_0: left promiscuous mode [ 1126.932899][T10852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1126.933750][T10852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1127.070170][ T7986] hsr_slave_1: left promiscuous mode [ 1127.071129][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.071154][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.298384][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.298415][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.429391][T10852] Bluetooth: hci5: command tx timeout [ 1129.502649][T12679] Illegal XDP return value 4294967274 on prog (id 114) dev N/A, expect packet loss! [ 1130.492961][ T7986] veth1_macvtap: left promiscuous mode [ 1130.493079][ T7986] veth0_macvtap: left promiscuous mode [ 1130.493338][ T7986] veth1_vlan: left promiscuous mode [ 1130.493528][ T7986] veth0_vlan: left promiscuous mode [ 1131.329921][ T7986] pimreg3 (unregistering): left allmulticast mode [ 1132.152422][T10852] Bluetooth: hci5: command tx timeout [ 1133.488698][T12714] Bluetooth: MGMT ver 1.23 [ 1134.177555][T10852] Bluetooth: hci5: command tx timeout [ 1136.262185][T10852] Bluetooth: hci5: command tx timeout [ 1138.877500][T10305] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1139.764280][ T6061] IPVS: starting estimator thread 0... [ 1139.858036][T12759] IPVS: using max 14 ests per chain, 33600 per kthread [ 1139.913444][T10305] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1139.913462][T10305] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.913472][T10305] usb 10-1: config 0 has no interface number 0 [ 1139.915600][T10305] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1139.915617][T10305] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.915627][T10305] usb 10-1: Product: syz [ 1139.915635][T10305] usb 10-1: Manufacturer: syz [ 1139.915642][T10305] usb 10-1: SerialNumber: syz [ 1139.922380][T10305] usb 10-1: config 0 descriptor?? [ 1140.038255][T10305] hub 10-1:0.31: bad descriptor, ignoring hub [ 1140.038293][T10305] hub 10-1:0.31: probe with driver hub failed with error -5 [ 1140.041976][T10305] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1140.042011][T10305] uvcvideo 10-1:0.31: No valid video chain found. [ 1141.078327][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 1141.242177][ T995] usb 10-1: USB disconnect, device number 6 [ 1141.327818][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 1145.817863][T12473] chnl_net:caif_netlink_parms(): no params data found [ 1150.863532][T12473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.863749][T12473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.863999][T12473] bridge_slave_0: entered allmulticast mode [ 1150.867129][T12473] bridge_slave_0: entered promiscuous mode [ 1150.911007][T12473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.911139][T12473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.911335][T12473] bridge_slave_1: entered allmulticast mode [ 1150.914052][T12473] bridge_slave_1: entered promiscuous mode [ 1153.097481][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1153.725870][ T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1153.725902][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.743248][ T9] usb 1-1: config 0 descriptor?? [ 1153.779695][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1155.083737][ T9] gp8psk: usb in 128 operation failed. [ 1155.087657][ T9] gp8psk: usb in 137 operation failed. [ 1155.087687][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1155.087731][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1155.109247][ T9] usb 1-1: USB disconnect, device number 25 [ 1155.289427][T12832] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1155.331658][T12473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.383370][T12473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.447400][ T37] audit: type=1326 audit(1760666589.898:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12871 comm="syz.8.1352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1159.316442][T12669] chnl_net:caif_netlink_parms(): no params data found [ 1159.537410][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1159.565122][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1159.566668][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1159.591561][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1159.592758][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1162.658492][ T5812] Bluetooth: hci3: command tx timeout [ 1163.161800][ T37] audit: type=1326 audit(1760666595.618:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12915 comm="syz.8.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1163.561121][ T7986] bridge_slave_1: left allmulticast mode [ 1163.561150][ T7986] bridge_slave_1: left promiscuous mode [ 1163.561444][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.659949][ T7986] bridge_slave_0: left allmulticast mode [ 1163.659970][ T7986] bridge_slave_0: left promiscuous mode [ 1163.660188][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.753477][ T7986] bridge_slave_1: left allmulticast mode [ 1163.753507][ T7986] bridge_slave_1: left promiscuous mode [ 1163.756298][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.841815][ T7986] bridge_slave_0: left allmulticast mode [ 1163.841841][ T7986] bridge_slave_0: left promiscuous mode [ 1163.842067][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.017392][ T5812] Bluetooth: hci3: command tx timeout [ 1165.757447][ T5810] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1166.547368][ T5810] usb 9-1: Using ep0 maxpacket: 32 [ 1166.670766][ T5810] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1166.687479][ T5810] usb 9-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 1166.687511][ T5810] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1166.687532][ T5810] usb 9-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0 [ 1166.687562][ T5810] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1166.721783][ T5810] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1166.721813][ T5810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.721831][ T5810] usb 9-1: Product: syz [ 1166.721845][ T5810] usb 9-1: Manufacturer: syz [ 1166.721859][ T5810] usb 9-1: SerialNumber: syz [ 1166.789228][T12936] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1166.868617][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.028937][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.057442][ T5812] Bluetooth: hci3: command tx timeout [ 1167.178339][ T7986] bond0 (unregistering): Released all slaves [ 1167.218088][ T37] audit: type=1326 audit(1760666599.678:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12951 comm="syz.9.1379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x0 [ 1168.444958][ T5812] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1169.147455][T10852] Bluetooth: hci3: command tx timeout [ 1169.166675][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.309737][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.415872][ T7986] bond0 (unregistering): Released all slaves [ 1169.745629][T12669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.745839][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.746283][T12669] bridge_slave_0: entered allmulticast mode [ 1169.773959][T12669] bridge_slave_0: entered promiscuous mode [ 1169.827464][T12669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.827604][T12669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.827856][T12669] bridge_slave_1: entered allmulticast mode [ 1169.897883][T12669] bridge_slave_1: entered promiscuous mode [ 1171.440601][T12669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.592423][ T5810] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1171.627788][ T5810] usb 9-1: USB disconnect, device number 6 [ 1171.742562][ T7986] hsr_slave_0: left promiscuous mode [ 1171.759063][ T37] audit: type=1326 audit(1760666604.208:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12976 comm="syz.8.1389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1171.832185][ T7986] hsr_slave_1: left promiscuous mode [ 1171.833340][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.878410][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.918203][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.959149][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.018457][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 1176.158264][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 1176.342956][ T37] audit: type=1326 audit(1760666608.798:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.0.1402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x0 [ 1177.578970][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.579040][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.338056][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 1178.458135][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 1180.294598][T12669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.463980][ T37] audit: type=1326 audit(1760666613.918:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13057 comm="syz.0.1416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x0 [ 1182.561161][T12669] team0: Port device team_slave_0 added [ 1183.393396][T12669] team0: Port device team_slave_1 added [ 1183.921339][T13074] netlink: del zone limit has 4 unknown bytes [ 1187.239376][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1187.251014][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1187.252325][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1187.253909][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1187.254821][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1187.358914][ T37] audit: type=1326 audit(1760666619.818:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13096 comm="syz.0.1427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x0 [ 1187.371963][T12897] chnl_net:caif_netlink_parms(): no params data found [ 1189.450302][ T5812] Bluetooth: hci2: command tx timeout [ 1190.610830][T12897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.611055][T12897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.611290][T12897] bridge_slave_0: entered allmulticast mode [ 1190.616940][T12897] bridge_slave_0: entered promiscuous mode [ 1190.635457][T12897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.635660][T12897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.635869][T12897] bridge_slave_1: entered allmulticast mode [ 1190.682010][ T37] audit: type=1326 audit(1760666623.138:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13133 comm="syz.9.1439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x0 [ 1190.683720][T12897] bridge_slave_1: entered promiscuous mode [ 1191.247910][T12897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.996239][ T5812] Bluetooth: hci2: command tx timeout [ 1192.050439][T12897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.018369][ T5812] Bluetooth: hci2: command tx timeout [ 1194.128181][ T5810] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1194.369864][ T5810] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1194.369976][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.370052][ T5810] usb 1-1: config 0 has