last executing test programs: 22.299078716s ago: executing program 3 (id=349): socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x400e40) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 20.535555867s ago: executing program 3 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) read$hiddev(0xffffffffffffffff, &(0x7f0000000080)=""/39, 0x27) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 19.050549498s ago: executing program 3 (id=354): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xb, "2ef0ee445c11494489f2a0"}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000004, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3a, &(0x7f0000000080)=0xb, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)={0x3, 'nicvf0\x00', {0xdfe}, 0x3ff}) unshare(0x62040200) 18.536712512s ago: executing program 4 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) syz_emit_ethernet(0xc6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket$rds(0x15, 0x5, 0x0) pwrite64(r5, 0x0, 0x0, 0x9) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c1c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 17.777851681s ago: executing program 3 (id=356): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$key(0xf, 0x3, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) ioperm(0x0, 0x6, 0x2da3b9f3) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x100}) madvise(&(0x7f00000e8000/0x1000)=nil, 0x1000, 0x11) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, 0x0, 0x2a, 0x2, @val=@tcx={@void, @value}}, 0x40) 17.035287402s ago: executing program 4 (id=359): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x10, 0x1, 0xb8ed, 0x3, 0xb, 0xdef7, 0x6, 0xd, 0xe93}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x5, 0x718, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001780], 0x0, &(0x7f00000000c0), &(0x7f0000001780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x6, 0x6006, 'ip6erspan0\x00', 'sit0\x00', 'macvlan0\x00', 'syzkaller1\x00', @random="4f41811fa95a", [0xff, 0x0, 0x0, 0x0, 0x0, 0x7f], @link_local, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x1e6, 0x216, [], [@common=@ERROR={'ERROR\x00', 0x20, {"a327d8d9ec24dae040aadac2d5aeb806718f6ffcd0e6544f441829d5052a"}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:etc_runtime_t:s0\x00'}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}, {0x9, 0x0, 0x806, 'batadv_slave_1\x00', 'batadv_slave_0\x00', 'geneve1\x00', 'dummy0\x00', @link_local, [0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xa6, 0xa6, 0x11e, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="a74735279040", 0x1}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0xfffffff9, 0x1, 0x0, 0x0, 0x0, "559a07400b4afaa19945149f456c1dd581a73faa461153eaafc0d698e5edce21dab978f674446d2e883168f8dea79883e2ceec643e71a3f72738c12de25f8f25"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x2, 0x15, 'syz_tun\x00', 'bridge0\x00', 'batadv_slave_1\x00', 'xfrm0\x00', @multicast, [0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x11e, 0x19e, 0x1ce, [@time={{'time\x00', 0x0, 0x18}, {{0x7f, 0x2, 0x13872, 0x56c2, 0x0, 0x5, 0x2}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'veth0_macvtap\x00', 'dvmrp0\x00', 0xd, 0x2, 0x8001, 0x7fffffff, 0x5, 0x8, {0x2}, {0xfff}}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@log={'log\x00', 0x28, {{0x5, "a6ced60aadc39c70f1bdf355266776f8a6de70184b343e218076f974fff0", 0x4}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x27}}}}, {0x11, 0x4, 0x6004, 'pim6reg1\x00', 'veth1_vlan\x00', 'veth0\x00', 'tunl0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @random="47cd6bb15879", [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xbe, 0x156, 0x186, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x3}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"93cd22453dc7b8870d90ca9bd6a73ab85709b0589605cd4b1161ed9d0026"}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xc6a3, 'syz0\x00'}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x790) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x20a00) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000000200)={0x0, 0x0}) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) 14.991178021s ago: executing program 3 (id=362): socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, 0x0, 0x0, 0x700, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 14.904896599s ago: executing program 4 (id=363): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xb, "2ef0ee445c11494489f2a0"}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000004, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3a, &(0x7f0000000080)=0xb, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r3, 0x1) unshare(0x62040200) 9.71527936s ago: executing program 1 (id=368): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0xe4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 9.611857274s ago: executing program 0 (id=370): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xb, "2ef0ee445c11494489f2a0"}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000004, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3a, &(0x7f0000000080)=0xb, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r3, 0x1) 9.064308112s ago: executing program 0 (id=371): write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) 8.574575854s ago: executing program 1 (id=372): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$key(0xf, 0x3, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) ioperm(0x0, 0x6, 0x2da3b9f3) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x100}) madvise(&(0x7f00000e8000/0x1000)=nil, 0x1000, 0x11) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, 0x0, 0x2a, 0x2, @val=@tcx={@void, @value}}, 0x40) 8.060173289s ago: executing program 0 (id=373): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = syz_io_uring_setup(0x1e, &(0x7f0000000300)={0x0, 0x8402, 0x800, 0x1000001, 0xe7fffffe}, 0x0, &(0x7f0000000680)) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r6, 0x40096102, &(0x7f0000000180)={{}, 0x55}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x140, 0x0, 0x0, 0x4) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x9, 0x2, @thr={&(0x7f0000000580), &(0x7f0000000740)="588decc425d95859f53cfc3b628ff6429f1e39dadc15be503c0febe78c193f7c1e9dbef5c5819f57c66f37837750a7592d12d14ab74b029f124d1238e78541a714222df8a404e801233f2cc1c50984628ea0d40af78f2f276b4dbc737f0e9d86ff5dff06003f6f3aebcf6f175865ad604a547fd0c294d6e424e929a6cc1a2457e3b5bcdcb7170c33695c71e945508f85975a10b1e71231f6d24793cfff9979998992ccadb65a79477d44deb8a44640d0468df906078bc86f82d63999d984"}}, &(0x7f00000002c0)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40400}, 0x80c0) r8 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) fcntl$dupfd(r8, 0x0, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x1, 0xf0000000, 0x7681, 0xfb}}, 0x11c) sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}]}]}]}, 0x2c}}, 0x0) 8.059607937s ago: executing program 3 (id=374): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 7.509154497s ago: executing program 4 (id=375): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, 0x0, 