last executing test programs: 9m58.470342586s ago: executing program 3 (id=489): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539785", 0xa1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f04"]) 9m58.297685116s ago: executing program 3 (id=491): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b'], 0x0, 0x0, 0x0, 0x0}) 9m55.824867992s ago: executing program 3 (id=510): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) modify_ldt$write(0x1, 0x0, 0x0) 9m54.925425093s ago: executing program 3 (id=517): ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8, 0x0) 9m53.438865209s ago: executing program 3 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 9m53.22940158s ago: executing program 3 (id=523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x35, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1200, 0x2}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 9m38.044088139s ago: executing program 32 (id=523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x35, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1200, 0x2}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 8m8.917626424s ago: executing program 2 (id=765): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd7}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'vcan0\x00', {0x8}, 0x7ff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xb3\xbb\x00\x00\x00\x00\x00\x00m\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x96\x0e=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe1\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x80%\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x1) write$binfmt_elf64(r3, 0x0, 0xfebe) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0x78e3, [0x200, 0xffff, 0x2efe, 0x30, 0x0, 0x80, 0x0, 0xd698, 0x7fff, 0x81, 0x0, 0x6, 0xfffe, 0x2, 0x8, 0x5195, 0x9, 0x0, 0x6404, 0x101, 0x2, 0x2, 0x7, 0xfff, 0x0, 0xfff, 0x2f5, 0x5, 0x0, 0xd5, 0x7, 0xd, 0x0, 0x3d4, 0x1004, 0x5, 0x9, 0xfff, 0x402, 0x6, 0xe, 0xfff8, 0x9, 0x3, 0x1, 0xd4, 0x1ff, 0x7]}}) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40900, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000940)=0x25b) syz_open_procfs(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40400) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f00000003c0)) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x1d4}, {&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x224}], 0x2, 0x0, 0x0, 0x20006804}, 0x0) 8m7.144834301s ago: executing program 2 (id=771): r0 = userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x2c020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2}, 0x27) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x6b4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x40000) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) accept(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x8, 0x7, 0x0, 0x0, 0x3, 0x8}, {0x5, 0x5c, 0xa57f, 0x0, 0x1, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) 8m2.870423874s ago: executing program 2 (id=774): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x1e010080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) epoll_create1(0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 8m0.32278804s ago: executing program 2 (id=776): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) syz_open_procfs$namespace(0x0, 0x0) shutdown(r5, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 7m58.886100752s ago: executing program 2 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000400101c0000000000800"]) lseek(0xffffffffffffffff, 0x851, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r5, r6) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x804) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000088}, 0x0) 7m51.061301175s ago: executing program 2 (id=788): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) 7m35.616854199s ago: executing program 33 (id=788): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) 5m20.710798626s ago: executing program 1 (id=1047): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socket(0x18, 0x5, 0x86b0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf555}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1000}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x477}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_vmscan_lru_shrink_inactive\x00', r4, 0x0, 0x8000}, 0x18) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, 0xffffffffffffffff, 0x800000000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 5m10.056216641s ago: executing program 1 (id=1062): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe, 0x3, 0x300, 0x8001, 0x56d0, 0x400004, 0x1438, 0x8a3, 0x8, 0x8, 0x0, 0x4, 0x800, 0x8, 0xb, 0xe39, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0xfffffffc}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x16, 0x3, "91abc12404cf378042f26c43f91f68d8a907"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x94}}, 0x0) mkdir(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7) syz_open_dev$vcsu(0x0, 0x0, 0x346) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 5m6.592157278s ago: executing program 1 (id=1068): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m1.97068697s ago: executing program 1 (id=1076): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe, 0x3, 0x300, 0x8001, 0x56d0, 0x400004, 0x1438, 0x8a3, 0x8, 0x8, 0x0, 0x4, 0x800, 0x8, 0xb, 0xe39, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0xfffffffc}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x16, 0x3, "91abc12404cf378042f26c43f91f68d8a907"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x94}}, 0x0) mkdir(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7) syz_open_dev$vcsu(0x0, 0x0, 0x346) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 4m58.925381279s ago: executing program 1 (id=1080): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x13, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) r4 = dup(r2) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8926, 0x0) 4m48.653388001s ago: executing program 1 (id=1095): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x13, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) r3 = dup(0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8926, 0x0) 4m33.115954059s ago: executing program 34 (id=1095): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x13, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) r3 = dup(0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8926, 0x0) 24.052771946s ago: executing program 0 (id=1442): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x280040, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(r3, &(0x7f0000000380)='./file0/file0\x00', 0x8) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r4, &(0x7f0000000680), 0x0, 0x40012100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r6, 0x0, 0x3, 0x1}}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff9ba, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801) 21.561906725s ago: executing program 0 (id=1447): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004011) syz_io_uring_setup(0x748e, &(0x7f0000000780)={0x0, 0xf1eb, 0x8, 0x4, 0x1e4}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x6}, 0x8) memfd_create(0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0xb, 0x500000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000), 0x8) shutdown(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) getdents64(r3, &(0x7f0000000600)=""/115, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x10000000000000}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x222700) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x411c00, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) fchown(r6, r7, 0xffffffffffffffff) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@int=0x7, 0x4) 19.469266243s ago: executing program 5 (id=1449): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socket(0x18, 0x5, 0x86b0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf555}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1000}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x477}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_vmscan_lru_shrink_inactive\x00', r4, 0x0, 0x8000}, 0x18) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) r9 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r9, 0x800000000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 19.331589044s ago: executing program 0 (id=1451): r0 = dup(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) time(&(0x7f0000000040)) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[], 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x4, 0x3a, '', 0x3a, '&(', 0x3a, './file0', 0x3a, [0x4f, 0x46]}, 0x2b) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x80000007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 16.232316331s ago: executing program 6 (id=1453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x1}, 0x1c, 0x0}}], 0x1, 0x20004011) syz_io_uring_setup(0x748e, &(0x7f0000000780)={0x0, 0xf1eb, 0x8, 0x4, 0x1e4}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x6}, 0x8) memfd_create(&(0x7f0000000380)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x05aCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) fchown(r8, r9, 0xffffffffffffffff) openat$cgroup_ro(r7, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000080)=@int=0x7, 0x4) 16.222543955s ago: executing program 5 (id=1454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={r5, 0x1, 0x6, @broadcast}, 0x10) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 16.082663917s ago: executing program 0 (id=1455): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x6, 0x0, 0x5) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x8000) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setpipe(r6, 0x407, 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r8 = inotify_init() inotify_add_watch(r8, &(0x7f00000000c0)='./file1\x00', 0x44000268) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f00000003c0)="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", 0xff}], 0x1) 13.870148424s ago: executing program 4 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13.839703442s ago: executing program 5 (id=1458): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x20004011) syz_io_uring_setup(0x748e, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x6}, 0x8) memfd_create(&(0x7f0000000380)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x05aCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) fchown(r6, r7, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@int=0x7, 0x4) 13.812484525s ago: executing program 6 (id=1459): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x6, 0x0, 0x5) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x8000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000000c0)='./file1\x00', 0x44000268) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f00000003c0)="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", 0xff}], 0x1) 11.851494214s ago: executing program 4 (id=1460): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x280040, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(r3, &(0x7f0000000380)='./file0/file0\x00', 0x8) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r4, &(0x7f0000000680), 0x0, 0x40012100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r6, 0x0, 0x3, 0x1}}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff9ba, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801) 11.627224138s ago: executing program 6 (id=1461): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x280040, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(r3, &(0x7f0000000380)='./file0/file0\x00', 0x8) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r4, &(0x7f0000000680), 0x0, 0x40012100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r6, 0x0, 0x3, 0x1}}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff9ba, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801) 9.812335827s ago: executing program 5 (id=1462): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={r5, 0x1, 0x6, @broadcast}, 0x10) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653e910a42a787a85e2", 0x89, 0xce49}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 7.303239607s ago: executing program 4 (id=1463): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='./file1\x00', 0x44000268) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f00000003c0)="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", 0xff}], 0x1) 6.578060895s ago: executing program 0 (id=1464): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={r5, 0x1, 0x6, @broadcast}, 0x10) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653e910a42a787a85e2", 0x89, 0xce49}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 6.536764604s ago: executing program 6 (id=1465): getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe, 0x3, 0x300, 0x8001, 0x56d0, 0x400004, 0x1438, 0x8a3, 0x8, 0x8, 0x0, 0x4, 0x800, 0x8, 0xb, 0xe39, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0xfffffffc}}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x16, 0x3, "91abc12404cf378042f26c43f91f68d8a907"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x94}}, 0x0) 5.655267929s ago: executing program 5 (id=1466): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653e910a42a787a85e2", 0x89, 0xce49}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 5.338982086s ago: executing program 4 (id=1467): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004011) syz_io_uring_setup(0x748e, &(0x7f0000000780)={0x0, 0xf1eb, 0x8, 0x4, 0x1e4}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x6}, 0x8) memfd_create(0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0xb, 0x500000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000), 0x8) shutdown(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents64(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x10000000000000}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x222700) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x411c00, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) fchown(r6, r7, 