no interface number 0 [ 1194.502635][ T5810] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1194.502665][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.502683][ T5810] usb 1-1: Product: syz [ 1194.502697][ T5810] usb 1-1: Manufacturer: syz [ 1194.502711][ T5810] usb 1-1: SerialNumber: syz [ 1194.554531][ T5810] usb 1-1: config 0 descriptor?? [ 1194.571146][ T5810] hub 1-1:0.31: bad descriptor, ignoring hub [ 1194.571185][ T5810] hub 1-1:0.31: probe with driver hub failed with error -5 [ 1194.574368][ T5810] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1194.574400][ T5810] uvcvideo 1-1:0.31: No valid video chain found. [ 1194.689235][T12897] team0: Port device team_slave_0 added [ 1194.792220][T12897] team0: Port device team_slave_1 added [ 1195.682639][ T37] audit: type=1326 audit(1760666628.138:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13172 comm="syz.8.1452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1195.947712][T12897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.947729][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.947754][T12897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.027893][T10305] usb 1-1: USB disconnect, device number 26 [ 1196.085661][T12897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.085672][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.085686][T12897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.097465][ T5812] Bluetooth: hci2: command tx timeout [ 1196.236717][ T7986] bridge_slave_1: left allmulticast mode [ 1196.236747][ T7986] bridge_slave_1: left promiscuous mode [ 1196.252699][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.328521][ T7986] bridge_slave_0: left allmulticast mode [ 1196.328541][ T7986] bridge_slave_0: left promiscuous mode [ 1196.328718][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.411767][ T7986] bridge_slave_1: left allmulticast mode [ 1196.411791][ T7986] bridge_slave_1: left promiscuous mode [ 1196.411943][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.468653][ T7986] bridge_slave_0: left allmulticast mode [ 1196.468679][ T7986] bridge_slave_0: left promiscuous mode [ 1196.468997][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.510635][ T5810] IPVS: starting estimator thread 0... [ 1197.607785][T13190] IPVS: using max 8 ests per chain, 19200 per kthread [ 1197.678178][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.780060][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.985035][ T7986] bond0 (unregistering): Released all slaves [ 1198.998206][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.097945][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.169420][ T7986] bond0 (unregistering): Released all slaves [ 1200.760622][ T5812] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 1201.201715][T13099] chnl_net:caif_netlink_parms(): no params data found [ 1201.266232][T12897] hsr_slave_0: entered promiscuous mode [ 1201.272756][T12897] hsr_slave_1: entered promiscuous mode [ 1201.273891][T12897] debugfs: 'hsr0' already exists in 'hsr' [ 1201.273915][T12897] Cannot create hsr debugfs directory [ 1201.459007][ T37] audit: type=1326 audit(1760666633.918:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13213 comm="syz.0.1463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ad47eec9 code=0x0 [ 1204.187559][ T7560] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1204.497502][ T7560] usb 10-1: Using ep0 maxpacket: 32 [ 1204.523246][ T7560] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1204.694828][ T7560] usb 10-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 1204.694859][ T7560] usb 10-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1204.694947][ T7560] usb 10-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0 [ 1204.694971][ T7560] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1204.783574][ T7560] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1204.783594][ T7560] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.783604][ T7560] usb 10-1: Product: syz [ 1204.783611][ T7560] usb 10-1: Manufacturer: syz [ 1204.783619][ T7560] usb 10-1: SerialNumber: syz [ 1204.826790][T13238] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1204.965977][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 1205.795304][ T37] audit: type=1326 audit(1760666638.248:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13250 comm="syz.8.1476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1205.938302][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 1206.012341][T13249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1209.867277][ T7560] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1210.053350][ T6061] usb 10-1: USB disconnect, device number 7 [ 1210.242054][T13271] bond1: option lacp_active: invalid value (8) [ 1210.288955][T13271] bond1 (unregistering): Released all slaves [ 1211.536367][T13099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.536509][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.536693][T13099] bridge_slave_0: entered allmulticast mode [ 1211.539859][T13099] bridge_slave_0: entered promiscuous mode [ 1211.551245][T13099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.551391][T13099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.551623][T13099] bridge_slave_1: entered allmulticast mode [ 1211.557769][T13099] bridge_slave_1: entered promiscuous mode [ 1213.585590][T13099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.832811][T13099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.077562][ T7560] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1214.247350][ T7560] usb 1-1: Using ep0 maxpacket: 32 [ 1214.253981][ T7560] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1214.255426][ T7560] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 1214.255444][ T7560] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1214.255455][ T7560] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0 [ 1214.255466][ T7560] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1214.324950][ T7560] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.324979][ T7560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.324998][ T7560] usb 1-1: Product: syz [ 1214.325011][ T7560] usb 1-1: Manufacturer: syz [ 1214.325025][ T7560] usb 1-1: SerialNumber: syz [ 1214.361060][T13307] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1214.367663][T13099] team0: Port device team_slave_0 added [ 1215.441064][T13099] team0: Port device team_slave_1 added [ 1217.157516][T13333] ======================================================= [ 1217.157516][T13333] WARNING: The mand mount option has been deprecated and [ 1217.157516][T13333] and is ignored by this kernel. Remove the mand [ 1217.157516][T13333] option from the mount to silence this warning. [ 1217.157516][T13333] ======================================================= [ 1217.717579][T13099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.717606][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.717631][T13099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.794867][T13099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.794884][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.794921][T13099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.040859][T13099] hsr_slave_0: entered promiscuous mode [ 1219.044843][T13099] hsr_slave_1: entered promiscuous mode [ 1219.047072][T13099] debugfs: 'hsr0' already exists in 'hsr' [ 1219.047090][T13099] Cannot create hsr debugfs directory [ 1219.389160][ T7560] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1219.672830][T10852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1219.691035][T10852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1219.708461][T10852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1219.709650][T10852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1219.710379][T10852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1219.847465][T11280] usb 1-1: USB disconnect, device number 27 [ 1222.273910][ T5812] Bluetooth: hci5: command tx timeout [ 1223.667348][ T7560] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1224.187604][ T7560] usb 1-1: Using ep0 maxpacket: 8 [ 1224.189515][ T7560] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 1224.189540][ T7560] usb 1-1: config 0 has no interface number 0 [ 1224.189588][ T7560] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1224.189611][ T7560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.236618][ T7560] usb 1-1: config 0 descriptor?? [ 1224.370087][ T7560] viperboard 1-1:0.143: version 0.00 found at bus 001 address 028 [ 1224.429949][ T7560] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1224.429980][ T7560] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1224.518136][ T5812] Bluetooth: hci5: command tx timeout [ 1224.534639][T13099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1224.600057][T13099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1225.050183][T13099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1225.416158][ T13] bridge_slave_1: left allmulticast mode [ 1225.416186][ T13] bridge_slave_1: left promiscuous mode [ 1225.416435][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.215893][ T992] usb 1-1: USB disconnect, device number 28 [ 1226.610206][ T5812] Bluetooth: hci5: command tx timeout [ 1227.132462][ T13] bridge_slave_0: left allmulticast mode [ 1227.132491][ T13] bridge_slave_0: left promiscuous mode [ 1227.132774][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.949662][ T5812] Bluetooth: hci5: command tx timeout [ 1229.669374][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.677954][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.807779][ T13] bond0 (unregistering): Released all slaves [ 1230.949958][T13099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1231.921686][T13348] chnl_net:caif_netlink_parms(): no params data found [ 1232.987744][ T1508] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1234.657503][ T13] hsr_slave_0: left promiscuous mode [ 1234.820476][ T13] hsr_slave_1: left promiscuous mode [ 1234.824126][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.858762][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.078351][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1236.209711][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1238.495893][T13348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.496036][T13348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.496225][T13348] bridge_slave_0: entered allmulticast mode [ 1238.499130][T13348] bridge_slave_0: entered promiscuous mode [ 1238.537893][T13348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.538025][T13348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.538245][T13348] bridge_slave_1: entered allmulticast mode [ 1238.540708][T13348] bridge_slave_1: entered promiscuous mode [ 1238.993437][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.993514][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.763630][T13348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.869690][T13348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.044215][T13348] team0: Port device team_slave_0 added [ 1242.070947][T13348] team0: Port device team_slave_1 added [ 