0x4000) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 7.443025103s ago: executing program 1 (id=376): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd2d14efbcb72b976, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200), 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000480)="e02a5d32f5", 0x5}], 0x2}}], 0x1, 0x40) sendmmsg$sock(r5, 0x0, 0x0, 0x8080) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x80}, {r8, 0x2180}, {r2, 0x2}, {r7, 0x2390}, {r4, 0x9008}, {r1, 0x2610}, {r1, 0x408a}], 0x8, 0x0, &(0x7f0000000480)={[0x8]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0) 6.920651473s ago: executing program 1 (id=378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x313220, 0x60) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x20048000) writev(0xffffffffffffffff, &(0x7f0000001280)=[{0x0}], 0x1) r2 = socket$l2tp(0x2, 0x2, 0x73) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) read$FUSE(r6, &(0x7f0000000140)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000095}, 0x800) 6.0060139s ago: executing program 4 (id=379): socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 5.883016164s ago: executing program 2 (id=380): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x40, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x356b, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "08a52af5"}}}}}, 0x0) 5.711206327s ago: executing program 2 (id=381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x4, &(0x7f0000000340)=""/222, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.35949733s ago: executing program 2 (id=382): syz_usb_connect(0x0, 0x24, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x81, 0xdd, 0x22, 0x10, 0x54c, 0x2e, 0x500, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x4, 0xc9}}]}}]}}, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), 0x0) 2.884235955s ago: executing program 0 (id=383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) 1.678815644s ago: executing program 2 (id=384): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x7e, 0x5f]}}, 0x0, 0x1c, 0x0, 0x1, 0xad07, 0x0, @void, @value}, 0x28) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) socket$netlink(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f0000000180)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) 1.543294675s ago: executing program 0 (id=385): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 1.380519123s ago: executing program 2 (id=386): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)=""/184, 0xb8}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f0000000340)=""/4072, 0xfe8}, {&(0x7f00000013c0)=""/16, 0x10}], 0x4}, 0x40) 1.144456623s ago: executing program 2 (id=387): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x6}}}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000001ec0)={0x0, &(0x7f0000001e80)}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x4001c}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.128470503s ago: executing program 1 (id=388): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100), 0x0, 0x0) 1.066008667s ago: executing program 0 (id=389): socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x100080a1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x14) 883.250184ms ago: executing program 4 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) 0s ago: executing program 1 (id=391): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.43' (ED25519) to the list of known hosts. [ 92.151446][ T5808] cgroup: Unknown subsys name 'net' [ 92.268894][ T5808] cgroup: Unknown subsys name 'cpuset' [ 92.279887][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.974456][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.135737][ T24] cfg80211: failed to load regulatory.db [ 98.172723][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.215347][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.234872][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.243628][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.244906][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.252371][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.259443][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.274448][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.282654][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.283242][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.291643][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.306132][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.314768][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.361474][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.375201][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.384156][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.385282][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.399484][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.400893][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.409375][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.424257][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.438114][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.451232][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.451785][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.466843][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.170581][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 99.216926][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 99.265925][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 99.371974][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 99.619717][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.630168][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.637881][ T5834] bridge_slave_0: entered allmulticast mode [ 99.645419][ T5834] bridge_slave_0: entered promiscuous mode [ 99.654621][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.661872][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.669535][ T5826] bridge_slave_0: entered allmulticast mode [ 99.677486][ T5826] bridge_slave_0: entered promiscuous mode [ 99.704953][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 99.724998][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.732335][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.742760][ T5834] bridge_slave_1: entered allmulticast mode [ 99.750154][ T5834] bridge_slave_1: entered promiscuous mode [ 99.775336][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.783124][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.790566][ T5826] bridge_slave_1: entered allmulticast mode [ 99.798489][ T5826] bridge_slave_1: entered promiscuous mode [ 99.878328][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.886909][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.895841][ T5832] bridge_slave_0: entered allmulticast mode [ 99.904190][ T5832] bridge_slave_0: entered promiscuous mode [ 99.950354][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.975989][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.983339][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.990631][ T5832] bridge_slave_1: entered allmulticast mode [ 