last executing test programs: 17.911221253s ago: executing program 2 (id=134): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 14.516159936s ago: executing program 2 (id=142): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r3, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x1fff}) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0x40) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$ax25(r6, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 12.912944626s ago: executing program 1 (id=147): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff000000000100"/388], 0x310) pipe2(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 11.852430982s ago: executing program 1 (id=149): openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) 11.62307259s ago: executing program 2 (id=150): syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="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", 0xc74, 0x4000090, &(0x7f0000001080)={0x11, 0xd, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) 11.143305509s ago: executing program 1 (id=152): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 9.322050116s ago: executing program 3 (id=155): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d178", 0x1a}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 9.27693858s ago: executing program 0 (id=156): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x4ec, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x33e, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x100, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}, @NL80211_ATTR_FRAME_MATCH={0x6e, 0x5b, "2537861a416172e1b3a4641f689e7128268d1c658d415db2a4a062885a2bced47cb6720eacc6e377961573f48e503a971c116892a4defcf1fdcda062dfbf3e7aabe23f1cbfdad14c8e50ab42677d34e5d1de13e5670d7a948fa03547a566b48a5b0b529334f38f00989a"}]}, 0x4ec}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d17820cf5369b94614ee323f80a84d9ceb5cbf18929e4aa5ba5910", 0x33}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 9.000486833s ago: executing program 2 (id=157): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff000000000100"/388], 0x310) pipe2(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 7.952189647s ago: executing program 1 (id=158): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r3, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x1fff}) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0x40) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$ax25(r6, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 7.91137806s ago: executing program 0 (id=159): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, 0x0, &(0x7f00000001c0)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.910679711s ago: executing program 3 (id=160): openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) 7.862326134s ago: executing program 2 (id=161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20200, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000180)) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4006, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) pipe2$9p(&(0x7f0000000240), 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) 7.491796804s ago: executing program 3 (id=162): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, 0x0, 0x20040880) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) socket$kcm(0xa, 0x2, 0x73) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff000000000100"/388], 0x310) pipe2(0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 5.065263231s ago: executing program 0 (id=163): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 5.049431101s ago: executing program 2 (id=164): socket$inet(0x2, 0x3, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x894, 0x3a7b, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00@\x00'/14], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x75bf4e42efb6f368) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00', 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(0x0, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x103) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 4.090707219s ago: executing program 3 (id=165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x498, 0x0, &(0x7f0000000340), &(0x7f0000000040)) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) open$dir(0x0, 0x200200, 0x15) 3.857085888s ago: executing program 0 (id=166): syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="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", 0xc74, 0x4000090, &(0x7f0000001080)={0x11, 0xd, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) 2.999959187s ago: executing program 3 (id=167): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.511294578s ago: executing program 0 (id=168): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x4ec, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x33e, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x100, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}, @NL80211_ATTR_FRAME_MATCH={0x6e, 0x5b, "2537861a416172e1b3a4641f689e7128268d1c658d415db2a4a062885a2bced47cb6720eacc6e377961573f48e503a971c116892a4defcf1fdcda062dfbf3e7aabe23f1cbfdad14c8e50ab42677d34e5d1de13e5670d7a948fa03547a566b48a5b0b529334f38f00989a"}]}, 0x4ec}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d17820cf5369b94614ee323f80a84d9ceb5cbf18929e4aa5ba5910", 0x33}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.35332529s ago: executing program 1 (id=169): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff000000000100"/388], 0x310) pipe2(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 