1242.768144][T13348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.768159][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.768179][T13348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.825789][T13348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.825807][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.825839][T13348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.225598][T13348] hsr_slave_0: entered promiscuous mode [ 1243.228130][T13348] hsr_slave_1: entered promiscuous mode [ 1243.231349][T13348] debugfs: 'hsr0' already exists in 'hsr' [ 1243.231377][T13348] Cannot create hsr debugfs directory [ 1243.705738][T13099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.916188][T13099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.625920][T13348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1248.153035][T13348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1248.238124][T13348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1248.624931][T13348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1249.869023][T10852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1249.881399][T10852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1249.883795][T10852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1249.897538][T10852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1249.907667][T10852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1251.097656][ T5812] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1252.017853][ T5812] Bluetooth: hci3: command tx timeout [ 1254.323888][ T5812] Bluetooth: hci3: command tx timeout [ 1256.265578][ T5812] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 1256.812051][ T5812] Bluetooth: hci3: command tx timeout [ 1257.282388][T13348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.818625][ T5812] Bluetooth: hci3: command tx timeout [ 1258.951086][T13348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.464657][T11806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.465332][T11806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.520304][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.523424][ T7986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.660724][T13665] chnl_net:caif_netlink_parms(): no params data found [ 1260.291519][ T5812] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1261.608891][ T43] bridge_slave_1: left allmulticast mode [ 1261.608921][ T43] bridge_slave_1: left promiscuous mode [ 1261.609288][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.778997][ T43] bridge_slave_0: left allmulticast mode [ 1261.779032][ T43] bridge_slave_0: left promiscuous mode [ 1261.779321][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.736620][ T5812] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1271.394795][T10852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1271.413944][T10852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1271.415478][T10852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1271.432472][T10852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1271.446808][T10852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1273.368377][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.498489][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.579680][ T43] bond0 (unregistering): Released all slaves [ 1273.618756][T10852] Bluetooth: hci2: command tx timeout [ 1273.756061][T13913] pim6reg: entered allmulticast mode [ 1274.287516][T13665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.287650][T13665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.287891][T13665] bridge_slave_0: entered allmulticast mode [ 1274.290671][T13665] bridge_slave_0: entered promiscuous mode [ 1275.631650][ T43] hsr_slave_0: left promiscuous mode [ 1275.925841][T10852] Bluetooth: hci2: command tx timeout [ 1275.962938][ T43] hsr_slave_1: left promiscuous mode [ 1275.963922][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.951584][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.937796][T10852] Bluetooth: hci2: command tx timeout [ 1278.948108][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1279.228055][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1280.037773][T10852] Bluetooth: hci2: command tx timeout [ 1282.055399][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1282.069661][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1282.072318][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1282.073055][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1282.074138][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1284.177437][T10852] Bluetooth: hci6: command tx timeout [ 1286.827309][T10852] Bluetooth: hci6: command tx timeout [ 1289.135772][T10852] Bluetooth: hci6: command tx timeout [ 1289.438278][T13665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.438487][T13665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.438716][T13665] bridge_slave_1: entered allmulticast mode [ 1289.441594][T13665] bridge_slave_1: entered promiscuous mode [ 1290.981592][T13665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.056374][T13665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.137374][T10852] Bluetooth: hci6: command tx timeout [ 1291.519320][T13665] team0: Port device team_slave_0 added [ 1291.556158][T13665] team0: Port device team_slave_1 added [ 1292.367081][T13665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.367098][T13665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.367123][T13665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.490098][T13665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.490114][T13665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.490141][T13665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.150603][T13665] hsr_slave_0: entered promiscuous mode [ 1293.166202][T13665] hsr_slave_1: entered promiscuous mode [ 1293.173358][T13665] debugfs: 'hsr0' already exists in 'hsr' [ 1293.173385][T13665] Cannot create hsr debugfs directory [ 1296.291090][ T7560] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1296.501845][ T7560] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.501872][ T7560] usb 9-1: config 0 has no interfaces? [ 1296.501904][ T7560] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1296.501926][ T7560] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.635992][ T7560] usb 9-1: config 0 descriptor?? [ 1297.339499][T13899] chnl_net:caif_netlink_parms(): no params data found [ 1297.679720][T14001] chnl_net:caif_netlink_parms(): no params data found [ 1299.078817][T10305] usb 9-1: USB disconnect, device number 7 [ 1300.273796][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.273870][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.424510][T13899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.424649][T13899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.424904][T13899] bridge_slave_0: entered allmulticast mode [ 1300.429602][T13899] bridge_slave_0: entered promiscuous mode [ 1300.563777][T13899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.563967][T13899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.564184][T13899] bridge_slave_1: entered allmulticast mode [ 1300.570171][T13899] bridge_slave_1: entered promiscuous mode [ 1301.127140][T14001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.127850][T14001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.128106][T14001] bridge_slave_0: entered allmulticast mode [ 1301.131099][T14001] bridge_slave_0: entered promiscuous mode [ 1301.669035][T14001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.669173][T14001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.669441][T14001] bridge_slave_1: entered allmulticast mode [ 1301.673192][T14001] bridge_slave_1: entered promiscuous mode [ 1301.801763][T13899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.964975][T13899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.195571][T14001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.635355][T14001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.006862][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.116930][T13899] team0: Port device team_slave_0 added [ 1304.611769][T13899] team0: Port device team_slave_1 added [ 1305.020270][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.071459][T14001] team0: Port device team_slave_0 added [ 1305.571515][T14001] team0: Port device team_slave_1 added [ 1305.587430][T13899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.587447][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.587482][T13899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.046566][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.067605][ T992] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1306.093820][T13899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.093837][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.093881][T13899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.234684][T14001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.234702][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.234727][T14001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.244451][ T992] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.244477][ T992] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1306.244514][ T992] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1306.244536][ T992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.330254][ T992] usb 9-1: config 0 descriptor?? [ 1306.488559][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.528698][T14001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.528715][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.528730][T14001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.772335][T13665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1306.836480][T13899] hsr_slave_0: entered promiscuous mode [ 1306.840573][T13899] hsr_slave_1: entered promiscuous mode [ 1306.841514][T13899] debugfs: 'hsr0' already exists in 'hsr' [ 1306.841537][T13899] Cannot create hsr debugfs directory [ 1306.930435][T13665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1307.080008][T13665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1307.169237][T14001] hsr_slave_0: entered promiscuous mode [ 1307.171900][T14001] hsr_slave_1: entered promiscuous mode [ 1307.173283][T14001] debugfs: 'hsr0' already exists in 'hsr' [ 1307.173310][T14001] Cannot create hsr debugfs directory [ 1307.173800][T13665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1308.495766][T13665] kthread_run failed with err -4 [ 1308.794388][T11280] usb 9-1: USB disconnect, device number 8 [ 1308.903000][ T37] audit: type=1326 audit(1760666741.358:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14240 comm="syz.8.1749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1309.648691][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1309.661694][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1309.683369][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1309.695621][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1309.696579][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1310.122670][ T43] bridge_slave_1: left allmulticast mode [ 1310.122698][ T43] bridge_slave_1: left promiscuous mode [ 