0xffffffffffffffff) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@int=0x7, 0x4) 3.971818609s ago: executing program 6 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) time(&(0x7f0000000040)) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) write$binfmt_register(r3, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x4, 0x3a, '', 0x3a, '&(', 0x3a, './file0', 0x3a, [0x4f, 0x46]}, 0x2b) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x80000007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.416352373s ago: executing program 0 (id=1469): socket(0x200000000000011, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001700)='`'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900"], 0x110}}, 0x40040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/consoles\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7], 0x40}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140000000001400000011"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000dfff000000000100000a14000000020a05ffff00000000000000000000801400000011000100ffffffff00c47a0000000000000a"], 0x3c}, 0x1, 0x1200}, 0x4000000) 1.521075265s ago: executing program 6 (id=1470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653e910a42a787a85e2", 0x89, 0xce49}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 1.502212682s ago: executing program 4 (id=1471): pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c3ac60729bb38b96", "be130de95383cd923038f44107ee5cea3d777849c969c633b55e55684bb27107", "7bd076bc", "2239d96e44e2b170"}, 0x38) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0) fcntl$lock(r3, 0x26, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10121, 0x0) shutdown(r4, 0x0) 722.383138ms ago: executing program 4 (id=1472): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004011) syz_io_uring_setup(0x748e, &(0x7f0000000780)={0x0, 0xf1eb, 0x8, 0x4, 0x1e4}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x6}, 0x8) memfd_create(0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0xb, 0x500000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000), 0x8) shutdown(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents64(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x10000000000000}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x222700) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x411c00, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) fchown(r6, r7, 0xffffffffffffffff) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@int=0x7, 0x4) 0s ago: executing program 5 (id=1473): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x280040, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(r3, &(0x7f0000000380)='./file0/file0\x00', 0x8) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r4, &(0x7f0000000680), 0x0, 0x40012100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r5, 0x0, 0x3, 0x1}}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff9ba, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmsg$inet6(r6, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801) kernel console output (not intermixed with test programs): 0 arch=c000003e syscall=202 compat=0 ip=0x7f713698e929 code=0x7ffc0000 [ 292.477101][ T30] audit: type=1326 audit(1749429996.335:14): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.1.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f713698e929 code=0x7ffc0000 [ 292.688216][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.727649][ T30] audit: type=1326 audit(1749429996.345:15): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.1.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713698e929 code=0x7ffc0000 [ 292.750140][ T30] audit: type=1326 audit(1749429996.345:16): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.1.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713698e929 code=0x7ffc0000 [ 292.796482][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.079842][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.087917][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.296987][ T8456] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 299.623504][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 300.358949][ T8460] syz.4.686 (8460) used greatest stack depth: 16880 bytes left [ 305.374725][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 306.898363][ T8518] lo speed is unknown, defaulting to 1000 [ 307.109012][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.577455][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 307.604070][ T43] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 307.618942][ T43] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 307.648551][ T43] usb 6-1: config 179 has no interface number 0 [ 307.655136][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 307.731888][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 307.794495][ T43] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 307.853151][ T43] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 307.890751][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.945583][ T8520] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 309.169035][ T43] IPVS: starting estimator thread 0... [ 309.191766][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.253365][ T8546] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.261217][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.285349][ T8554] overlay: ./file0 is not a directory [ 309.309293][ T8551] IPVS: using max 27 ests per chain, 64800 per kthread [ 309.621608][ T978] usb 6-1: USB disconnect, device number 2 [ 312.288112][ T8577] overlayfs: missing 'lowerdir' [ 315.669345][ T8606] Process accounting resumed [ 317.239590][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.246873][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.931624][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 321.789823][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 323.119553][ T8728] xt_socket: unknown flags 0x50 [ 324.451720][ T8743] netlink: 128 bytes leftover after parsing attributes in process `syz.1.733'. [ 326.515972][ T8762] sctp: [Deprecated]: syz.4.734 (pid 8762) Use of int in maxseg socket option. [ 326.515972][ T8762] Use struct sctp_assoc_value instead [ 327.421585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.770141][ T8759] tty tty4: ldisc open failed (-12), clearing slot 3 [ 328.412010][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 334.593368][ T8803] block nbd5: NBD_DISCONNECT [ 334.640060][ T8803] block nbd5: Send disconnect failed -107 [ 334.712172][ T8803] block nbd5: Disconnected due to user request. [ 334.728643][ T8803] block nbd5: shutting down sockets [ 337.476308][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 337.547930][ T8824] trusted_key: encrypted_key: key user:syz not found [ 337.794084][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 337.839958][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.858458][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.886542][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 337.906157][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.935471][ T9] usb 5-1: Product: syz [ 337.958701][ T9] usb 5-1: Manufacturer: syz [ 338.688642][ T9] usb 5-1: SerialNumber: syz [ 338.742857][ T9] usb 5-1: config 0 descriptor?? [ 338.901014][ T9] usb 5-1: can't set config #0, error -71 [ 338.939240][ T9] usb 5-1: USB disconnect, device number 12 [ 338.950660][ T8847] netlink: 512 bytes leftover after parsing attributes in process `syz.5.751'. [ 340.611280][ T8854] overlayfs: failed to clone lowerpath [ 342.255632][ T8881] can0: slcan on ptm0. [ 343.011902][ T8891] lo speed is unknown, defaulting to 1000 [ 345.387111][ T8878] can0 (unregistered): slcan off ptm0. [ 345.545267][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.763'. [ 347.347812][ T8924] tipc: Started in network mode [ 347.352901][ T8924] tipc: Node identity 7, cluster identity 4711 [ 347.359321][ T8924] tipc: Node number set to 7 [ 348.218650][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 348.378614][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 348.391754][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.578277][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 348.597674][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.606826][ T9] usb 5-1: Product: syz [ 348.615980][ T9] usb 5-1: Manufacturer: syz [ 348.643778][ T9] usb 5-1: SerialNumber: syz [ 348.658611][ T8927] tipc: Can't bind to reserved service type 0 [ 348.686599][ T9] usb 5-1: config 0 descriptor?? [ 351.498364][ T9] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 351.514632][ T9] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 352.460667][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.471004][ T978] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 352.482285][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.770420][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 352.902819][ T978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.050630][ T978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.193715][ T978] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.301062][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.395266][ T978] usb 6-1: Product: syz [ 353.436579][ T978] usb 6-1: Manufacturer: syz [ 353.481512][ T978] usb 6-1: SerialNumber: syz [ 354.664879][ T978] usb 6-1: can't set config #1, error -71 [ 354.894398][ T8954] batadv1: entered promiscuous mode [ 354.910498][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 355.470450][ T978] usb 6-1: USB disconnect, device number 3 [ 355.531036][ T8949] Falling back ldisc for ptm0. [ 356.593643][ T8963] ceph: No mds server is up or the cluster is laggy [ 356.601931][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 356.604023][ T8967] ALSA: mixer_oss: invalid OSS volume '4zŒ³' [ 356.608136][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 356.657530][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 356.806098][ T30] audit: type=1326 audit(1749430061.593:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8961 comm="syz.5.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x0 [ 356.958886][ T9] usb 5-1: USB disconnect, device number 13 [ 357.254767][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.5.777'. [ 361.666249][ T9010] futex_wake_op: syz.4.783 tries to shift op by -1; fix this program [ 361.687769][ T9010] Bluetooth: MGMT ver 1.23 [ 365.076728][ T9027] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 365.087953][ T9027] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 366.201571][ T9032] syz_tun: entered allmulticast mode [ 366.995399][ T9016] futex_wake_op: syz.1.784 tries to shift op by -1; fix this program [ 367.243154][ T9038] Cannot find add_set index 0 as target [ 370.688810][ T9055] veth0_vlan: entered allmulticast mode [ 375.388763][ T5829] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 378.630253][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.639959][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.692189][ T30] audit: type=1326 audit(1749430087.313:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 382.738583][ T30] audit: type=1326 audit(1749430087.313:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 382.759938][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.860896][ T9153] netlink: 'syz.0.810': attribute type 10 has an invalid length. [ 382.868843][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 383.526751][ T9153] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 383.625481][ T30] audit: type=1326 audit(1749430087.323:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 383.694558][ T30] audit: type=1326 audit(1749430087.323:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 384.183073][ T30] audit: type=1326 audit(1749430087.323:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 384.242601][ T30] audit: type=1326 audit(1749430087.323:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 384.316959][ T30] audit: type=1326 audit(1749430087.493:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 384.400722][ T30] audit: type=1326 audit(1749430087.493:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 384.474692][ T30] audit: type=1326 audit(1749430087.533:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 384.495914][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.515870][ T30] audit: type=1326 audit(1749430087.533:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9147 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 384.541498][ T9160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.549287][ T9160] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 384.961797][ T9170] netlink: 'syz.4.812': attribute type 11 has an invalid length. [ 385.376485][ T9164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.863099][ T9160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.872842][ T9160] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 385.881504][ T9160] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.988692][ T9160] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 386.346608][ T9186] netlink: 'syz.5.813': attribute type 1 has an invalid length. [ 386.844380][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 387.908566][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 387.914861][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 388.171858][ T9160] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 388.193351][ T9160] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 388.879899][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 389.064458][ T9160] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 