344.795042ms ago: executing program 1 (id=170): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d17820cf5369b94614ee323f80a84d", 0x27}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 271.556878ms ago: executing program 3 (id=171): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, 0x0, &(0x7f00000001c0)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 0 (id=172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20200, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000180)) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x2, 0x80805, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 73.200129][ T5778] cgroup: Unknown subsys name 'net' [ 73.333950][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.948336][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.537164][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.547351][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.556826][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.576748][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.584405][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.607459][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.626412][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.626954][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.636531][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.645982][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.655197][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.665078][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.672782][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.680754][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.680932][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.690091][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.695802][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.703490][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.709363][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.716344][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.730828][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.746824][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.754560][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.762111][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.233735][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 77.395071][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 77.423663][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.431536][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.439439][ T5787] bridge_slave_0: entered allmulticast mode [ 77.446872][ T5787] bridge_slave_0: entered promiscuous mode [ 77.459789][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 77.496839][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.503994][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.511227][ T5787] bridge_slave_1: entered allmulticast mode [ 77.518463][ T5787] bridge_slave_1: entered promiscuous mode [ 77.531420][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 77.620815][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.633888][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.720331][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.727859][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.735153][ T5790] bridge_slave_0: entered allmulticast mode [ 77.742531][ T5790] bridge_slave_0: entered promiscuous mode [ 77.753352][ T5787] team0: Port device team_slave_0 added [ 77.763652][ T5787] team0: Port device team_slave_1 added [ 77.802902][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.810331][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.817877][ T5790] bridge_slave_1: entered allmulticast mode [ 77.824809][ T5790] bridge_slave_1: entered promiscuous mode [ 77.854505][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.861745][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.869061][ T5791] bridge_slave_0: entered allmulticast mode [ 77.876101][ T5791] bridge_slave_0: entered promiscuous mode [ 77.911280][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.918319][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.944430][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.956623][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.963760][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.971491][ T5792] bridge_slave_0: entered allmulticast mode [ 77.979065][ T5792] bridge_slave_0: entered promiscuous mode [ 77.986834][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.994037][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.001477][ T5791] bridge_slave_1: entered allmulticast mode [ 78.009179][ T5791] bridge_slave_1: entered promiscuous mode [ 78.026427][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.033401][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.059900][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.071348][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.078847][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.086441][ T5792] bridge_slave_1: entered allmulticast mode [ 78.093600][ T5792] bridge_slave_1: entered promiscuous mode [ 78.139079][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.151947][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.188016][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.200312][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.234638][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.270039][ T5790] team0: Port device team_slave_0 added [ 78.278600][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.323765][ T5790] team0: Port device team_slave_1 added [ 78.355526][ T5791] team0: Port device team_slave_0 added [ 78.365138][ T5791] team0: Port device team_slave_1 added [ 78.376612][ T5787] hsr_slave_0: entered promiscuous mode [ 78.383128][ T5787] hsr_slave_1: entered promiscuous mode [ 78.403249][ T5792] team0: Port device team_slave_0 added [ 78.412249][ T5792] team0: Port device team_slave_1 added [ 78.443900][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.451228][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.477337][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.490846][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.497945][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.524625][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.573953][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.581064][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.607460][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.624624][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.632004][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.658079][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.670705][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.678046][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.704586][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.721819][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.729000][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.755026][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.757260][ T5797] Bluetooth: hci0: command tx timeout [ 78.765683][ T5801] Bluetooth: hci3: command tx timeout [ 78.771987][ T50] Bluetooth: hci1: command tx timeout [ 78.836279][ T5790] hsr_slave_0: entered promiscuous mode [ 78.838310][ T5797] Bluetooth: hci2: command tx timeout [ 78.848527][ T5790] hsr_slave_1: entered promiscuous mode [ 78.854756][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.862691][ T5790] Cannot create hsr debugfs directory [ 78.982612][ T5791] hsr_slave_0: entered promiscuous mode [ 78.990524][ T5791] hsr_slave_1: entered promiscuous mode [ 78.996946][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.004548][ T5791] Cannot create hsr debugfs directory [ 79.025970][ T5792] hsr_slave_0: entered promiscuous mode [ 79.032920][ T5792] hsr_slave_1: entered promiscuous mode [ 79.039268][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.047959][ T5792] Cannot create hsr debugfs directory [ 79.354291][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.366898][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.399451][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.412452][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.496969][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.509389][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.529823][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.560666][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.643904][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.654105][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.678495][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.690005][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.757676][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.778120][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.797540][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.826424][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.838429][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.860711][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.880504][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.887853][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.918897][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.926097][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.049440][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.104152][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.135338][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.164982][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.172186][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.210101][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.227727][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.234979][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.253968][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.266092][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.273275][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.314218][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.345763][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.353120][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.395657][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.402880][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.413611][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.420829][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.480423][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.671359][ T5787] veth0_vlan: entered promiscuous mode [ 80.724522][ T5787] veth1_vlan: entered promiscuous mode [ 80.813998][ T5787] veth0_macvtap: entered promiscuous mode [ 80.839508][ T5797] Bluetooth: hci0: command tx timeout [ 80.844978][ T5797] Bluetooth: hci1: command tx timeout [ 80.846502][ T50] Bluetooth: hci3: command tx timeout [ 80.872537][ T5787] veth1_macvtap: entered promiscuous mode [ 80.919405][ T50] Bluetooth: hci2: command tx timeout [ 