1310.122942][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.198947][ T43] bridge_slave_0: left allmulticast mode [ 1310.198975][ T43] bridge_slave_0: left promiscuous mode [ 1310.199254][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.306802][ T43] bridge_slave_1: left allmulticast mode [ 1310.306832][ T43] bridge_slave_1: left promiscuous mode [ 1310.307084][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.388485][ T43] bridge_slave_0: left allmulticast mode [ 1310.388506][ T43] bridge_slave_0: left promiscuous mode [ 1310.388665][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.857358][T10852] Bluetooth: hci3: command tx timeout [ 1312.562073][T10305] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1312.709893][T10305] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.709918][T10305] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1312.709953][T10305] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1312.709974][T10305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.744764][T10305] usb 10-1: config 0 descriptor?? [ 1313.115632][ T37] audit: type=1326 audit(1760666745.568:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14267 comm="syz.8.1758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1313.953039][T10852] Bluetooth: hci3: command tx timeout [ 1315.177916][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.267943][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.292663][ T43] bond0 (unregistering): Released all slaves [ 1315.353626][ T31] usb 10-1: USB disconnect, device number 8 [ 1316.017928][T10852] Bluetooth: hci3: command tx timeout [ 1317.960761][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.993571][ T37] audit: type=1326 audit(1760666750.448:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14292 comm="syz.8.1766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1318.037929][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.084248][ T43] bond0 (unregistering): Released all slaves [ 1318.097601][T10852] Bluetooth: hci3: command tx timeout [ 1323.564254][ T37] audit: type=1326 audit(1760666756.018:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.9.1776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x0 [ 1323.840036][ T43] hsr_slave_0: left promiscuous mode [ 1323.888757][ T43] hsr_slave_1: left promiscuous mode [ 1323.892349][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.942357][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.195589][ T43] hsr_slave_0: left promiscuous mode [ 1324.275099][ T43] hsr_slave_1: left promiscuous mode [ 1324.277372][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1324.277399][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.358164][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.358183][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.935933][ T43] veth1_macvtap: left promiscuous mode [ 1324.936044][ T43] veth0_macvtap: left promiscuous mode [ 1324.936313][ T43] veth1_vlan: left promiscuous mode [ 1324.936641][ T43] veth0_vlan: left promiscuous mode [ 1327.488158][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1327.728762][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1328.611067][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1328.613695][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1328.615300][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1328.616699][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1328.650262][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1330.737547][ T5812] Bluetooth: hci4: command tx timeout [ 1332.298546][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1332.537935][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1332.817489][ T5812] Bluetooth: hci4: command tx timeout [ 1334.905507][ T5812] Bluetooth: hci4: command tx timeout [ 1335.244253][T14362] warning: `syz.9.1779' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1335.824626][ T37] audit: type=1326 audit(1760666768.278:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14386 comm="syz.9.1785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x0 [ 1336.640155][T14248] chnl_net:caif_netlink_parms(): no params data found [ 1337.007445][ T5812] Bluetooth: hci4: command tx timeout [ 1338.402469][ T4466] wlan1: Trigger new scan to find an IBSS to join [ 1339.833170][T14248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.833410][T14248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.833646][T14248] bridge_slave_0: entered allmulticast mode [ 1339.861794][T14248] bridge_slave_0: entered promiscuous mode [ 1339.904397][T14248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.904840][T14248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.905059][T14248] bridge_slave_1: entered allmulticast mode [ 1339.929820][T14248] bridge_slave_1: entered promiscuous mode [ 1340.375076][T14248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.429694][T14248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.734751][ T37] audit: type=1326 audit(1760666773.188:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.9.1793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x0 [ 1342.218368][ T1508] wlan1: Trigger new scan to find an IBSS to join [ 1342.874935][T14248] team0: Port device team_slave_0 added [ 1342.917370][T14372] chnl_net:caif_netlink_parms(): no params data found [ 1342.931865][T14248] team0: Port device team_slave_1 added [ 1343.031339][T10852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1343.034849][T10852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1343.036153][T10852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1343.112253][T10852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1343.113175][T10852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1343.788020][ T4466] wlan1: Creating new IBSS network, BSSID fa:26:a2:3f:00:96 [ 1344.018078][T14248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.018096][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.018122][T14248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.027396][ T9] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1344.098973][T14248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.098990][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.099020][T14248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.230365][ T9] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1344.230396][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.239014][ T9] usb 9-1: config 0 descriptor?? [ 1344.268630][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1344.453319][ T9] gp8psk: usb in 128 operation failed. [ 1344.465506][ T9] gp8psk: usb in 137 operation failed. [ 1344.465526][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1344.465559][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1344.474105][ T9] usb 9-1: USB disconnect, device number 9 [ 1344.569721][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.569904][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.570115][T14372] bridge_slave_0: entered allmulticast mode [ 1344.571911][T14372] bridge_slave_0: entered promiscuous mode [ 1344.664850][T14372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.664985][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.665191][T14372] bridge_slave_1: entered allmulticast mode [ 1344.669413][T14372] bridge_slave_1: entered promiscuous mode [ 1344.683209][T14248] hsr_slave_0: entered promiscuous mode [ 1344.684647][T14248] hsr_slave_1: entered promiscuous mode [ 1344.685631][T14248] debugfs: 'hsr0' already exists in 'hsr' [ 1344.685654][T14248] Cannot create hsr debugfs directory [ 1345.137589][T10852] Bluetooth: hci2: command tx timeout [ 1345.751162][T14372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.033228][T14372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.863548][T10852] Bluetooth: hci2: command tx timeout [ 1348.096219][T14372] team0: Port device team_slave_0 added [ 1348.116123][T14372] team0: Port device team_slave_1 added [ 1348.177361][ T31] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1348.793402][ T31] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1348.793432][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.874750][ T31] usb 10-1: config 0 descriptor?? [ 1349.023752][ T31] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1351.221470][ T31] gp8psk: usb in 128 operation failed. [ 1351.273479][T10852] Bluetooth: hci2: command tx timeout [ 1351.297803][ T31] gp8psk: usb in 137 operation failed. [ 1351.297832][ T31] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1351.297872][ T31] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1351.341849][T14372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.341866][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.341892][T14372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.360545][T14372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.360572][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.360598][T14372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.547298][ T31] usb 10-1: USB disconnect, device number 9 [ 1352.629993][T14372] hsr_slave_0: entered promiscuous mode [ 1352.633717][T14372] hsr_slave_1: entered promiscuous mode [ 1352.636087][T14372] debugfs: 'hsr0' already exists in 'hsr' [ 1352.636115][T14372] Cannot create hsr debugfs directory [ 1353.048900][T14470] chnl_net:caif_netlink_parms(): no params data found [ 1353.297952][ T5812] Bluetooth: hci2: command tx timeout [ 1354.820888][ T43] bridge_slave_1: left allmulticast mode [ 1354.820909][ T43] bridge_slave_1: left promiscuous mode [ 1354.821079][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.046162][ T43] bridge_slave_0: left allmulticast mode [ 1355.046342][ T43] bridge_slave_0: left promiscuous mode [ 1355.078529][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.141911][ T43] bridge_slave_1: left allmulticast mode [ 1356.141931][ T43] bridge_slave_1: left promiscuous mode [ 1356.142081][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.011991][ T43] bridge_slave_0: left allmulticast mode [ 1357.012021][ T43] bridge_slave_0: left promiscuous mode [ 1357.012304][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.110116][ T43] bridge_slave_1: left allmulticast mode [ 1357.110138][ T43] bridge_slave_1: left promiscuous mode [ 1357.110296][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.229057][ T43] bridge_slave_0: left allmulticast mode [ 1357.229086][ T43] bridge_slave_0: left promiscuous mode [ 1357.229342][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.809409][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.908637][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.013168][ T43] bond0 (unregistering): Released all slaves [ 1358.848174][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.939035][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.044270][ T43] bond0 (unregistering): Released all slaves [ 1362.218786][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.218859][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.372696][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.918505][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.147652][ T43] bond0 (unregistering): Released all slaves [ 1364.401287][ T37] audit: type=1326 audit(1760666796.858:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14607 comm="syz.8.1834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1366.721151][T14470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.721302][T14470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.721484][T14470] bridge_slave_0: entered allmulticast mode [ 1366.724833][T14470] bridge_slave_0: entered promiscuous mode [ 1366.748875][T14470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.749096][T14470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.749292][T14470] bridge_slave_1: entered allmulticast mode [ 1366.751909][T14470] bridge_slave_1: entered promiscuous mode [ 1367.164297][T14470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.292918][T14470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.447670][ T43] hsr_slave_0: left promiscuous mode [ 1367.508325][ T43] hsr_slave_1: left promiscuous mode [ 1367.509335][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.553028][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.720662][ T43] hsr_slave_0: left promiscuous mode [ 1367.841724][ T43] hsr_slave_1: left promiscuous mode [ 1367.842720][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.902415][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.611736][ T43] hsr_slave_0: left promiscuous mode [ 1368.628535][ T43] hsr_slave_1: left promiscuous mode [ 1368.629465][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.668487][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.050503][ T37] audit: type=1326 audit(1760666802.508:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14642 comm="syz.8.1844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1370.128654][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1370.271817][T10852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1370.279737][T10852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1370.281061][T10852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1370.282587][T10852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1370.283847][T10852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1370.358223][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1372.344487][ T5812] Bluetooth: hci5: command tx timeout [ 1372.845205][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1373.038246][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1373.807854][ T1543] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1374.371374][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1374.427513][ T5812] Bluetooth: hci5: command tx timeout [ 1374.558551][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1376.500071][ T5812] Bluetooth: hci5: command tx timeout [ 1377.576779][T14470] team0: Port device team_slave_0 added [ 1377.875932][T14470] team0: Port device team_slave_1 added [ 1378.654590][ T5812] Bluetooth: hci5: command tx timeout [ 1379.324826][T14470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.324843][T14470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.324871][T14470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.428220][T14470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.428238][T14470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.428263][T14470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.116848][T14470] hsr_slave_0: entered promiscuous mode [ 1384.118389][T14470] hsr_slave_1: entered promiscuous mode [ 1384.119372][T14470] debugfs: 'hsr0' already exists in 'hsr' [ 1384.119397][T14470] Cannot create hsr debugfs directory [ 1385.290851][T14372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1386.122183][T14372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1386.211950][T14372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1386.673619][T14372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1387.765021][T14646] chnl_net:caif_netlink_parms(): no params data found [ 1389.887692][T14470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1390.421791][T14470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1390.429969][T10852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1390.432758][T10852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1390.440435][T10852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1390.496879][T10852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1390.510853][T10852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1391.453065][T14470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1393.122899][T10852] Bluetooth: hci3: command tx timeout [ 1393.408188][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.408385][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.408692][T14646] bridge_slave_0: entered allmulticast mode [ 1393.412067][T14646] bridge_slave_0: entered promiscuous mode [ 1393.414268][T14470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1394.341465][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.341609][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.341853][T14646] bridge_slave_1: entered allmulticast mode [ 1394.344780][T14646] bridge_slave_1: entered promiscuous mode [ 1395.143366][T10852] Bluetooth: hci3: command tx timeout [ 1395.722917][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.766088][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.001655][T14646] team0: Port device team_slave_0 added [ 1396.033240][T14646] team0: Port device team_slave_1 added [ 1396.530004][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.530021][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.530048][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.551118][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.551134][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.551160][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.325818][T10852] Bluetooth: hci3: command tx timeout [ 1399.091464][T14646] hsr_slave_0: entered promiscuous mode [ 1399.092821][T14646] hsr_slave_1: entered promiscuous mode [ 1399.093796][T14646] debugfs: 'hsr0' already exists in 'hsr' [ 1399.093820][T14646] Cannot create hsr debugfs directory [ 1399.377386][T10852] Bluetooth: hci3: command tx timeout [ 1402.110879][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1402.147828][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1402.149538][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1402.152500][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1402.155198][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1402.473529][T14766] chnl_net:caif_netlink_parms(): no params data found [ 1403.651694][T14766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.652304][T14766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.652520][T14766] bridge_slave_0: entered allmulticast mode [ 1403.658864][T14766] bridge_slave_0: entered promiscuous mode [ 1403.915321][T14766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.915415][T14766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.915870][T14766] bridge_slave_1: entered allmulticast mode [ 1403.923264][T14766] bridge_slave_1: entered promiscuous mode [ 1404.257515][T10852] Bluetooth: hci2: command tx timeout [ 1404.512636][T14766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.544299][ T43] bridge_slave_1: left allmulticast mode [ 1404.544328][ T43] bridge_slave_1: left promiscuous mode [ 1404.544583][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.610675][ T43] bridge_slave_0: left allmulticast mode [ 1404.610696][ T43] bridge_slave_0: left promiscuous mode [ 1404.610858][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.669887][ T43] bridge_slave_1: left allmulticast mode [ 1404.669908][ T43] bridge_slave_1: left promiscuous mode [ 1404.670051][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.739341][ T43] bridge_slave_0: left allmulticast mode [ 1404.739361][ T43] bridge_slave_0: left promiscuous mode [ 1404.739517][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.309961][ T4469] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1406.351297][T10852] Bluetooth: hci2: command tx timeout [ 1406.425417][T14874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.255430][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.369895][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.461045][ T43] bond0 (unregistering): Released all slaves [ 1407.728135][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.831291][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.912448][ T43] bond0 (unregistering): Released all slaves [ 1407.974313][T14766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.438326][T10852] Bluetooth: hci2: command tx timeout [ 1409.702594][T14766] team0: Port device team_slave_0 added [ 1409.703677][T14646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1409.786736][T14766] team0: Port device team_slave_1 added [ 1409.787633][T14646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1410.567891][T10852] Bluetooth: hci2: command tx timeout [ 1410.687848][T14902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1410.801992][T14646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1412.849560][ T43] hsr_slave_0: left promiscuous mode [ 1412.887503][ T43] hsr_slave_1: left promiscuous mode [ 1412.889760][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.940872][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.097465][ T43] hsr_slave_0: left promiscuous mode [ 1413.117523][ T43] hsr_slave_1: left promiscuous mode [ 1413.118248][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.158475][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.888052][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1414.028039][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1415.218219][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1415.359038][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1415.918252][T14646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1415.956542][T14766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.956554][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.956569][T14766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.029638][T14766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.029655][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.029682][T14766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.711426][T14766] hsr_slave_0: entered promiscuous mode [ 1417.712916][T14766] hsr_slave_1: entered promiscuous mode [ 1417.713940][T14766] debugfs: 'hsr0' already exists in 'hsr' [ 1417.713964][T14766] Cannot create hsr debugfs directory [ 1417.998023][T14850] chnl_net:caif_netlink_parms(): no params data found [ 1420.778646][T14850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.778800][T14850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.779066][T14850] bridge_slave_0: entered allmulticast mode [ 1420.782087][T14850] bridge_slave_0: entered promiscuous mode [ 1420.831289][T14850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.831432][T14850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.831673][T14850] bridge_slave_1: entered allmulticast mode [ 1420.849902][T14850] bridge_slave_1: entered promiscuous mode [ 