389.290385][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.302827][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.316112][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.329767][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.330931][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.494108][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 390.494150][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 390.500327][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 390.724017][ T9165] lo speed is unknown, defaulting to 1000 [ 391.849207][ T5829] Bluetooth: hci1: command tx timeout [ 392.178620][ T9236] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.820'. [ 392.572676][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 393.908508][ T5829] Bluetooth: hci1: command tx timeout [ 394.618552][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 395.992721][ T5829] Bluetooth: hci1: command tx timeout [ 396.490096][ T9273] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 398.478821][ T5829] Bluetooth: hci1: command tx timeout [ 401.810410][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 401.839053][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 402.391950][ T51] Bluetooth: hci2: Malformed Event: 0x13 [ 405.930952][ T146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.097343][ T146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.330775][ T9165] chnl_net:caif_netlink_parms(): no params data found [ 407.088590][ T9352] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 407.555194][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 407.612563][ T146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.626301][ T146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.005137][ T9338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.319014][ T146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.027436][ T146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 409.951999][ T146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.967018][ T146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 409.986523][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.993914][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.041812][ T9165] bridge_slave_0: entered allmulticast mode [ 410.239876][ T9165] bridge_slave_0: entered promiscuous mode [ 410.252732][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.268964][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.344076][ T9383] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 410.778761][ T9165] bridge_slave_1: entered allmulticast mode [ 410.786942][ T9165] bridge_slave_1: entered promiscuous mode [ 412.306072][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.353152][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.859646][ T51] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 416.085261][ T9416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.127063][ T9416] batadv_slave_1: entered promiscuous mode [ 417.127355][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 418.113795][ T9165] team0: Port device team_slave_0 added [ 418.191675][ T9165] team0: Port device team_slave_1 added [ 418.594774][ T9440] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 419.067752][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 419.078010][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 419.090284][ T5829] Bluetooth: hci2: hardware error 0x00 [ 420.202532][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.219165][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.245142][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.128457][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.147994][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.155332][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.184004][ T5829] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 421.218521][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.291274][ T146] bond0: left allmulticast mode [ 421.296209][ T146] bond_slave_0: left allmulticast mode [ 421.338714][ T146] bond_slave_1: left allmulticast mode [ 422.302171][ T146] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 422.315496][ T146] bridge0: port 3(bond0) entered disabled state [ 422.754317][ T146] bridge_slave_1: left allmulticast mode [ 423.108449][ T146] bridge_slave_1: left promiscuous mode [ 423.145125][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.711638][ T146] bridge_slave_0: left allmulticast mode [ 425.733246][ T146] bridge_slave_0: left promiscuous mode [ 425.739834][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.605773][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.862'. [ 426.635154][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.862'. [ 427.348541][ T9510] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 429.962017][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 430.038697][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 431.595010][ T146] batman_adv: batadv0: Interface deactivated: macsec1 [ 431.658947][ T146] batman_adv: batadv0: Removing interface: macsec1 [ 432.476812][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.487946][ T146] bond_slave_0: left promiscuous mode [ 432.503486][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.513026][ T146] bond_slave_1: left promiscuous mode [ 432.522062][ T146] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 432.530707][ T146] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 432.543325][ T146] bond0 (unregistering): Released all slaves [ 432.671719][ T9165] hsr_slave_0: entered promiscuous mode [ 432.688680][ T9165] hsr_slave_1: entered promiscuous mode [ 432.794112][ T9541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.817940][ T9541] batadv_slave_1: entered promiscuous mode [ 432.850485][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 432.910996][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 432.925814][ T146] tipc: Left network mode [ 433.130112][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 433.278543][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 434.992595][ T9589] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 435.410807][ T146] batman_adv: batadv0: Interface deactivated: wlan0 [ 435.565287][ T146] batman_adv: batadv0: Removing interface: wlan0 [ 436.781551][ T146] hsr_slave_0: left promiscuous mode [ 436.852308][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.885'. [ 436.861473][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.885'. [ 436.922560][ T146] hsr_slave_1: left promiscuous mode [ 437.218796][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.337448][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.974958][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.993231][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.056892][ T146] veth0_macvtap: left allmulticast mode [ 439.108062][ T146] veth1_macvtap: left promiscuous mode [ 439.114906][ T146] veth0_macvtap: left promiscuous mode [ 439.122782][ T146] veth1_vlan: left promiscuous mode [ 439.128159][ T146] veth0_vlan: left promiscuous mode [ 440.013949][ T9642] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 440.166975][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.173667][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.100881][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 442.116741][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 442.125125][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 442.134696][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 442.143380][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 442.986860][ T146] team0 (unregistering): Port device team_slave_1 removed [ 443.033582][ T146] team0 (unregistering): Port device team_slave_0 removed [ 444.103999][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.129170][ T9634] batadv_slave_1: entered promiscuous mode [ 444.148896][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 444.178900][ T9667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.186987][ T9667] batadv_slave_1: entered promiscuous mode [ 444.218670][ T51] Bluetooth: hci4: command tx timeout [ 444.223512][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 444.545922][ T9661] lo speed is unknown, defaulting to 1000 [ 445.604749][ T9685] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 445.611358][ T9685] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 445.777322][ T9685] vhci_hcd vhci_hcd.0: Device attached [ 446.026487][ T9692] vhci_hcd: connection closed [ 446.085867][ T1155] vhci_hcd: stop threads [ 446.116163][ T1155] vhci_hcd: release socket [ 446.147154][ T1155] vhci_hcd: disconnect device [ 446.300407][ T51] Bluetooth: hci4: command tx timeout [ 446.667525][ T24] vhci_hcd: vhci_device speed not set [ 447.399671][ T9661] chnl_net:caif_netlink_parms(): no params data found [ 447.501040][ T9724] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 448.378812][ T51] Bluetooth: hci4: command tx timeout [ 449.401156][ T146] bridge_slave_1: left allmulticast mode [ 449.406881][ T146] bridge_slave_1: left promiscuous mode [ 449.423687][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.441449][ T146] bridge_slave_0: left allmulticast mode [ 449.447180][ T146] bridge_slave_0: left promiscuous mode [ 449.469864][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.193467][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.237985][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.272136][ T146] bond0 (unregistering): Released all slaves [ 450.299124][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.308589][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.315861][ T9661] bridge_slave_0: entered allmulticast mode [ 450.334777][ T9661] bridge_slave_0: entered promiscuous mode [ 450.349929][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.365627][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.373347][ T9661] bridge_slave_1: entered allmulticast mode [ 450.390091][ T9661] bridge_slave_1: entered promiscuous mode [ 450.468557][ T51] Bluetooth: hci4: command tx timeout [ 450.775759][ T9758] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 451.800137][ T146] hsr_slave_0: left promiscuous mode [ 451.806328][ T146] hsr_slave_1: left promiscuous mode [ 451.813859][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.273831][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.953994][ T9806] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 456.922411][ T146] team0 (unregistering): Port device team_slave_1 removed [ 456.958213][ T146] team0 (unregistering): Port device team_slave_0 removed [ 457.503365][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 457.512497][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 457.622014][ T9661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.648538][ T9661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.101677][ T9661] team0: Port device team_slave_0 added [ 458.792378][ T9661] team0: Port device team_slave_1 added [ 459.189506][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.213538][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.379346][ T9661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.669138][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.676139][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.714986][ T9661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.168547][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 463.205548][ T9661] hsr_slave_0: entered promiscuous mode [ 463.389587][ T9661] hsr_slave_1: entered promiscuous mode [ 463.553194][ T9900] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 463.559804][ T9900] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 463.607598][ T9900] vhci_hcd vhci_hcd.0: Device attached [ 463.702415][ T9902] vhci_hcd: connection closed [ 463.704472][ T8668] vhci_hcd: stop threads [ 463.765630][ T8668] vhci_hcd: release socket [ 463.828797][ T978] vhci_hcd: vhci_device speed not set [ 463.865537][ T8668] vhci_hcd: disconnect device [ 463.988737][ T978] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 464.114086][ T978] usb 43-1: enqueue for inactive port 0 [ 464.412344][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 464.436613][ T978] vhci_hcd: vhci_device speed not set [ 465.624375][ T9930] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 465.630950][ T9930] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 465.677741][ T9930] vhci_hcd vhci_hcd.0: Device attached [ 466.901116][ T9932] vhci_hcd: connection closed [ 466.921688][ T978] vhci_hcd: vhci_device speed not set [ 466.943120][ T6031] vhci_hcd: stop threads [ 466.967462][ T6031] vhci_hcd: release socket [ 466.986143][ T6031] vhci_hcd: disconnect device [ 467.288602][ T978] vhci_hcd: vhci_device speed not set [ 467.627129][ T9661] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.663379][ T9661] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 467.701180][ T9661] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 467.722686][ T9661] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.951709][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 470.589534][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.932776][ T9661] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.994016][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.951'. [ 471.040686][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.047908][ T6421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.135861][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 471.205584][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.212851][ T6421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.331978][ T9661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.416817][ T9661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.837010][T10017] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 472.843600][T10017] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 472.868488][T10017] vhci_hcd vhci_hcd.0: Device attached [ 472.946571][T10021] vhci_hcd: connection closed [ 472.956092][ T36] vhci_hcd: stop threads [ 472.975487][ T36] vhci_hcd: release socket [ 472.992735][ T36] vhci_hcd: disconnect device [ 473.216486][ T24] vhci_hcd: vhci_device speed not set [ 473.279831][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.577222][ T51] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 476.433793][ T9661] veth0_vlan: entered promiscuous mode [ 476.845700][T10077] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 477.029327][ T9661] veth1_vlan: entered promiscuous mode [ 477.192310][ T9661] veth0_macvtap: entered promiscuous mode [ 477.213969][ T9661] veth1_macvtap: entered promiscuous mode [ 477.512471][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.542889][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.327472][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.971'. [ 478.366088][T10094] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 478.372659][T10094] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 478.407132][T10094] vhci_hcd vhci_hcd.0: Device attached [ 478.470556][ T9661] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.495250][ T9661] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.514699][ T9661] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.535038][ T9661] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.579136][ T24] vhci_hcd: vhci_device speed not set [ 478.642710][ T51] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 478.652274][ T51] Bluetooth: hci5: Injecting HCI hardware error event [ 478.660786][ T5829] Bluetooth: hci5: hardware error 0x00 [ 478.661149][ T24] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 478.727024][T10101] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 478.870550][T10100] vhci_hcd: connection closed [ 478.932950][ T8668] vhci_hcd: stop threads [ 479.288646][ T8668] vhci_hcd: release socket [ 479.335122][ T8668] vhci_hcd: disconnect device [ 479.469977][T10108] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 479.476582][T10108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 479.499515][T10108] vhci_hcd vhci_hcd.0: Device attached [ 479.531462][ T8757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.558791][ T8757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.694844][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.706795][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.728913][ T9] vhci_hcd: vhci_device speed not set [ 479.758463][T10111] vhci_hcd: connection closed [ 479.758886][ T8661] vhci_hcd: stop threads [ 479.771963][ T8661] vhci_hcd: release socket [ 479.777752][ T8661] vhci_hcd: disconnect device [ 479.798720][ T9] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 480.504884][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 480.698506][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 483.241640][ T5829] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 483.828954][ T24] vhci_hcd: vhci_device speed not set [ 485.263307][ T9] vhci_hcd: vhci_device speed not set [ 485.927475][ T5829] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 487.258579][ T5829] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 487.267407][ T5829] Bluetooth: hci3: Injecting HCI hardware error event [ 487.277540][ T51] Bluetooth: hci3: hardware error 0x00 [ 487.798369][ T5829] Bluetooth: hci4: failed to read key size for handle 201 [ 489.343214][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 492.062799][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 492.072118][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 492.083472][ T5829] Bluetooth: hci4: hardware error 0x00 [ 494.308432][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 495.970112][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 496.348944][T10277] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 498.558852][T10281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1007'. [ 501.504679][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.511100][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.133141][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1021'. [ 504.881125][T10358] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 504.887702][T10358] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 504.951026][T10358] vhci_hcd vhci_hcd.0: Device attached [ 505.018370][T10361] vhci_hcd: connection closed [ 505.019109][ T36] vhci_hcd: stop threads [ 505.084668][ T36] vhci_hcd: release socket [ 505.095512][ T36] vhci_hcd: disconnect device [ 505.542783][ T9] vhci_hcd: vhci_device speed not set [ 505.806781][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 505.816405][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 508.391669][T10399] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 508.951802][T10402] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 508.958385][T10402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 508.996883][T10402] vhci_hcd vhci_hcd.0: Device attached [ 509.360516][ T43] vhci_hcd: vhci_device speed not set [ 509.373092][T10404] vhci_hcd: connection closed [ 509.486610][T10416] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 509.776507][T10418] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 509.791069][ T43] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 509.895167][ T6421] vhci_hcd: stop threads [ 509.958363][ T6421] vhci_hcd: release socket [ 509.963009][ T6421] vhci_hcd: disconnect device [ 512.627502][T10449] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 513.176744][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1042'. [ 515.079291][ T43] vhci_hcd: vhci_device speed not set [ 515.081965][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 515.098133][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 515.577826][T10487] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 517.123627][T10485] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 517.130204][T10485] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 517.269396][T10485] vhci_hcd vhci_hcd.0: Device attached [ 517.449617][ T978] vhci_hcd: vhci_device speed not set [ 517.565917][T10490] vhci_hcd: connection closed [ 517.566623][ T8661] vhci_hcd: stop threads [ 517.570221][ T978] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 517.663694][ T8661] vhci_hcd: release socket [ 517.711077][ T8661] vhci_hcd: disconnect device [ 520.652793][T10504] mkiss: ax0: crc mode is auto. [ 520.691372][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 522.759037][ T978] vhci_hcd: vhci_device speed not set [ 525.375596][T10566] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 525.427978][T10566] mkiss: ax0: crc mode is auto. [ 525.746826][T10571] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 525.753497][T10571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 526.138690][T10571] vhci_hcd vhci_hcd.0: Device attached [ 526.341037][T10572] vhci_hcd: connection closed [ 526.368413][ T6031] vhci_hcd: stop threads [ 526.377459][ T6031] vhci_hcd: release socket [ 526.383063][ T6031] vhci_hcd: disconnect device [ 526.500051][T10575] mkiss: ax0: crc mode is auto. [ 526.940353][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1063'. [ 530.111499][T10615] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 530.292039][T10598] mkiss: ax0: crc mode is auto. [ 531.172366][T10624] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.476616][T10653] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 534.483165][T10653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 534.511098][T10653] vhci_hcd vhci_hcd.0: Device attached [ 534.698775][T10648] mkiss: ax0: crc mode is auto. [ 534.707528][ T1229] vhci_hcd: vhci_device speed not set [ 534.955673][ T1229] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 535.028424][T10655] vhci_hcd: connection reset by peer [ 535.034669][ T6031] vhci_hcd: stop threads [ 536.044978][ T6031] vhci_hcd: release socket [ 536.148253][ T6031] vhci_hcd: disconnect device [ 537.601383][T10688] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 540.157627][ T1229] vhci_hcd: vhci_device speed not set [ 540.457602][T10710] mkiss: ax0: crc mode is auto. [ 540.803442][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1087'. [ 540.850858][T10726] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 541.455646][T10730] ptrace attach of "./syz-executor exec"[9661] was attempted by "./syz-executor exec"[10730] [ 541.732765][T10736] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.031855][T10736] mkiss: ax0: crc mode is auto. [ 547.490058][T10759] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[10759] [ 549.243314][T10772] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[10772] [ 552.155960][T10789] mkiss: ax0: crc mode is auto. [ 552.683963][T10794] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 553.774937][T10813] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[10813] [ 554.753545][T10801] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 557.686082][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1113'. [ 557.695303][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1113'. [ 557.822299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.849067][T10865] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 560.118403][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 560.118425][ T30] audit: type=1326 audit(1749430264.293:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 560.322787][ T30] audit: type=1326 audit(1749430264.303:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 560.345182][ T30] audit: type=1326 audit(1749430264.313:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 560.366931][ T30] audit: type=1326 audit(1749430264.313:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 560.399839][ T30] audit: type=1326 audit(1749430264.313:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 560.556465][ T30] audit: type=1326 audit(1749430264.313:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 560.731929][ T30] audit: type=1326 audit(1749430264.313:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 561.203482][T10876] mkiss: ax0: crc mode is auto. [ 561.217982][ T30] audit: type=1326 audit(1749430264.313:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 561.270858][ T30] audit: type=1326 audit(1749430264.323:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 561.293133][ T30] audit: type=1326 audit(1749430264.323:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 562.765161][T10898] ptrace attach of "./syz-executor exec"[9661] was attempted by "./syz-executor exec"[10898] [ 562.959653][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.972594][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.536858][T10899] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 565.565095][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 565.783416][T10908] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 567.270423][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 567.270445][ T30] audit: type=1326 audit(1749430271.513:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 568.779510][T10922] ptrace attach of "./syz-executor exec"[9661] was attempted by "./syz-executor exec"[10922] [ 569.292492][ T30] audit: type=1326 audit(1749430271.513:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 569.724704][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 569.744413][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.579434][ T30] audit: type=1326 audit(1749430271.573:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 570.580481][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.768352][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.823609][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.872130][ T30] audit: type=1326 audit(1749430271.583:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 570.885402][T10939] mkiss: ax0: crc mode is auto. [ 571.024904][ T30] audit: type=1326 audit(1749430271.583:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 571.067231][ T30] audit: type=1326 audit(1749430271.583:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 571.128398][ T30] audit: type=1326 audit(1749430271.583:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 571.188970][ T30] audit: type=1326 audit(1749430271.583:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 571.255367][ T30] audit: type=1326 audit(1749430271.613:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 571.512301][ T30] audit: type=1326 audit(1749430271.633:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10911 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 572.203273][T10924] lo speed is unknown, defaulting to 1000 [ 572.575848][T10958] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[10958] [ 573.128649][ T51] Bluetooth: hci1: command tx timeout [ 574.483658][T10968] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 574.866270][T10924] chnl_net:caif_netlink_parms(): no params data found [ 574.889268][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 574.889297][ T30] audit: type=1326 audit(1749430279.683:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 574.921283][ T30] audit: type=1326 audit(1749430279.693:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 575.252962][ T51] Bluetooth: hci1: command tx timeout [ 575.641243][ T30] audit: type=1326 audit(1749430279.693:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 575.663877][ T30] audit: type=1326 audit(1749430279.693:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 575.688368][ T30] audit: type=1326 audit(1749430279.693:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 575.809964][ T30] audit: type=1326 audit(1749430279.693:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 575.888405][ T30] audit: type=1326 audit(1749430279.693:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 575.958396][ T30] audit: type=1326 audit(1749430279.693:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 576.063553][ T30] audit: type=1326 