80.944576][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.999595][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.033990][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.044239][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.053248][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.062084][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.082947][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.131478][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.215529][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.260676][ T5792] veth0_vlan: entered promiscuous mode [ 81.269613][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.282750][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.348835][ T5790] veth0_vlan: entered promiscuous mode [ 81.357978][ T5792] veth1_vlan: entered promiscuous mode [ 81.392237][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.404861][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.413486][ T5791] veth0_vlan: entered promiscuous mode [ 81.424871][ T5790] veth1_vlan: entered promiscuous mode [ 81.455458][ T5791] veth1_vlan: entered promiscuous mode [ 81.517526][ T5790] veth0_macvtap: entered promiscuous mode [ 81.555290][ T5792] veth0_macvtap: entered promiscuous mode [ 81.572349][ T5790] veth1_macvtap: entered promiscuous mode [ 81.589222][ T5791] veth0_macvtap: entered promiscuous mode [ 81.621619][ T5791] veth1_macvtap: entered promiscuous mode [ 81.643767][ T5792] veth1_macvtap: entered promiscuous mode [ 81.665784][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.678193][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.690824][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.703010][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.714578][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.727904][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.764381][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.782099][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.795480][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.813977][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.832283][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.840304][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.858307][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.874727][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.892961][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.905322][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.923800][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.943183][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.985359][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.000238][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.012523][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.349361][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.717207][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.726780][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.735536][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.744467][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.753261][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.767197][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.793105][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.814061][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.832981][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.843614][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.854414][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.886373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.898052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.906714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.915055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.924726][ T50] Bluetooth: hci3: command tx timeout [ 82.927577][ T5797] Bluetooth: hci1: command tx timeout [ 82.931663][ T50] Bluetooth: hci0: command tx timeout [ 82.956770][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.002241][ T50] Bluetooth: hci2: command tx timeout [ 83.137558][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.197076][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.287106][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.361185][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.409933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.512295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.526375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.535021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.717095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.756442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.899055][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.945592][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.988709][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.006847][ T5889] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.022678][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.125013][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.144683][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.255326][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.284870][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.373878][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.403508][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.465270][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.491179][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.574131][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.586530][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.598395][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.607778][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.996533][ T50] Bluetooth: hci1: command tx timeout [ 84.997731][ T5801] Bluetooth: hci3: command tx timeout [ 85.002137][ T50] Bluetooth: hci0: command tx timeout [ 85.077029][ T50] Bluetooth: hci2: command tx timeout [ 85.095342][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.610878][ T5915] syz.3.8[5915]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.630310][ T5915] loop3: detected capacity change from 0 to 512 [ 86.735676][ T5915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.749960][ T5915] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.955853][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 91.608542][ T5955] loop1: detected capacity change from 0 to 512 [ 91.747750][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 91.848550][ T5955] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.971438][ T965] cfg80211: failed to load regulatory.db [ 92.053922][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 92.381431][ T5967] loop1: detected capacity change from 0 to 512 [ 93.185155][ T5967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 93.234146][ T5967] System zones: 1-12 [ 93.273410][ T5967] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.23: corrupted in-inode xattr: e_value size too large [ 93.366395][ T5967] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.23: couldn't read orphan inode 15 (err -117) [ 93.427141][ T5967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.042467][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.507378][ T5991] UBIFS error (pid: 5991): cannot open "usrquota", error -22 [ 97.070305][ T6001] loop1: detected capacity change from 0 to 512 [ 97.135194][ T6001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 97.156407][ T6001] System zones: 1-12 [ 97.163650][ T6001] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.34: corrupted in-inode xattr: e_value size too large [ 97.301198][ T6001] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.34: couldn't read orphan inode 15 (err -117) [ 97.316544][ T6001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.857542][ T6013] Zero length message leads to an empty skb [ 99.000068][ T2969] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.855531][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.666699][ T6028] UBIFS error (pid: 6028): cannot open "usrquota", error -22 [ 100.996237][ T50] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 100.998934][ T5797] Bluetooth: hci4: command 0xfc11 tx timeout [ 102.890519][ T6049] loop3: detected capacity change from 0 to 512 [ 102.935145][ T6049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 102.945303][ T6049] System zones: 1-12 [ 102.964284][ T6049] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.45: corrupted in-inode xattr: e_value size too large [ 102.993872][ T6049] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.45: couldn't read orphan inode 15 (err -117) [ 103.010271][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.039057][ T6062] UBIFS error (pid: 6062): cannot open "usrquota", error -22 [ 104.682035][ T6069] loop0: detected capacity change from 0 to 40427 [ 104.709202][ T6069] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 104.718079][ T6069] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.728532][ T6069] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 104.743455][ T6069] F2FS-fs (loop0): invalid crc value [ 104.753197][ T6069] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.811876][ T6069] F2FS-fs (loop0): Start checkpoint disabled! [ 104.837095][ T6069] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 104.844257][ T6069] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 105.004781][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.030350][ T2945] Bluetooth: hci4: Frame reassembly failed (-84) [ 108.287206][ T6098] bpq0: entered allmulticast mode [ 109.628864][ T6109] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.046240][ T5797] Bluetooth: hci4: command 0xfc11 tx timeout [ 110.111154][ T50] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 110.407014][ T6112] trusted_key: syz.0.61 sent an empty control message without MSG_MORE. [ 125.689549][ T6216] bpq0: left allmulticast mode [ 126.168753][ T6225] bpq0: entered allmulticast mode [ 132.920819][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.521838][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.712098][ T6266] bpq0: left allmulticast mode [ 134.658169][ T5797] Bluetooth: hci4: sending frame failed (-49) [ 134.665654][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 136.646445][ T6291] bpq0: entered allmulticast mode [ 141.635121][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 141.642501][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.797552][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.169704][ T6413] UBIFS error (pid: 6413): cannot open "usrquota", error -22 [ 153.086284][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.237176][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 154.157847][ T6434] bpq0: left allmulticast mode [ 156.653375][ T6444] UBIFS error (pid: 6444): cannot open "usrquota", error -22 [ 160.085452][ T6461] bpq0: entered allmulticast mode [ 160.836128][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 162.004973][ T6474] bpq0: left allmulticast mode [ 162.130901][ T6466] ================================================================== [ 162.139084][ T6466] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5ba/0x740 [ 162.147098][ T6466] Read of size 1 at