1422.988071][T14850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.991844][T14850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.233084][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.233601][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.594503][T14850] team0: Port device team_slave_0 added [ 1424.608265][T14850] team0: Port device team_slave_1 added [ 1425.509296][T14991] syz.9.1943 (14991) used greatest stack depth: 17576 bytes left [ 1425.937603][T14850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.937620][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.937643][T14850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.952452][T14850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.952470][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.952495][T14850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.990654][T14850] hsr_slave_0: entered promiscuous mode [ 1429.129845][T14850] hsr_slave_1: entered promiscuous mode [ 1429.336494][T14850] debugfs: 'hsr0' already exists in 'hsr' [ 1429.351296][T14850] Cannot create hsr debugfs directory [ 1429.968931][T14646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.225355][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1431.232904][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1431.234327][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1431.239096][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1431.240005][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1431.667186][T14766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1431.709733][T14766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1431.772639][T14766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1431.842267][T14766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1432.574246][ T43] bridge_slave_1: left allmulticast mode [ 1432.574274][ T43] bridge_slave_1: left promiscuous mode [ 1432.574512][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.668922][ T43] bridge_slave_0: left allmulticast mode [ 1432.668952][ T43] bridge_slave_0: left promiscuous mode [ 1432.669247][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.299081][ T5812] Bluetooth: hci4: command tx timeout [ 1434.558169][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.668169][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.751303][ T43] bond0 (unregistering): Released all slaves [ 1435.515418][ T5812] Bluetooth: hci4: command tx timeout [ 1435.548390][T15107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1435.865514][T14766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.296406][ T4469] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1437.357411][ T43] hsr_slave_0: left promiscuous mode [ 1437.377337][ T43] hsr_slave_1: left promiscuous mode [ 1437.377935][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.537399][T10852] Bluetooth: hci4: command tx timeout [ 1437.577964][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.679606][T10852] Bluetooth: hci4: command tx timeout [ 1440.031190][T15136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.841244][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1441.188450][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1445.457062][T15162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1446.316353][T14766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.340244][T15061] chnl_net:caif_netlink_parms(): no params data found [ 1446.360656][T12421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.361196][T12421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.428707][T12421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.428934][T12421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.288386][T15061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.288520][T15061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.288736][T15061] bridge_slave_0: entered allmulticast mode [ 1447.295187][T15061] bridge_slave_0: entered promiscuous mode [ 1447.560626][T15061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.561129][T15061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.563617][T15061] bridge_slave_1: entered allmulticast mode [ 1447.566161][T15061] bridge_slave_1: entered promiscuous mode [ 1451.134499][T15061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.220372][T15061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.307686][T15225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1451.362513][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1451.366991][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1451.401797][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1451.403821][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1451.404596][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1451.896680][T15061] team0: Port device team_slave_0 added [ 1451.934228][T14850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1451.999997][T15061] team0: Port device team_slave_1 added [ 1452.015558][T14850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1452.922118][T14850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1453.457389][ T5812] Bluetooth: hci5: command tx timeout [ 1454.531735][T14850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1455.683536][ T5812] Bluetooth: hci5: command tx timeout [ 1457.543970][T15061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.543981][T15061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.543996][T15061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.638773][T15061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.638786][T15061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.638800][T15061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.698072][ T5812] Bluetooth: hci5: command tx timeout [ 1459.780162][ T5812] Bluetooth: hci5: command tx timeout [ 1460.365259][T15061] hsr_slave_0: entered promiscuous mode [ 1460.382895][T15061] hsr_slave_1: entered promiscuous mode [ 1460.384012][T15061] debugfs: 'hsr0' already exists in 'hsr' [ 1460.384036][T15061] Cannot create hsr debugfs directory [ 1462.368241][T15229] chnl_net:caif_netlink_parms(): no params data found [ 1462.869615][ T43] bridge_slave_1: left allmulticast mode [ 1462.869634][ T43] bridge_slave_1: left promiscuous mode [ 1462.869784][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.873236][T15354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1463.063791][ T43] bridge_slave_0: left allmulticast mode [ 1463.063823][ T43] bridge_slave_0: left promiscuous mode [ 1463.064088][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.710259][T10852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1463.713110][T10852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1463.716301][T10852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1463.724413][T10852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1463.725561][T10852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1465.309125][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.398136][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.459727][ T43] bond0 (unregistering): Released all slaves [ 1466.045363][ T5812] Bluetooth: hci2: command tx timeout [ 1468.097517][T10852] Bluetooth: hci2: command tx timeout [ 1468.104645][ T43] hsr_slave_0: left promiscuous mode [ 1468.190914][ T43] hsr_slave_1: left promiscuous mode [ 1468.580391][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.619547][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.244304][ T5954] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1470.846842][T10852] Bluetooth: hci2: command tx timeout [ 1471.020049][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1471.169469][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1472.903174][ T5812] Bluetooth: hci2: command tx timeout [ 1476.541787][T15229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.541972][T15229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.542213][T15229] bridge_slave_0: entered allmulticast mode [ 1476.545053][T15229] bridge_slave_0: entered promiscuous mode [ 1476.597064][T15229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.628494][T15229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.628750][T15229] bridge_slave_1: entered allmulticast mode [ 1476.631340][T15229] bridge_slave_1: entered promiscuous mode [ 1476.951459][T15229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.962245][T15229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.410992][T15229] team0: Port device team_slave_0 added [ 1477.510672][T15229] team0: Port device team_slave_1 added [ 1477.792874][T15229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.792892][T15229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.792918][T15229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.814710][T15229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.814726][T15229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.814753][T15229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.984309][T15061] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1478.123458][T15061] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1478.165679][T15229] hsr_slave_0: entered promiscuous mode [ 1478.166529][T15229] hsr_slave_1: entered promiscuous mode [ 1478.167131][T15229] debugfs: 'hsr0' already exists in 'hsr' [ 1478.167148][T15229] Cannot create hsr debugfs directory [ 1478.195927][T15061] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1478.239009][T15061] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1478.952283][T15362] chnl_net:caif_netlink_parms(): no params data found [ 1479.835011][T15362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.835218][T15362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.835425][T15362] bridge_slave_0: entered allmulticast mode [ 1479.840139][T15362] bridge_slave_0: entered promiscuous mode [ 1479.846601][T15362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.846761][T15362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.846951][T15362] bridge_slave_1: entered allmulticast mode [ 1479.852147][T15362] bridge_slave_1: entered promiscuous mode [ 1480.212134][T15362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.218898][T15362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.657881][T15362] team0: Port device team_slave_0 added [ 1480.831088][T15362] team0: Port device team_slave_1 added [ 1481.186116][T15362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.186133][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.186158][T15362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.422025][T15362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.422043][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.422068][T15362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.723751][T15362] hsr_slave_0: entered promiscuous mode [ 1481.725225][T15362] hsr_slave_1: entered promiscuous mode [ 1481.726256][T15362] debugfs: 'hsr0' already exists in 'hsr' [ 1481.726280][T15362] Cannot create hsr debugfs directory [ 1481.934200][ T43] bridge_slave_1: left allmulticast mode [ 1481.934227][ T43] bridge_slave_1: left promiscuous mode [ 1481.934483][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.030838][ T43] bridge_slave_0: left allmulticast mode [ 1482.030867][ T43] bridge_slave_0: left promiscuous mode [ 1482.031151][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.122095][ T43] bridge_slave_1: left allmulticast mode [ 1482.122124][ T43] bridge_slave_1: left promiscuous mode [ 1482.122375][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.218366][ T43] bridge_slave_0: left allmulticast mode [ 1482.218385][ T43] bridge_slave_0: left promiscuous mode [ 1482.218546][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.788010][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.867967][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.930636][ T43] bond0 (unregistering): Released all slaves [ 1484.468096][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.528043][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.570531][ T43] bond0 (unregistering): Released all slaves [ 1484.584949][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.585008][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.932764][T15061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.095716][T15229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1485.250099][T15229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1485.387603][ T43] hsr_slave_0: left promiscuous mode [ 1485.428340][ T43] hsr_slave_1: left promiscuous mode [ 1485.429207][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.469088][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.638369][ T43] hsr_slave_0: left promiscuous mode [ 1485.657597][ T43] hsr_slave_1: left promiscuous mode [ 1485.658265][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.698158][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.369427][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1486.518644][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1487.779466][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1488.028515][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1490.182849][T15229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1490.225885][T15061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.227941][T15229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1490.482231][T12421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.482417][T12421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.515312][T12421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.515544][T12421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.115475][T15229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.215475][T15229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.261488][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.261609][ T9287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.279463][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.279619][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.970759][T10852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1491.975122][T10852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1491.991933][T10852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1492.001905][T10852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1492.002678][T10852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1492.568899][T15362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1492.631802][T15362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1492.687922][T15362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1492.734353][T15362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1492.945393][T15229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.123509][T15610] chnl_net:caif_netlink_parms(): no params data found [ 1494.097719][ T5812] Bluetooth: hci3: command tx timeout [ 1494.226933][T15610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.227069][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.227950][T15610] bridge_slave_0: entered allmulticast mode [ 1494.234904][T15610] bridge_slave_0: entered promiscuous mode [ 1494.480153][T15610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.480365][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.480674][T15610] bridge_slave_1: entered allmulticast mode [ 1494.483522][T15610] bridge_slave_1: entered promiscuous mode [ 1495.010957][T15610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.012974][T15229] veth0_vlan: entered promiscuous mode [ 1495.070636][T15610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.275605][T15610] team0: Port device team_slave_0 added [ 1495.288387][T15610] team0: Port device team_slave_1 added [ 1495.292100][T15229] veth1_vlan: entered promiscuous mode [ 1495.515968][T15610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.515986][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.516011][T15610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1495.759313][T15610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1495.759325][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.759339][T15610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1495.796036][T15362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.099061][T15610] hsr_slave_0: entered promiscuous mode [ 1496.100510][T15610] hsr_slave_1: entered promiscuous mode [ 1496.101557][T15610] debugfs: 'hsr0' already exists in 'hsr' [ 1496.101582][T15610] Cannot create hsr debugfs directory [ 1496.178111][ T5812] Bluetooth: hci3: command tx timeout [ 1496.344003][ T43] bridge_slave_1: left allmulticast mode [ 1496.344032][ T43] bridge_slave_1: left promiscuous mode [ 1496.344264][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.419472][ T43] bridge_slave_0: left allmulticast mode [ 1496.419501][ T43] bridge_slave_0: left promiscuous mode [ 1496.419781][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.261286][ T5812] Bluetooth: hci3: command tx timeout [ 1498.537990][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.628760][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.650448][ T43] bond0 (unregistering): Released all slaves [ 1498.830831][T15362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.000281][ T43] hsr_slave_0: left promiscuous mode [ 1499.038405][ T43] hsr_slave_1: left promiscuous mode [ 1499.039074][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.060588][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.778577][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1499.907990][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1500.337582][ T5812] Bluetooth: hci3: command tx timeout [ 1501.500594][ T7986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1502.035359][T12149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.035568][T12149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.061164][T15229] veth0_macvtap: entered promiscuous mode [ 1502.091481][T12149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.091640][T12149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.179157][T15229] veth1_macvtap: entered promiscuous mode [ 1502.405673][T15229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1502.428696][T15229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.666435][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.677832][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.686773][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.692175][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.389376][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.389397][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.551308][T15362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.570092][ T7986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.570112][ T7986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.091293][T15610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1504.363215][T15610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1505.593512][T15610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1505.703013][T15610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1506.671251][T15362] veth0_vlan: entered promiscuous mode [ 1506.785061][T15362] veth1_vlan: entered promiscuous mode [ 1508.310240][T15362] veth0_macvtap: entered promiscuous mode [ 1508.394864][T15362] veth1_macvtap: entered promiscuous mode [ 1508.430745][T15610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.588303][T15362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.605987][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.717746][T15362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.832790][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.833039][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1508.835976][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.836127][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.855137][T15865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.862449][T15865] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.867061][T15865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.871447][T15865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.335872][T15865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.335893][T15865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.566846][T15866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.566867][T15866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.586796][ T37] audit: type=1326 audit(1760666944.038:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15897 comm="syz.8.2066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240bd6eec9 code=0x0 [ 1513.631682][T15610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.751870][T15610] veth0_vlan: entered promiscuous mode [ 1514.084785][T15610] veth1_vlan: entered promiscuous mode [ 1517.449410][ T37] audit: type=1326 audit(1760666949.908:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15965 comm="syz.9.2080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831c79eec9 code=0x0 [ 1517.759497][T15610] veth0_macvtap: entered promiscuous mode [ 1517.815346][T15610] veth1_macvtap: entered promiscuous mode [ 1517.964720][T15610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.019996][T15610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.050310][ T4466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.050359][ T4466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.050397][ T4466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.050433][ T4466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.914260][T11806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.914283][T11806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.841848][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.841868][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.823642][ T37] audit: type=1326 audit(1760666955.278:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.2.2097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6bc2aeec9 code=0x0 [ 1523.316080][T16052] ================================================================== [ 1523.316164][T16052] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 1523.316200][T16052] Read of size 8 at addr ffff888060d5e2f8 by task syz.5.2095/16052 [ 1523.316217][T16052] [ 1523.316241][T16052] CPU: 1 UID: 0 PID: 16052 Comm: syz.5.2095 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1523.316264][T16052] Hardware name: Google Goo[ 1523.316264][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1523.316283][T16052] Call Trace: [ 1523.316295][T16052] [ 1523.316304][T16052] dump_stack_lvl+0x189/0x250 [ 1523.316329][T16052] ? __kasan_check_byte+0x12/0x40 [ 1523.316360][T16052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1523.316383][T16052] ? lock_release+0x4b/0x3e0 [ 1523.316408][T16052] ? __virt_addr_valid+0x4a5/0x5c0 [ 1523.316433][T16052] print_report+0xca/0x240 [ 1523.316460][T16052] ? change_page_attr_set_clr+0x625/0xfc0 [ 1523.316487][T16052] kasan_report+0x118/0x150 [ 1523.316509][T16052] ? change_page_attr_set_clr+0x625/0xfc0 [ 1523.316545][T16052] change_page_attr_set_clr+0x625/0xfc0 [ 1523.316575][T16052] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1523.316603][T16052] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1523.316629][T16052] ? memtype_reserve+0x874/0xb30 [ 1523.316662][T16052] _set_pages_array+0x145/0x270 [ 1523.316693][T16052] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1523.316717][T16052] ? drm_gem_shmem_mmap+0x18b/0x450 [ 1523.316741][T16052] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1523.316768][T16052] ? rt_read_unlock+0x150/0x220 [ 1523.316799][T16052] drm_gem_shmem_mmap+0x193/0x450 [ 1523.316824][T16052] drm_gem_mmap_obj+0x18a/0x4e0 [ 1523.316846][T16052] drm_gem_mmap+0x38d/0x640 [ 1523.316866][T16052] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1523.316887][T16052] ? __mas_set_range+0x12f/0x3c0 [ 1523.316916][T16052] mmap_region+0x18c9/0x20f0 [ 1523.316951][T16052] ? __pfx_mmap_region+0x10/0x10 [ 1523.316983][T16052] ? trace_sched_exit_tp+0x36/0x110 [ 1523.317006][T16052] ? __schedule+0x1709/0x4c20 [ 1523.317069][T16052] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1523.317108][T16052] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1523.317130][T16052] ? security_mmap_addr+0x71/0x270 [ 1523.317156][T16052] ? shmem_mapping+0xd/0x50 [ 1523.317182][T16052] ? memfd_check_seals_mmap+0xcb/0x210 [ 1523.317210][T16052] do_mmap+0xc23/0x10c0 [ 1523.317232][T16052] ? __pfx_do_mmap+0x10/0x10 [ 1523.317247][T16052] ? rwbase_write_lock+0x56f/0x750 [ 1523.317269][T16052] ? __lock_acquire+0xab9/0xd20 [ 1523.317291][T16052] vm_mmap_pgoff+0x2a9/0x4d0 [ 1523.317321][T16052] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1523.317348][T16052] ? __fget_files+0x2a/0x420 [ 1523.317372][T16052] ? __fget_files+0x3a6/0x420 [ 1523.317390][T16052] ? __fget_files+0x2a/0x420 [ 1523.317412][T16052] ksys_mmap_pgoff+0x4e9/0x720 [ 1523.317431][T16052] ? __x64_sys_mmap+0x7f/0x140 [ 1523.317467][T16052] do_syscall_64+0xfa/0xfa0 [ 1523.317495][T16052] ? lockdep_hardirqs_on+0x9c/0x150 [ 1523.317522][T16052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.317541][T16052] ? clear_bhb_loop+0x60/0xb0 [ 1523.317563][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.317582][T16052] RIP: 0033:0x7fbcfb6aeec9 [ 1523.317608][T16052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.317626][T16052] RSP: 002b:00007fbcf98ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1523.317657][T16052] RAX: ffffffffffffffda RBX: 00007fbcfb906090 RCX: 00007fbcfb6aeec9 [ 1523.317674][T16052] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 1523.317688][T16052] RBP: 00007fbcfb731f91 R08: 0000000000000003 R09: 0000000100000000 [ 1523.317702][T16052] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1523.317716][T16052] R13: 00007fbcfb906128 R14: 00007fbcfb906090 R15: 00007ffe54dc8598 [ 1523.317741][T16052] [ 1523.317750][T16052] [ 1523.317758][T16052] Allocated by task 16052: [ 1523.317769][T16052] kasan_save_track+0x3e/0x80 [ 1523.317786][T16052] __kasan_kmalloc+0x93/0xb0 [ 1523.317803][T16052] __kvmalloc_node_noprof+0x3fd/0x920 [ 1523.317822][T16052] drm_gem_get_pages+0x169/0xa30 [ 1523.317850][T16052] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 1523.317871][T16052] drm_gem_shmem_mmap+0x193/0x450 [ 1523.317889][T16052] drm_gem_mmap_obj+0x18a/0x4e0 [ 1523.317905][T16052] drm_gem_mmap+0x38d/0x640 [ 1523.317919][T16052] mmap_region+0x18c9/0x20f0 [ 1523.317940][T16052] do_mmap+0xc23/0x10c0 [ 1523.317955][T16052] vm_mmap_pgoff+0x2a9/0x4d0 [ 1523.317984][T16052] ksys_mmap_pgoff+0x4e9/0x720 [ 1523.317998][T16052] do_syscall_64+0xfa/0xfa0 [ 1523.318021][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.318036][T16052] [ 1523.318041][T16052] The buggy address belongs to the object at ffff888060d5e200 [ 1523.318041][T16052] which belongs to the cache kmalloc-256 of size 256 [ 1523.318056][T16052] The buggy address is located 0 bytes to the right of [ 1523.318056][T16052] allocated 248-byte region [ffff888060d5e200, ffff888060d5e2f8) [ 1523.318077][T16052] [ 1523.318082][T16052] The buggy address belongs to the physical page: [ 1523.318100][T16052] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60d5e [ 1523.318118][T16052] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1523.318135][T16052] flags: 0x80000000000040(head|node=0|zone=1) [ 1523.318155][T16052] page_type: f5(slab) [ 1523.318173][T16052] raw: 0080000000000040 ffff88813ff26b40 ffffea0000ad1700 dead000000000006 [ 1523.318191][T16052] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1523.318209][T16052] head: 0080000000000040 ffff88813ff26b40 ffffea0000ad1700 dead000000000006 [ 1523.318224][T16052] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1523.318242][T16052] head: 0080000000000001 ffffea0001835781 00000000ffffffff 00000000ffffffff [ 1523.318259][T16052] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 1523.318270][T16052] page dumped because: kasan: bad access detected [ 1523.318284][T16052] page_owner tracks the page as allocated [ 1523.318292][T16052] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6323, tgid 6323 (syz-executor), ts 200355556524, free_ts 0 [ 1523.318324][T16052] post_alloc_hook+0x240/0x2a0 [ 1523.318341][T16052] get_page_from_freelist+0x28c0/0x2960 [ 1523.318362][T16052] __alloc_frozen_pages_noprof+0x181/0x370 [ 1523.318381][T16052] alloc_pages_mpol+0xd1/0x380 [ 1523.318398][T16052] allocate_slab+0x96/0x3a0 [ 1523.318420][T16052] ___slab_alloc+0xb12/0x13f0 [ 1523.318439][T16052] __slab_alloc+0xc6/0x1f0 [ 1523.318457][T16052] __kmalloc_noprof+0x14b/0x7d0 [ 1523.318473][T16052] fib_create_info+0x172d/0x3210 [ 1523.318495][T16052] fib_table_insert+0xc6/0x1b50 [ 1523.318518][T16052] fib_magic+0x2c4/0x390 [ 1523.318536][T16052] fib_add_ifaddr+0x38d/0x5f0 [ 1523.318554][T16052] fib_netdev_event+0x382/0x490 [ 1523.318574][T16052] notifier_call_chain+0x1b6/0x3e0 [ 1523.318591][T16052] __dev_notify_flags+0x18d/0x2e0 [ 1523.318615][T16052] netif_change_flags+0xe8/0x1a0 [ 1523.318639][T16052] page_owner free stack trace missing [ 1523.318647][T16052] [ 1523.318651][T16052] Memory state around the buggy address: [ 1523.318662][T16052] ffff888060d5e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1523.318676][T16052] ffff888060d5e200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1523.318690][T16052] >ffff888060d5e280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1523.318700][T16052] ^ [ 1523.318712][T16052] ffff888060d5e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1523.318726][T16052] ffff888060d5e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1523.318737][T16052] ================================================================== [ 1523.358348][T16052] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1523.358371][T16052] CPU: 0 UID: 0 PID: 16052 Comm: syz.5.2095 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1523.358394][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1523.358407][T16052] Call Trace: [ 1523.358416][T16052] [ 1523.358425][T16052] dump_stack_lvl+0x99/0x250 [ 1523.358454][T16052] ? __asan_memcpy+0x40/0x70 [ 1523.358482][T16052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1523.358505][T16052] ? __pfx__printk+0x10/0x10 [ 1523.358534][T16052] vpanic+0x237/0x6d0 [ 1523.358552][T16052] ? __pfx_vpanic+0x10/0x10 [ 1523.358570][T16052] ? preempt_schedule+0xae/0xc0 [ 1523.358596][T16052] ? __pfx_preempt_schedule+0x10/0x10 [ 1523.358626][T16052] panic+0xb9/0xc0 [ 1523.358643][T16052] ? __pfx_panic+0x10/0x10 [ 1523.358663][T16052] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1523.358701][T16052] ? change_page_attr_set_clr+0x625/0xfc0 [ 1523.358729][T16052] check_panic_on_warn+0x89/0xb0 [ 1523.358752][T16052] ? change_page_attr_set_clr+0x625/0xfc0 [ 1523.358782][T16052] end_report+0x78/0x160 [ 1523.358802][T16052] kasan_report+0x129/0x150 [ 1523.358823][T16052] ? change_page_attr_set_clr+0x625/0xfc0 [ 1523.358853][T16052] change_page_attr_set_clr+0x625/0xfc0 [ 1523.358883][T16052] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1523.358909][T16052] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1523.358939][T16052] ? memtype_reserve+0x874/0xb30 [ 1523.358971][T16052] _set_pages_array+0x145/0x270 [ 1523.358992][T16052] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1523.359016][T16052] ? drm_gem_shmem_mmap+0x18b/0x450 [ 1523.359040][T16052] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1523.359066][T16052] ? rt_read_unlock+0x150/0x220 [ 1523.359092][T16052] drm_gem_shmem_mmap+0x193/0x450 [ 1523.359116][T16052] drm_gem_mmap_obj+0x18a/0x4e0 [ 1523.359136][T16052] drm_gem_mmap+0x38d/0x640 [ 1523.359156][T16052] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1523.359175][T16052] ? __mas_set_range+0x12f/0x3c0 [ 1523.359202][T16052] mmap_region+0x18c9/0x20f0 [ 1523.359244][T16052] ? __pfx_mmap_region+0x10/0x10 [ 1523.359268][T16052] ? trace_sched_exit_tp+0x36/0x110 [ 1523.359290][T16052] ? __schedule+0x1709/0x4c20 [ 1523.359351][T16052] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1523.359388][T16052] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1523.359411][T16052] ? security_mmap_addr+0x71/0x270 [ 1523.359435][T16052] ? shmem_mapping+0xd/0x50 [ 1523.359461][T16052] ? memfd_check_seals_mmap+0xcb/0x210 [ 1523.359486][T16052] do_mmap+0xc23/0x10c0 [ 1523.359507][T16052] ? __pfx_do_mmap+0x10/0x10 [ 1523.359523][T16052] ? rwbase_write_lock+0x56f/0x750 [ 1523.359545][T16052] ? __lock_acquire+0xab9/0xd20 [ 1523.359568][T16052] vm_mmap_pgoff+0x2a9/0x4d0 [ 1523.359599][T16052] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1523.359626][T16052] ? __fget_files+0x2a/0x420 [ 1523.359648][T16052] ? __fget_files+0x3a6/0x420 [ 1523.359672][T16052] ? __fget_files+0x2a/0x420 [ 1523.359694][T16052] ksys_mmap_pgoff+0x4e9/0x720 [ 1523.359712][T16052] ? __x64_sys_mmap+0x7f/0x140 [ 1523.359741][T16052] do_syscall_64+0xfa/0xfa0 [ 1523.359768][T16052] ? lockdep_hardirqs_on+0x9c/0x150 [ 1523.359794][T16052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.359814][T16052] ? clear_bhb_loop+0x60/0xb0 [ 1523.359835][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.359854][T16052] RIP: 0033:0x7fbcfb6aeec9 [ 1523.359871][T16052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.359888][T16052] RSP: 002b:00007fbcf98ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1523.359909][T16052] RAX: ffffffffffffffda RBX: 00007fbcfb906090 RCX: 00007fbcfb6aeec9 [ 1523.359925][T16052] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 1523.359939][T16052] RBP: 00007fbcfb731f91 R08: 0000000000000003 R09: 0000000100000000 [ 1523.359953][T16052] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1523.359964][T16052] R13: 00007fbcfb906128 R14: 00007fbcfb906090 R15: 00007ffe54dc8598 [ 1523.359988][T16052] [ 1523.360244][T16052] Kernel Offset: disabled