audit(1749430279.693:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 576.159806][ T30] audit: type=1326 audit(1749430279.693:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10971 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 577.288569][T11004] warning: `syz.6.1140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 577.302902][T10924] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.353368][ T51] Bluetooth: hci1: command tx timeout [ 577.468581][T10924] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.475864][T10924] bridge_slave_0: entered allmulticast mode [ 577.525720][T10924] bridge_slave_0: entered promiscuous mode [ 577.594577][T10924] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.634399][T10924] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.698833][T10924] bridge_slave_1: entered allmulticast mode [ 577.834431][T10924] bridge_slave_1: entered promiscuous mode [ 579.868468][ T51] Bluetooth: hci1: command tx timeout [ 581.439446][T11019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 581.447556][T11019] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 581.456516][T11019] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 581.673628][T10924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.876182][T10924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.768485][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 582.768506][ T30] audit: type=1326 audit(1749430286.823:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 582.879085][ T30] audit: type=1326 audit(1749430286.823:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 583.028358][ T30] audit: type=1326 audit(1749430286.833:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 583.068430][ T30] audit: type=1326 audit(1749430286.833:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 583.832045][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 583.872602][ T30] audit: type=1326 audit(1749430286.833:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 583.918381][ T30] audit: type=1326 audit(1749430286.833:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 583.968447][ T30] audit: type=1326 audit(1749430286.833:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 584.018352][ T30] audit: type=1326 audit(1749430286.833:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 584.078376][ T30] audit: type=1326 audit(1749430286.843:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 584.153956][ T30] audit: type=1326 audit(1749430286.843:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.6.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 584.395945][T11050] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 584.692924][T10924] team0: Port device team_slave_0 added [ 584.719131][T11036] Falling back ldisc for ttyprintk. [ 585.898866][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 587.978629][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 588.380748][T10924] team0: Port device team_slave_1 added [ 588.965445][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 588.965468][ T30] audit: type=1326 audit(1749430293.573:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 589.012183][ T30] audit: type=1326 audit(1749430293.573:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 590.016076][ T30] audit: type=1326 audit(1749430293.693:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 591.482421][ T30] audit: type=1326 audit(1749430293.693:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 592.649719][T11089] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 593.104655][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 593.278356][ T30] audit: type=1326 audit(1749430293.693:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 593.318381][ T30] audit: type=1326 audit(1749430294.163:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 593.405358][ T30] audit: type=1326 audit(1749430294.163:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 593.509180][ T30] audit: type=1326 audit(1749430294.163:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 593.532398][ T30] audit: type=1326 audit(1749430294.163:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11084 comm="syz.6.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 593.554313][ T30] audit: type=1326 audit(1749430294.163:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11084 comm="syz.6.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 593.676567][T11100] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 593.683140][T11100] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 593.966991][T11100] vhci_hcd vhci_hcd.0: Device attached [ 594.585904][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 594.585951][ T30] audit: type=1326 audit(1749430299.323:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 594.963613][T10924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.980072][T11107] vhci_hcd: connection closed [ 595.214114][ T1229] vhci_hcd: vhci_device speed not set [ 595.226200][ T1155] vhci_hcd: stop threads [ 595.231648][ T30] audit: type=1326 audit(1749430299.323:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 595.253985][ T30] audit: type=1326 audit(1749430299.323:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 595.276659][ T30] audit: type=1326 audit(1749430299.323:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 595.316542][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.342819][ T1155] vhci_hcd: release socket [ 595.361513][ T1155] vhci_hcd: disconnect device [ 595.378421][ T1229] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 595.397013][ T1229] usb 33-1: enqueue for inactive port 0 [ 595.452312][T10924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.463710][ T30] audit: type=1326 audit(1749430299.333:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 595.485460][ T1229] vhci_hcd: vhci_device speed not set [ 595.505367][T10924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.516734][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.548109][ T30] audit: type=1326 audit(1749430299.333:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 595.578574][T10924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.593975][ T30] audit: type=1326 audit(1749430299.333:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 595.859697][ T8754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.958045][ T8754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.112847][ T30] audit: type=1326 audit(1749430299.333:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 596.135222][ T30] audit: type=1326 audit(1749430299.333:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 596.189459][ T30] audit: type=1326 audit(1749430299.333:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 597.388264][ T8754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.430242][ T8754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 600.795318][ T8754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.812260][ T8754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 600.858550][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'. [ 600.980272][T11164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 601.288676][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 601.288715][ T30] audit: type=1326 audit(1749430305.923:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 601.838231][ T8754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.909193][ T30] audit: type=1326 audit(1749430305.923:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 601.937594][ T30] audit: type=1326 audit(1749430305.933:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 601.939054][ T8754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 601.964232][ T30] audit: type=1326 audit(1749430305.933:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 602.077016][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 602.085982][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 602.160457][ T30] audit: type=1326 audit(1749430305.933:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 602.998699][ T30] audit: type=1326 audit(1749430305.933:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 603.148741][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 603.745560][T10924] hsr_slave_0: entered promiscuous mode [ 603.753896][T10924] hsr_slave_1: entered promiscuous mode [ 603.765185][T10924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.779048][ T30] audit: type=1326 audit(1749430305.933:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 603.820305][ T30] audit: type=1326 audit(1749430305.943:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 603.849979][T10924] Cannot create hsr debugfs directory [ 604.007713][ T30] audit: type=1326 audit(1749430305.943:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 604.134446][ T30] audit: type=1326 audit(1749430305.943:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11171 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 605.435318][T11199] ptrace attach of "./syz-executor exec"[8078] was attempted by "./syz-executor exec"[11199] [ 605.542055][ T8754] bridge_slave_1: left allmulticast mode [ 605.547873][ T8754] bridge_slave_1: left promiscuous mode [ 606.141223][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.282299][ T8754] bridge_slave_0: left allmulticast mode [ 606.288116][ T8754] bridge_slave_0: left promiscuous mode [ 606.308558][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.446750][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 606.446771][ T30] audit: type=1326 audit(1749430311.233:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 607.427384][ T30] audit: type=1326 audit(1749430311.233:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 607.458430][ T30] audit: type=1326 audit(1749430311.243:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 608.431322][ T30] audit: type=1326 audit(1749430311.243:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 608.453096][ T30] audit: type=1326 audit(1749430311.243:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 608.477622][ T30] audit: type=1326 audit(1749430311.243:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 608.696316][ T30] audit: type=1326 audit(1749430311.243:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 608.953084][ T30] audit: type=1326 audit(1749430311.243:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 608.976318][ T30] audit: type=1326 audit(1749430311.243:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 608.998621][ T30] audit: type=1326 audit(1749430311.243:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11202 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 610.032908][T11226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1181'. [ 611.603350][T11239] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[11239] [ 612.337712][ T8754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.358910][ T8754] bond_slave_0: left allmulticast mode [ 612.379278][ T8754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.397611][ T8754] bond_slave_1: left allmulticast mode [ 612.404891][ T8754] bond0 (unregistering): Released all slaves [ 612.503560][ T8754] tipc: Left network mode [ 613.052039][T11250] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.613249][T10924] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.405835][T11278] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.528664][T11290] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 616.535239][T11290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 616.595958][T10924] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 616.605654][T11290] vhci_hcd vhci_hcd.0: Device attached [ 616.635269][T11292] vhci_hcd: connection closed [ 616.636536][ T49] vhci_hcd: stop threads [ 616.659975][ T49] vhci_hcd: release socket [ 616.675433][ T49] vhci_hcd: disconnect device [ 616.676403][T10924] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 616.720610][T11278] Falling back ldisc for ttyprintk. [ 616.855941][ T8754] hsr_slave_0: left promiscuous mode [ 616.891498][ T8754] hsr_slave_1: left promiscuous mode [ 616.897711][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.915645][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.971550][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.766966][ T8754] veth1_macvtap: left promiscuous mode [ 618.784147][ T8754] veth0_macvtap: left promiscuous mode [ 618.798666][ T8754] veth1_vlan: left promiscuous mode [ 618.810808][ T8754] veth0_vlan: left promiscuous mode [ 620.820271][T11334] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.997436][ T8754] team0 (unregistering): Port device team_slave_1 removed [ 621.007951][T11325] Falling back ldisc for ttyprintk. [ 621.086506][ T8754] team0 (unregistering): Port device team_slave_0 removed [ 623.521378][T10924] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 623.587713][ T978] lo speed is unknown, defaulting to 1000 [ 623.630208][ T978] infiniband syz0: ib_query_port failed (-19) [ 623.690075][T11342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 623.939192][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.955255][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 624.383088][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.389710][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.132917][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 625.132937][ T30] audit: type=1326 audit(1749430329.133:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 625.387848][ T30] audit: type=1326 audit(1749430329.133:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 625.478846][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.498443][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.669262][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 625.714873][ T30] audit: type=1326 audit(1749430329.133:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 625.748257][ T30] audit: type=1326 audit(1749430329.133:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 625.919565][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 626.670087][ T30] audit: type=1326 audit(1749430329.133:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 626.851124][ T30] audit: type=1326 audit(1749430329.133:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 627.420312][ T30] audit: type=1326 audit(1749430329.133:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 627.718545][ T30] audit: type=1326 audit(1749430329.133:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 627.769030][ T51] Bluetooth: hci3: command tx timeout [ 627.858570][ T30] audit: type=1326 audit(1749430329.133:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 627.928363][ T30] audit: type=1326 audit(1749430329.133:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.5.