99.998712][ T5832] bridge_slave_1: entered promiscuous mode [ 100.071236][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.085045][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.100028][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.109750][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.120100][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.127727][ T5827] bridge_slave_0: entered allmulticast mode [ 100.135908][ T5827] bridge_slave_0: entered promiscuous mode [ 100.166424][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.193194][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.203227][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.210508][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.218015][ T5827] bridge_slave_1: entered allmulticast mode [ 100.226632][ T5827] bridge_slave_1: entered promiscuous mode [ 100.294704][ T5826] team0: Port device team_slave_0 added [ 100.364899][ T5834] team0: Port device team_slave_0 added [ 100.376319][ T5826] team0: Port device team_slave_1 added [ 100.385260][ T5832] team0: Port device team_slave_0 added [ 100.426301][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.436636][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.444789][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.452122][ T5836] bridge_slave_0: entered allmulticast mode [ 100.459676][ T5836] bridge_slave_0: entered promiscuous mode [ 100.470778][ T5834] team0: Port device team_slave_1 added [ 100.479161][ T5832] team0: Port device team_slave_1 added [ 100.491498][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.499862][ T5833] Bluetooth: hci2: command tx timeout [ 100.503793][ T5835] Bluetooth: hci3: command tx timeout [ 100.505992][ T5833] Bluetooth: hci4: command tx timeout [ 100.510852][ T5835] Bluetooth: hci1: command tx timeout [ 100.516488][ T5833] Bluetooth: hci0: command tx timeout [ 100.527568][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.554014][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.567762][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.575414][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.601503][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.616040][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.625788][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.633634][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.640870][ T5836] bridge_slave_1: entered allmulticast mode [ 100.648400][ T5836] bridge_slave_1: entered promiscuous mode [ 100.748386][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.759228][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.786262][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.825816][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.833479][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.860310][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.873337][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.880478][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.907205][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.921771][ T5827] team0: Port device team_slave_0 added [ 100.932039][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.957447][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.965375][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.992773][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.013126][ T5827] team0: Port device team_slave_1 added [ 101.021472][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.058967][ T5826] hsr_slave_0: entered promiscuous mode [ 101.066516][ T5826] hsr_slave_1: entered promiscuous mode [ 101.171851][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.179094][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.205456][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.232951][ T5836] team0: Port device team_slave_0 added [ 101.279604][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.286957][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.314217][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.327602][ T5836] team0: Port device team_slave_1 added [ 101.355528][ T5832] hsr_slave_0: entered promiscuous mode [ 101.362073][ T5832] hsr_slave_1: entered promiscuous mode [ 101.368724][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.377180][ T5832] Cannot create hsr debugfs directory [ 101.441101][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.449030][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.476520][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.504722][ T5834] hsr_slave_0: entered promiscuous mode [ 101.511488][ T5834] hsr_slave_1: entered promiscuous mode [ 101.517944][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.525579][ T5834] Cannot create hsr debugfs directory [ 101.533948][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.540929][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.567077][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.771050][ T5827] hsr_slave_0: entered promiscuous mode [ 101.778212][ T5827] hsr_slave_1: entered promiscuous mode [ 101.785088][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.793092][ T5827] Cannot create hsr debugfs directory [ 101.820424][ T5836] hsr_slave_0: entered promiscuous mode [ 101.827389][ T5836] hsr_slave_1: entered promiscuous mode [ 101.834580][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.842182][ T5836] Cannot create hsr debugfs directory [ 102.266692][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.291258][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.309784][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.343524][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.408632][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.425376][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.453157][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.485728][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.557035][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.574112][ T5833] Bluetooth: hci0: command tx timeout [ 102.582935][ T5845] Bluetooth: hci4: command tx timeout [ 102.583050][ T5835] Bluetooth: hci3: command tx timeout [ 102.588667][ T5845] Bluetooth: hci2: command tx timeout [ 102.600189][ T5833] Bluetooth: hci1: command tx timeout [ 