addr ffff888030c5c032 by task syz.1.170/6466 [ 162.154929][ T6466] [ 162.157292][ T6466] CPU: 1 PID: 6466 Comm: syz.1.170 Not tainted 6.6.102-syzkaller #0 [ 162.165657][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.175834][ T6466] Call Trace: [ 162.179137][ T6466] [ 162.182096][ T6466] dump_stack_lvl+0x16c/0x230 [ 162.186822][ T6466] ? __lock_acquire+0x7c80/0x7c80 [ 162.191868][ T6466] ? show_regs_print_info+0x20/0x20 [ 162.197112][ T6466] ? load_image+0x3b0/0x3b0 [ 162.201661][ T6466] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 162.207089][ T6466] ? __virt_addr_valid+0x18c/0x540 [ 162.212225][ T6466] ? __virt_addr_valid+0x469/0x540 [ 162.217357][ T6466] print_report+0xac/0x220 [ 162.221839][ T6466] ? rose_transmit_link+0x5ba/0x740 [ 162.227156][ T6466] kasan_report+0x117/0x150 [ 162.231696][ T6466] ? kmem_cache_alloc_node+0x17f/0x330 [ 162.237196][ T6466] ? rose_transmit_link+0x5ba/0x740 [ 162.242447][ T6466] rose_transmit_link+0x5ba/0x740 [ 162.247499][ T6466] ? skb_put+0x11b/0x210 [ 162.251778][ T6466] rose_write_internal+0x11d1/0x1ab0 [ 162.257103][ T6466] ? rose_validate_nr+0x120/0x120 [ 162.262259][ T6466] ? __timer_delete+0x6b/0x290 [ 162.267062][ T6466] ? skb_queue_purge_reason+0x6c/0x1c0 [ 162.272588][ T6466] rose_release+0x24e/0x510 [ 162.277122][ T6466] sock_close+0xbd/0x230 [ 162.281400][ T6466] ? sock_mmap+0xa0/0xa0 [ 162.285668][ T6466] __fput+0x234/0x970 [ 162.289686][ T6466] task_work_run+0x1ce/0x250 [ 162.294301][ T6466] ? task_work_cancel+0x240/0x240 [ 162.299349][ T6466] get_signal+0x1235/0x1400 [ 162.303899][ T6466] ? task_work_add+0x3a3/0x440 [ 162.308699][ T6466] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 162.314122][ T6466] ? wake_bit_function+0x200/0x200 [ 162.319251][ T6466] ? __might_fault+0xaa/0x120 [ 162.323949][ T6466] arch_do_signal_or_restart+0x96/0x780 [ 162.329525][ T6466] ? __sys_connect+0x240/0x420 [ 162.334313][ T6466] ? get_sigframe_size+0x20/0x20 [ 162.339292][ T6466] ? exit_to_user_mode_loop+0x3b/0x110 [ 162.344795][ T6466] exit_to_user_mode_loop+0x70/0x110 [ 162.350221][ T6466] exit_to_user_mode_prepare+0xb1/0x140 [ 162.355813][ T6466] syscall_exit_to_user_mode+0x1a/0x50 [ 162.361298][ T6466] do_syscall_64+0x61/0xb0 [ 162.365740][ T6466] ? clear_bhb_loop+0x40/0x90 [ 162.370436][ T6466] ? clear_bhb_loop+0x40/0x90 [ 162.375155][ T6466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.381098][ T6466] RIP: 0033:0x7f957cf8ebe9 [ 162.385536][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.405159][ T6466] RSP: 002b:00007f957dd48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 162.413610][ T6466] RAX: fffffffffffffe00 RBX: 00007f957d1b5fa0 RCX: 00007f957cf8ebe9 [ 162.421619][ T6466] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000008 [ 162.429617][ T6466] RBP: 00007f957d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 162.437664][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.445658][ T6466] R13: 00007f957d1b6038 R14: 00007f957d1b5fa0 R15: 00007ffd81bd3f58 [ 162.453666][ T6466] [ 162.456709][ T6466] [ 162.459061][ T6466] Allocated by task 6461: [ 162.463400][ T6466] kasan_set_track+0x4e/0x70 [ 162.468192][ T6466] __kasan_kmalloc+0x8f/0xa0 [ 162.472809][ T6466] rose_add_node+0x23a/0xdd0 [ 162.477438][ T6466] rose_rt_ioctl+0xa42/0xfb0 [ 162.482069][ T6466] rose_ioctl+0x3cf/0x8b0 [ 162.486431][ T6466] sock_do_ioctl+0xd7/0x2f0 [ 162.490965][ T6466] sock_ioctl+0x623/0x7a0 [ 162.495322][ T6466] __se_sys_ioctl+0xfd/0x170 [ 162.500113][ T6466] do_syscall_64+0x55/0xb0 [ 162.504600][ T6466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.510533][ T6466] [ 162.512871][ T6466] Freed by task 6474: [ 162.516861][ T6466] kasan_set_track+0x4e/0x70 [ 162.521474][ T6466] kasan_save_free_info+0x2e/0x50 [ 162.526529][ T6466] ____kasan_slab_free+0x126/0x1e0 [ 162.531675][ T6466] slab_free_freelist_hook+0x130/0x1b0 [ 162.537169][ T6466] __kmem_cache_free+0xba/0x1f0 [ 162.542065][ T6466] rose_rt_device_down+0x43d/0x490 [ 162.547213][ T6466] rose_device_event+0x604/0x690 [ 162.552175][ T6466] notifier_call_chain+0x197/0x390 [ 162.557308][ T6466] __dev_notify_flags+0x18e/0x2e0 [ 162.562359][ T6466] dev_change_flags+0xe8/0x1a0 [ 162.567151][ T6466] dev_ifsioc+0x6a7/0xe20 [ 162.571502][ T6466] dev_ioctl+0x7e2/0x1170 [ 162.575846][ T6466] sock_do_ioctl+0x226/0x2f0 [ 162.580460][ T6466] sock_ioctl+0x623/0x7a0 [ 162.584818][ T6466] __se_sys_ioctl+0xfd/0x170 [ 162.589458][ T6466] do_syscall_64+0x55/0xb0 [ 162.593892][ T6466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.599806][ T6466] [ 162.602139][ T6466] Last potentially related work creation: [ 162.607869][ T6466] kasan_save_stack+0x3e/0x60 [ 162.612569][ T6466] __kasan_record_aux_stack+0xaf/0xc0 [ 162.617969][ T6466] call_rcu+0x158/0x930 [ 162.622154][ T6466] ip6_route_info_create+0x9c0/0x1200 [ 162.627560][ T6466] ip6_route_add+0x28/0x130 [ 162.632109][ T6466] addrconf_prefix_route+0x211/0x2b0 [ 162.637434][ T6466] inet6_addr_add+0x64a/0xb60 [ 162.642160][ T6466] inet6_rtm_newaddr+0x68d/0x940 [ 162.647113][ T6466] rtnetlink_rcv_msg+0x7c7/0xf10 [ 162.652074][ T6466] netlink_rcv_skb+0x216/0x480 [ 162.656868][ T6466] netlink_unicast+0x751/0x8d0 [ 162.661671][ T6466] netlink_sendmsg+0x8c1/0xbe0 [ 162.666490][ T6466] __sys_sendto+0x46a/0x620 [ 162.671025][ T6466] __x64_sys_sendto+0xde/0xf0 [ 162.675723][ T6466] do_syscall_64+0x55/0xb0 [ 162.680161][ T6466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.686091][ T6466] [ 162.688439][ T6466] The buggy address belongs to the object at ffff888030c5c000 [ 162.688439][ T6466] which belongs to the cache kmalloc-512 of