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 628.942680][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1215'. [ 629.819104][ T51] Bluetooth: hci3: command tx timeout [ 629.998620][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 630.699410][T11347] chnl_net:caif_netlink_parms(): no params data found [ 630.875384][ T8754] IPVS: stop unused estimator thread 0... [ 631.389235][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 631.389288][ T30] audit: type=1326 audit(1749430336.073:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 632.069053][ T51] Bluetooth: hci3: command tx timeout [ 632.225544][ T30] audit: type=1326 audit(1749430336.073:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 632.252960][ T30] audit: type=1326 audit(1749430336.073:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 632.314470][ T30] audit: type=1326 audit(1749430336.073:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 632.411275][ T30] audit: type=1326 audit(1749430336.073:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 633.395716][ T30] audit: type=1326 audit(1749430336.083:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 633.776615][ T30] audit: type=1326 audit(1749430336.083:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 633.911616][ T30] audit: type=1326 audit(1749430336.083:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 633.943242][ T30] audit: type=1326 audit(1749430336.083:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 633.962753][T11347] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.168501][ T51] Bluetooth: hci3: command tx timeout [ 634.413960][ T30] audit: type=1326 audit(1749430336.083:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11425 comm="syz.5.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 634.458844][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.629361][T11347] bridge_slave_0: entered allmulticast mode [ 634.756744][T11347] bridge_slave_0: entered promiscuous mode [ 636.732810][T11347] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.745231][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.754768][T11347] bridge_slave_1: entered allmulticast mode [ 636.763346][T11347] bridge_slave_1: entered promiscuous mode [ 639.082959][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 639.811459][T11505] tty tty4: ldisc open failed (-12), clearing slot 3 [ 640.383468][T11514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1232'. [ 640.988536][T11516] 9pnet_virtio: no channels available for device syz [ 641.996857][T11347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.013548][T11347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.299273][T11529] 9pnet_virtio: no channels available for device syz [ 643.965957][T11347] team0: Port device team_slave_0 added [ 644.191298][T11347] team0: Port device team_slave_1 added [ 645.953500][T11347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.963113][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.993777][T11347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.366486][T11347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.374430][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.400389][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.472337][T11347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.677567][T11560] mkiss: ax0: crc mode is auto. [ 647.695597][T11347] hsr_slave_0: entered promiscuous mode [ 647.715828][T11347] hsr_slave_1: entered promiscuous mode [ 647.735024][T11570] ptrace attach of "./syz-executor exec"[9661] was attempted by "./syz-executor exec"[11570] [ 647.984111][T11347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.048410][T11347] Cannot create hsr debugfs directory [ 651.519231][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 651.519252][ T30] audit: type=1326 audit(1749430356.323:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 652.566936][ T30] audit: type=1326 audit(1749430356.323:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 653.077350][ T30] audit: type=1326 audit(1749430356.623:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 653.099093][ T30] audit: type=1326 audit(1749430356.623:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 653.122023][ T30] audit: type=1326 audit(1749430356.623:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 653.150843][ T30] audit: type=1326 audit(1749430356.743:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 653.174228][ T30] audit: type=1326 audit(1749430356.743:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 653.196341][ T30] audit: type=1326 audit(1749430356.743:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 653.271953][T11597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 653.278077][T11597] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 653.296120][ T30] audit: type=1326 audit(1749430356.903:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.0.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 653.532743][T11597] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 653.942003][ T30] audit: type=1326 audit(1749430358.583:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11602 comm="syz.6.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19858e929 code=0x7ffc0000 [ 654.500997][ T6421] bridge_slave_1: left allmulticast mode [ 654.512423][ T6421] bridge_slave_1: left promiscuous mode [ 654.550102][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.616237][ T6421] bridge_slave_0: left allmulticast mode [ 655.388667][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 655.420838][ T6421] bridge_slave_0: left promiscuous mode [ 655.732556][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.994520][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 658.273341][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.317438][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.525321][ T6421] bond0 (unregistering): Released all slaves [ 659.135241][T11644] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1255'. [ 660.058339][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 660.381392][T11653] 9pnet_virtio: no channels available for device syz [ 660.557737][ T6421] hsr_slave_0: left promiscuous mode [ 660.786647][ T6421] hsr_slave_1: left promiscuous mode [ 660.805456][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.880807][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.524021][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 662.561134][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 662.798592][T11666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 664.075023][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1263'. [ 664.906458][T11692] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1260'. [ 664.979861][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 665.662531][T11682] 9pnet_virtio: no channels available for device syz [ 668.192840][T11711] mkiss: ax0: crc mode is auto. [ 668.732416][T11728] ptrace attach of "./syz-executor exec"[8078] was attempted by "./syz-executor exec"[11728] [ 670.185261][T11738] 9pnet_virtio: no channels available for device syz [ 672.078163][T11347] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 672.957448][T11347] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 674.113500][T11347] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 674.430350][T11347] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 676.339696][T11347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.414832][T11778] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.451119][T11347] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.301720][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.308957][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.370539][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.377781][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.458354][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 678.599033][T11789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 678.940538][T11347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.785914][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 679.785938][ T30] audit: type=1326 audit(1749430383.823:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 679.867912][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 679.905070][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 680.211364][ T30] audit: type=1326 audit(1749430383.833:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 680.239566][ T30] audit: type=1326 audit(1749430383.833:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 680.471621][ T30] audit: type=1326 audit(1749430383.843:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11794 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 680.765545][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 681.309068][T11829] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 683.338344][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 683.851079][T11842] 9pnet_virtio: no channels available for device syz [ 685.419853][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 685.925958][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.932733][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.427028][T11868] 9pnet_virtio: no channels available for device syz [ 686.448884][T11868] batadv_slave_1: entered promiscuous mode [ 687.941161][T11878] tty tty4: ldisc open failed (-12), clearing slot 3 [ 688.404159][T11884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.665494][T11899] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[11899] [ 690.821492][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 690.838776][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 690.858504][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 690.874632][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 690.895661][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 692.171709][T11868] batadv_slave_1: left promiscuous mode [ 692.286153][T11916] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[11916] [ 693.189579][ T51] Bluetooth: hci1: command tx timeout [ 694.744243][T11920] 9pnet_virtio: no channels available for device syz [ 695.288510][ T51] Bluetooth: hci1: command tx timeout [ 695.314726][T11920] batadv_slave_1: entered promiscuous mode [ 696.278295][T11948] tty tty4: ldisc open failed (-12), clearing slot 3 [ 696.531859][T11952] 9pnet_virtio: no channels available for device syz [ 697.332922][T11918] batadv_slave_1: left promiscuous mode [ 697.338461][ T51] Bluetooth: hci1: command tx timeout [ 698.138538][T11960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 698.144766][T11960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 698.693947][T11960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 699.916888][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 701.213443][T11996] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[11996] [ 702.068564][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 702.224504][T11902] chnl_net:caif_netlink_parms(): no params data found [ 703.169759][T12005] 9pnet_virtio: no channels available for device syz [ 704.142183][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 704.613112][T12007] mkiss: ax0: crc mode is auto. [ 706.651321][T12033] 9pnet_virtio: no channels available for device syz [ 707.614697][ T30] audit: type=1326 audit(1749430411.713:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.614868][ T30] audit: type=1326 audit(1749430411.723:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.615003][ T30] audit: type=1326 audit(1749430411.723:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.615132][ T30] audit: type=1326 audit(1749430411.723:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.615252][ T30] audit: type=1326 audit(1749430411.723:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.615373][ T30] audit: type=1326 audit(1749430411.723:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.615495][ T30] audit: type=1326 audit(1749430411.733:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.615615][ T30] audit: type=1326 audit(1749430411.733:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.615735][ T30] audit: type=1326 audit(1749430411.733:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.615863][ T30] audit: type=1326 audit(1749430411.733:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12011 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7f58e929 code=0x7ffc0000 [ 707.880541][T11902] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.880662][T11902] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.881143][T11902] bridge_slave_0: entered allmulticast mode [ 707.884302][T11902] bridge_slave_0: entered promiscuous mode [ 707.921433][T11902] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.922488][T11902] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.924265][T11902] bridge_slave_1: entered allmulticast mode [ 707.945618][T11902] bridge_slave_1: entered promiscuous mode [ 708.956156][T12031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 709.501058][T11902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.629552][T12046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1319'. [ 710.253060][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 710.256260][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 710.746779][T11902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.018898][ T8755] bridge_slave_1: left allmulticast mode [ 711.029747][ T8755] bridge_slave_1: left promiscuous mode [ 711.108912][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.116851][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 711.215347][ T8755] bridge_slave_0: left allmulticast mode [ 711.233030][ T8755] bridge_slave_0: left promiscuous mode [ 711.255200][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.318531][T12061] 9pnet_virtio: no channels available for device syz [ 712.380954][T12056] Falling back ldisc for ttyprintk. [ 712.593925][T12068] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1323'. [ 713.612646][T12074] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1325'. [ 714.142345][ T8755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.154248][ T8755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.164687][ T8755] bond0 (unregistering): Released all slaves [ 714.565219][T11902] team0: Port device team_slave_0 added [ 714.592447][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 714.865396][ T8755] hsr_slave_0: left promiscuous mode [ 715.879834][ T8755] hsr_slave_1: left promiscuous mode [ 715.886240][ T8755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.529497][ T8755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.316790][T12091] 9pnet_virtio: no channels available for device syz [ 717.781043][T12102] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1331'. [ 718.409652][T12106] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[12106] [ 719.189842][ T8755] team0 (unregistering): Port device team_slave_1 removed [ 719.236119][T12109] 9pnet_virtio: no channels available for device syz [ 719.286327][ T8755] team0 (unregistering): Port device team_slave_0 removed [ 720.710437][T11902] team0: Port device team_slave_1 added [ 721.259515][T11902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.266540][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.292526][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.180287][T11902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.193580][T11902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.200978][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.270122][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'. [ 722.305191][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 722.415056][T11902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.012021][T12141] 9pnet_virtio: no channels available for device syz [ 725.250313][T11902] hsr_slave_0: entered promiscuous mode [ 725.257227][T11902] hsr_slave_1: entered promiscuous mode [ 725.343720][T12158] 9pnet_virtio: no channels available for device syz [ 726.325566][T12146] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 726.386433][T11902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.386499][T11902] Cannot create hsr debugfs directory [ 726.618451][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 732.987536][T12191] 9pnet_virtio: no channels available for device syz [ 734.893852][T12194] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 735.596462][T12208] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[12208] [ 737.008603][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 737.228936][T12220] mkiss: ax0: crc mode is auto. [ 739.974630][T11902] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 740.508151][T12250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 740.521544][T11902] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 740.730818][T11902] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 740.778439][T12257] ptrace attach of "./syz-executor exec"[8078] was attempted by "./syz-executor exec"[12257] [ 740.782891][T11902] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 742.774740][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 743.633156][T12271] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 744.383604][T12288] 9pnet_virtio: no channels available for device syz [ 744.407478][T11902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.469761][T12290] 9pnet_virtio: no channels available for device syz [ 744.792075][T12279] mkiss: ax0: crc mode is auto. [ 745.619323][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 745.696492][T11902] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.955864][T12307] 9pnet_virtio: no channels available for device syz [ 747.264806][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.264939][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.570644][T12343] 9pnet_virtio: no channels available for device syz [ 756.066770][T12240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 756.095098][T12240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 756.103430][T12240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 756.113959][T12240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 756.123143][T12240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 758.219650][T12240] Bluetooth: hci1: command tx timeout [ 760.358475][T12240] Bluetooth: hci1: command 0x041b tx timeout [ 761.262089][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 761.262131][ T30] audit: type=1326 audit(1749430466.053:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12414 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 761.571755][ T30] audit: type=1326 audit(1749430466.053:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12414 comm="syz.4.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 762.431266][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 764.873315][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 764.961267][T12435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 764.968923][T12435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 765.369242][T12435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 765.498566][ T6031] bridge_slave_1: left allmulticast mode [ 765.504288][ T6031] bridge_slave_1: left promiscuous mode [ 765.628613][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.781173][ T6031] bridge_slave_0: left allmulticast mode [ 765.908810][ T6031] bridge_slave_0: left promiscuous mode [ 766.008039][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.078272][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 766.088301][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 766.316210][T12464] 9pnet_virtio: no channels available for device syz [ 767.739660][T12240] Bluetooth: hci1: command 0x041b tx timeout [ 768.627930][T12482] 9pnet_virtio: no channels available for device syz [ 769.818437][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 769.944913][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.960876][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.974303][ T6031] bond0 (unregistering): Released all slaves [ 770.186784][T12350] chnl_net:caif_netlink_parms(): no params data found [ 772.258616][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 772.431808][ T6031] hsr_slave_0: left promiscuous mode [ 772.601150][ T6031] hsr_slave_1: left promiscuous mode [ 772.639442][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.664157][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.238280][ T30] audit: type=1326 audit(1749430479.503:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.294039][ T30] audit: type=1326 audit(1749430479.503:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.355532][T12540] 9pnet_virtio: no channels available for device syz [ 775.382156][ T30] audit: type=1326 audit(1749430479.513:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.472962][ T30] audit: type=1326 audit(1749430479.513:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.573458][ T30] audit: type=1326 audit(1749430479.513:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.896541][ T30] audit: type=1326 audit(1749430479.513:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.896845][ T30] audit: type=1326 audit(1749430479.513:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.897189][ T30] audit: type=1326 audit(1749430479.513:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.897419][ T30] audit: type=1326 audit(1749430479.523:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 775.897640][ T30] audit: type=1326 audit(1749430479.523:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 777.359577][T12550] tty tty4: ldisc open failed (-12), clearing slot 3 [ 778.662931][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 778.991929][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 779.580254][T12558] Falling back ldisc for ttyprintk. [ 783.673515][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.707974][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.715740][T12350] bridge_slave_0: entered allmulticast mode [ 783.730722][T12350] bridge_slave_0: entered promiscuous mode [ 783.785102][T12594] 9pnet_virtio: no channels available for device syz [ 784.163749][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.164811][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.176910][T12350] bridge_slave_1: entered allmulticast mode [ 784.264999][T12350] bridge_slave_1: entered promiscuous mode [ 785.731500][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.569355][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.759565][T12618] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 786.766163][T12618] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 786.801403][T12618] vhci_hcd vhci_hcd.0: Device attached [ 787.186756][T12628] ptrace attach of "./syz-executor exec"[9661] was attempted by "./syz-executor exec"[12628] [ 787.218735][ T43] vhci_hcd: vhci_device speed not set [ 787.366748][ T43] usb 43-1: new full-speed USB device number 6 using vhci_hcd [ 787.496488][T12621] vhci_hcd: connection closed [ 787.498590][ T6172] vhci_hcd: stop threads [ 787.638297][ T6172] vhci_hcd: release socket [ 787.642887][ T6172] vhci_hcd: disconnect device [ 787.750335][T12631] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 787.756923][T12631] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 787.778622][T12350] team0: Port device team_slave_0 added [ 787.803293][T12631] vhci_hcd vhci_hcd.0: Device attached [ 787.826443][T12350] team0: Port device team_slave_1 added [ 787.842698][T12632] vhci_hcd: connection closed [ 787.848108][ T8666] vhci_hcd: stop threads [ 787.898748][ T8666] vhci_hcd: release socket [ 787.916316][ T8666] vhci_hcd: disconnect device [ 788.173575][T12639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1410'. [ 788.187133][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.211688][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.417305][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 788.417351][ T30] audit: type=1326 audit(1749430493.103:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 788.726075][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.052460][ T30] audit: type=1326 audit(1749430493.103:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 789.079560][ T30] audit: type=1326 audit(1749430493.103:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 789.102162][ T30] audit: type=1326 audit(1749430493.103:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 789.125784][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.133137][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.202145][ T30] audit: type=1326 audit(1749430493.113:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 789.225170][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.250521][ T30] audit: type=1326 audit(1749430493.113:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 789.331768][T12655] 9pnet_virtio: no channels available for device syz [ 789.806932][ T30] audit: type=1326 audit(1749430493.113:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 789.807036][ T30] audit: type=1326 audit(1749430493.113:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 789.807070][ T30] audit: type=1326 audit(1749430493.113:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 789.807106][ T30] audit: type=1326 audit(1749430493.113:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 790.957871][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.196141][T12659] 9pnet_virtio: no channels available for device syz [ 792.541229][T12659] batadv_slave_1: entered promiscuous mode [ 792.857860][ T43] vhci_hcd: vhci_device speed not set [ 793.234209][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1417'. [ 793.234283][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1417'. [ 793.661447][T12350] hsr_slave_0: entered promiscuous mode [ 793.662490][T12350] hsr_slave_1: entered promiscuous mode [ 793.663262][T12350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.663286][T12350] Cannot create hsr debugfs directory [ 793.723913][T12667] batadv_slave_1: left promiscuous mode [ 794.346158][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 794.346198][ T30] audit: type=1326 audit(1749430499.093:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 794.536479][ T30] audit: type=1326 audit(1749430499.093:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 794.749906][ T30] audit: type=1326 audit(1749430499.103:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 794.996537][ T30] audit: type=1326 audit(1749430499.103:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 795.018616][ T30] audit: type=1326 audit(1749430499.103:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 795.048367][ T30] audit: type=1326 audit(1749430499.103:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 795.082513][ T30] audit: type=1326 audit(1749430499.103:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 795.146989][ T30] audit: type=1326 audit(1749430499.103:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 796.107785][ T30] audit: type=1326 audit(1749430499.113:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 796.206675][ T30] audit: type=1326 audit(1749430499.113:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713d8e929 code=0x7ffc0000 [ 796.518916][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1420'. [ 796.528946][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1420'. [ 798.031213][T12702] 9pnet_virtio: no channels available for device syz [ 799.304080][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 799.313314][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1425'. [ 802.756577][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 802.756600][ T30] audit: type=1326 audit(1749430506.793:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 802.825706][T12734] 9pnet_virtio: no channels available for device syz [ 803.017966][ T30] audit: type=1326 audit(1749430506.793:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 803.040872][ T30] audit: type=1326 audit(1749430506.793:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 803.068001][ T30] audit: type=1326 audit(1749430506.793:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 803.090445][ T30] audit: type=1326 audit(1749430506.793:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 805.170919][ T30] audit: type=1326 audit(1749430506.793:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 805.170987][ T30] audit: type=1326 audit(1749430506.803:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 805.171032][ T30] audit: type=1326 audit(1749430506.803:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 805.171077][ T30] audit: type=1326 audit(1749430506.803:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 805.171120][ T30] audit: type=1326 audit(1749430506.803:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12720 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 805.364585][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.681476][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.590319][T12772] 9pnet_virtio: no channels available for device syz [ 808.702688][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.702756][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.994577][T12787] 9pnet_virtio: no channels available for device syz [ 810.651322][T12795] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[12795] [ 811.321504][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 811.321528][ T30] audit: type=1326 audit(1749430515.563:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 811.585966][ T30] audit: type=1326 audit(1749430515.563:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 811.768646][ T30] audit: type=1326 audit(1749430515.563:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 811.870272][ T30] audit: type=1326 audit(1749430515.573:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 812.156531][ T30] audit: type=1326 audit(1749430515.573:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 812.178961][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 812.187876][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 812.889497][ T30] audit: type=1326 audit(1749430515.573:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 813.093418][ T30] audit: type=1326 audit(1749430515.573:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 813.115128][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.605651][ T30] audit: type=1326 audit(1749430515.573:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 813.794925][ T30] audit: type=1326 audit(1749430515.573:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 813.822711][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 813.843225][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 813.886030][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 813.907086][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 813.924730][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 814.012306][T12824] batadv_slave_1: entered promiscuous mode [ 814.033502][ T30] audit: type=1326 audit(1749430515.583:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12791 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 814.339521][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.978409][T12240] Bluetooth: hci1: command tx timeout [ 816.080451][T12822] batadv_slave_1: left promiscuous mode [ 816.126504][T12830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 816.133549][T12830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 816.165783][T12830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 818.639779][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 818.639830][ T30] audit: type=1326 audit(1749430523.353:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 818.729614][T12240] Bluetooth: hci1: command tx timeout [ 819.065366][ T30] audit: type=1326 audit(1749430523.353:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 819.087114][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.345574][ T30] audit: type=1326 audit(1749430523.353:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 819.368450][ T30] audit: type=1326 audit(1749430523.353:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 819.562726][ T30] audit: type=1326 audit(1749430523.353:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 819.635986][ T30] audit: type=1326 audit(1749430523.353:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 819.675020][ T30] audit: type=1326 audit(1749430523.353:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 819.761975][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1452'. [ 819.776395][ T30] audit: type=1326 audit(1749430523.363:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 819.988628][ T30] audit: type=1326 audit(1749430523.363:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 820.010918][ T30] audit: type=1326 audit(1749430523.363:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 820.312756][T12884] 9pnet_virtio: no channels available for device syz [ 820.788438][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 821.242466][ T49] bridge_slave_1: left allmulticast mode [ 821.250203][ T49] bridge_slave_1: left promiscuous mode [ 821.256107][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.302775][ T49] bridge_slave_0: left allmulticast mode [ 821.312400][ T49] bridge_slave_0: left promiscuous mode [ 821.331669][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.559295][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.600831][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.632575][ T49] bond0 (unregistering): Released all slaves [ 822.020671][ T49] hsr_slave_0: left promiscuous mode [ 822.038737][T12898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.080550][ T49] hsr_slave_1: left promiscuous mode [ 823.086931][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.330705][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.908961][T12240] Bluetooth: hci1: command 0x0419 tx timeout [ 824.695381][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 824.695400][ T30] audit: type=1326 audit(1749430529.493:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 824.823497][ T30] audit: type=1326 audit(1749430529.493:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 824.845404][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.925318][ T30] audit: type=1326 audit(1749430529.493:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 824.989155][ T49] team0 (unregistering): Port device team_slave_1 removed [ 825.008313][ T30] audit: type=1326 audit(1749430529.493:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 825.082023][ T30] audit: type=1326 audit(1749430529.493:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 825.109107][ T30] audit: type=1326 audit(1749430529.523:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 825.136765][ T30] audit: type=1326 audit(1749430529.523:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 825.183560][ T30] audit: type=1326 audit(1749430529.523:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 825.240088][ T49] team0 (unregistering): Port device team_slave_0 removed [ 825.306904][ T30] audit: type=1326 audit(1749430529.543:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 825.367848][ T30] audit: type=1326 audit(1749430529.543:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05b8e929 code=0x7ffc0000 [ 825.984903][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 826.034249][T12820] chnl_net:caif_netlink_parms(): no params data found [ 826.220548][T12947] 9pnet_virtio: no channels available for device syz [ 828.126181][T12240] Bluetooth: hci1: command 0x0419 tx timeout [ 829.543742][T12965] 9pnet_virtio: no channels available for device syz [ 830.138307][T12240] Bluetooth: hci1: command 0x0419 tx timeout [ 830.200367][T12956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 831.053944][T12978] 9pnet_virtio: no channels available for device syz [ 832.368534][T12240] Bluetooth: hci1: command 0x0419 tx timeout [ 832.807431][T12820] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.809730][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.810959][T12820] bridge_slave_0: entered allmulticast mode [ 832.869746][T12820] bridge_slave_0: entered promiscuous mode [ 833.519226][T12820] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.519343][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.519535][T12820] bridge_slave_1: entered allmulticast mode [ 833.521147][T12820] bridge_slave_1: entered promiscuous mode [ 834.378606][T12240] Bluetooth: hci1: command 0x0419 tx timeout [ 834.888948][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1469'. [ 835.153132][T12820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.194342][T12820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.279677][T13011] 9pnet_virtio: no channels available for device syz [ 835.823729][ T51] non-paged memory [ 835.823806][ T51] list_del corruption, ffff888029442700->next is LIST_POISON1 (dead000000000100) [ 835.824530][ T51] ------------[ cut here ]------------ [ 835.824540][ T51] kernel BUG at lib/list_debug.c:58! [ 835.824617][ T51] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 835.824643][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 835.824665][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 835.824679][ T51] Workqueue: hci1 hci_conn_timeout [ 835.824715][ T51] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 835.824742][ T51] Code: c0 b2 e1 8b 48 89 de e8 90 3f 67 fc 90 0f 0b 4c 89 e7 e8 a5 c1 40 fd 48 c7 c7 20 b3 e1 8b 48 89 de 4c 89 e2 e8 73 3f 67 fc 90 <0f> 0b 4c 89 e7 e8 88 c1 40 fd 48 c7 c7 80 b3 e1 8b 48 89 de 4c 89 [ 835.824760][ T51] RSP: 0018:ffffc90000bc7980 EFLAGS: 00010246 [ 835.824776][ T51] RAX: 000000000000004e RBX: ffff888029442700 RCX: 6af3e7198ae2a400 [ 835.824789][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 835.824802][ T51] RBP: ffffffff8a6e04d0 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 835.824817][ T51] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dead000000000100 [ 835.824832][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 835.824854][ T51] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 835.824871][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.824901][ T51] CR2: 00007f011063f6b5 CR3: 0000000076222000 CR4: 00000000003526f0 [ 835.824920][ T51] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.824933][ T51] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.824946][ T51] Call Trace: [ 835.824954][ T51] [ 835.824965][ T51] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 835.825003][ T51] hci_cancel_connect_sync+0xc8/0x120 [ 835.825031][ T51] hci_abort_conn+0x191/0x330 [ 835.825053][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 835.825085][ T51] process_scheduled_works+0xade/0x17b0 [ 835.825127][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 835.825160][ T51] worker_thread+0x8a0/0xda0 [ 835.825202][ T51] kthread+0x70e/0x8a0 [ 835.825225][ T51] ? __pfx_worker_thread+0x10/0x10 [ 835.825254][ T51] ? __pfx_kthread+0x10/0x10 [ 835.825276][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.825304][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.825341][ T51] ? __pfx_kthread+0x10/0x10 [ 835.825362][ T51] ret_from_fork+0x3fc/0x770 [ 835.825390][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 835.825420][ T51] ? __switch_to_asm+0x39/0x70 [ 835.825440][ T51] ? __switch_to_asm+0x33/0x70 [ 835.825459][ T51] ? __pfx_kthread+0x10/0x10 [ 835.825479][ T51] ret_from_fork_asm+0x1a/0x30 [ 835.825501][ T51] [ 835.825513][ T51] Modules linked in: [ 835.825538][ T51] ---[ end trace 0000000000000000 ]--- [ 835.825552][ T51] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 835.825601][ T51] Code: c0 b2 e1 8b 48 89 de e8 90 3f 67 fc 90 0f 0b 4c 89 e7 e8 a5 c1 40 fd 48 c7 c7 20 b3 e1 8b 48 89 de 4c 89 e2 e8 73 3f 67 fc 90 <0f> 0b 4c 89 e7 e8 88 c1 40 fd 48 c7 c7 80 b3 e1 8b 48 89 de 4c 89 [ 835.825623][ T51] RSP: 0018:ffffc90000bc7980 EFLAGS: 00010246 [ 835.825641][ T51] RAX: 000000000000004e RBX: ffff888029442700 RCX: 6af3e7198ae2a400 [ 835.825656][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 835.825669][ T51] RBP: ffffffff8a6e04d0 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 835.825684][ T51] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dead000000000100 [ 835.825700][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 835.825715][ T51] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 835.825731][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.825746][ T51] CR2: 00007f011063f6b5 CR3: 0000000076222000 CR4: 00000000003526f0 [ 835.825764][ T51] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.825776][ T51] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.825796][ T51] Kernel panic - not syncing: Fatal exception [ 835.826119][ T51] Kernel Offset: disabled