size 512 [ 162.702523][ T6466] The buggy address is located 50 bytes inside of [ 162.702523][ T6466] freed 512-byte region [ffff888030c5c000, ffff888030c5c200) [ 162.716275][ T6466] [ 162.718631][ T6466] The buggy address belongs to the physical page: [ 162.725070][ T6466] page:ffffea0000c31700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30c5c [ 162.735340][ T6466] head:ffffea0000c31700 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 162.744306][ T6466] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 162.752332][ T6466] page_type: 0xffffffff() [ 162.756700][ T6466] raw: 00fff00000000840 ffff888017841c80 ffffea000170dc00 dead000000000002 [ 162.765323][ T6466] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 162.773929][ T6466] page dumped because: kasan: bad access detected [ 162.780377][ T6466] page_owner tracks the page as allocated [ 162.786113][ T6466] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4730, tgid 4730 (kworker/u4:2), ts 22610842278, free_ts 0 [ 162.806647][ T6466] post_alloc_hook+0x1cd/0x210 [ 162.811450][ T6466] get_page_from_freelist+0x195c/0x19f0 [ 162.817050][ T6466] __alloc_pages+0x1e3/0x460 [ 162.821710][ T6466] alloc_slab_page+0x5d/0x170 [ 162.826431][ T6466] new_slab+0x87/0x2e0 [ 162.830537][ T6466] ___slab_alloc+0xc6d/0x12f0 [ 162.835234][ T6466] __kmem_cache_alloc_node+0x1a2/0x260 [ 162.840720][ T6466] kmalloc_trace+0x2a/0xe0 [ 162.845165][ T6466] alloc_bprm+0x56/0x9c0 [ 162.849442][ T6466] kernel_execve+0x98/0x9c0 [ 162.853983][ T6466] call_usermodehelper_exec_async+0x20b/0x350 [ 162.860087][ T6466] ret_from_fork+0x48/0x80 [ 162.864530][ T6466] ret_from_fork_asm+0x11/0x20 [ 162.869324][ T6466] page_owner free stack trace missing [ 162.874706][ T6466] [ 162.877054][ T6466] Memory state around the buggy address: [ 162.882701][ T6466] ffff888030c5bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.892018][ T6466] ffff888030c5bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.900101][ T6466] >ffff888030c5c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.908179][ T6466] ^ [ 162.913925][ T6466] ffff888030c5c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.922010][ T6466] ffff888030c5c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.930094][ T6466] ================================================================== [ 163.790030][ T6466] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.797299][ T6466] CPU: 1 PID: 6466 Comm: syz.1.170 Not tainted 6.6.102-syzkaller #0 [ 163.805331][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.815436][ T6466] Call Trace: [ 163.818741][ T6466] [ 163.821695][ T6466] dump_stack_lvl+0x16c/0x230 [ 163.826408][ T6466] ? show_regs_print_info+0x20/0x20 [ 163.831644][ T6466] ? load_image+0x3b0/0x3b0 [ 163.836198][ T6466] panic+0x2c0/0x710 [ 163.840122][ T6466] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.846317][ T6466] ? bpf_jit_dump+0xd0/0xd0 [ 163.850862][ T6466] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 163.856808][ T6466] ? _raw_spin_unlock+0x40/0x40 [ 163.861698][ T6466] ? rose_transmit_link+0x5ba/0x740 [ 163.866926][ T6466] check_panic_on_warn+0x84/0xa0 [ 163.871918][ T6466] ? rose_transmit_link+0x5ba/0x740 [ 163.877152][ T6466] end_report+0x6f/0x140 [ 163.881432][ T6466] kasan_report+0x128/0x150 [ 163.886324][ T6466] ? kmem_cache_alloc_node+0x17f/0x330 [ 163.891922][ T6466] ? rose_transmit_link+0x5ba/0x740 [ 163.897156][ T6466] rose_transmit_link+0x5ba/0x740 [ 163.902206][ T6466] ? skb_put+0x11b/0x210 [ 163.906508][ T6466] rose_write_internal+0x11d1/0x1ab0 [ 163.911848][ T6466] ? rose_validate_nr+0x120/0x120 [ 163.916905][ T6466] ? __timer_delete+0x6b/0x290 [ 163.921711][ T6466] ? skb_queue_purge_reason+0x6c/0x1c0 [ 163.927217][ T6466] rose_release+0x24e/0x510 [ 163.931767][ T6466] sock_close+0xbd/0x230 [ 163.936043][ T6466] ? sock_mmap+0xa0/0xa0 [ 163.940316][ T6466] __fput+0x234/0x970 [ 163.944342][ T6466] task_work_run+0x1ce/0x250 [ 163.948968][ T6466] ? task_work_cancel+0x240/0x240 [ 163.954027][ T6466] get_signal+0x1235/0x1400 [ 163.958575][ T6466] ? task_work_add+0x3a3/0x440 [ 163.963387][ T6466] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 163.968822][ T6466] ? wake_bit_function+0x200/0x200 [ 163.973960][ T6466] ? __might_fault+0xaa/0x120 [ 163.978666][ T6466] arch_do_signal_or_restart+0x96/0x780 [ 163.984228][ T6466] ? __sys_connect+0x240/0x420 [ 163.988991][ T6466] ? get_sigframe_size+0x20/0x20 [ 163.993949][ T6466] ? exit_to_user_mode_loop+0x3b/0x110 [ 163.999445][ T6466] exit_to_user_mode_loop+0x70/0x110 [ 164.004755][ T6466] exit_to_user_mode_prepare+0xb1/0x140 [ 164.010305][ T6466] syscall_exit_to_user_mode+0x1a/0x50 [ 164.015770][ T6466] do_syscall_64+0x61/0xb0 [ 164.020185][ T6466] ? clear_bhb_loop+0x40/0x90 [ 164.024859][ T6466] ? clear_bhb_loop+0x40/0x90 [ 164.029535][ T6466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.035457][ T6466] RIP: 0033:0x7f957cf8ebe9 [ 164.039878][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.059502][ T6466] RSP: 002b:00007f957dd48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 164.067929][ T6466] RAX: fffffffffffffe00 RBX: 00007f957d1b5fa0 RCX: 00007f957cf8ebe9 [ 164.075932][ T6466] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000008 [ 164.083896][ T6466] RBP: 00007f957d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 164.091867][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.100035][ T6466] R13: 00007f957d1b6038 R14: 00007f957d1b5fa0 R15: 00007ffd81bd3f58 [ 164.108033][ T6466] [ 164.111393][ T6466] Kernel Offset: disabled [ 164.115722][ T6466] Rebooting in 86400 seconds..