102.607102][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.635822][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.656857][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.775141][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.792219][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.823701][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.831974][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.846636][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.940155][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.978679][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.986058][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.025439][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.033007][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.056129][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.066744][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.079259][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.091736][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.121662][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.182942][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.224134][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.256252][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.264072][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.286063][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.293368][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.358063][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.423751][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.431240][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.481362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.488796][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.647517][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.680790][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.786665][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.822400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.829721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.844538][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.881178][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.888523][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.961321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.968842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.022402][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.029673][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.102123][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.181801][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.251916][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.377946][ T5826] veth0_vlan: entered promiscuous mode [ 104.440867][ T5826] veth1_vlan: entered promiscuous mode [ 104.490421][ T5834] veth0_vlan: entered promiscuous mode [ 104.539732][ T5832] veth0_vlan: entered promiscuous mode [ 104.597585][ T5832] veth1_vlan: entered promiscuous mode [ 104.623404][ T5834] veth1_vlan: entered promiscuous mode [ 104.653782][ T5845] Bluetooth: hci2: command tx timeout [ 104.655009][ T55] Bluetooth: hci3: command tx timeout [ 104.659233][ T5845] Bluetooth: hci4: command tx timeout [ 104.665053][ T5835] Bluetooth: hci0: command tx timeout [ 104.671101][ T5833] Bluetooth: hci1: command tx timeout [ 104.687758][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.719362][ T5826] veth0_macvtap: entered promiscuous mode [ 104.767036][ T5826] veth1_macvtap: entered promiscuous mode [ 104.816008][ T5832] veth0_macvtap: entered promiscuous mode [ 104.826803][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.842047][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.857367][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.882451][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.897915][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.906992][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.917319][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.933782][ T5834] veth0_macvtap: entered promiscuous mode [ 104.958612][ T5832] veth1_macvtap: entered promiscuous mode [ 105.001543][ T5834] veth1_macvtap: entered promiscuous mode [ 105.032514][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.057570][ T5836] veth0_vlan: entered promiscuous mode [ 105.098060][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.158289][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.170440][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.179526][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.190809][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.217620][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.225677][ T5836] veth1_vlan: entered promiscuous mode [ 105.268315][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.345293][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.358704][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.369799][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.379663][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.426370][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.439293][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.546956][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.563310][ T5836] veth0_macvtap: entered promiscuous mode [ 105.564836][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.583227][ T5836] veth1_macvtap: entered promiscuous mode [ 105.620068][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.635785][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.690955][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.728051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.746809][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.797743][ T5827] veth0_vlan: entered promiscuous mode [ 105.820524][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.032436][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.078708][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.086823][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.108323][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.117424][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.128267][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.140487][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.173184][ T5827] veth1_vlan: entered promiscuous mode [ 106.256781][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.312193][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.526744][ T5827] veth0_macvtap: entered promiscuous mode [ 106.583237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.734080][ T5833] Bluetooth: hci1: command tx timeout [ 106.740087][ T5845] Bluetooth: hci0: command tx timeout [ 106.745703][ T5845] Bluetooth: hci4: command tx timeout [ 106.751796][ T5845] Bluetooth: hci3: command tx timeout [ 106.757891][ T5833] Bluetooth: hci2: command tx timeout [ 106.909046][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.100089][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.216965][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 107.581202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.683591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.861151][ T5827] veth1_macvtap: entered promiscuous mode [ 107.888383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.932860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.182920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.262971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.299461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.573503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.582734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.185972][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.223177][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.305918][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.327830][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.339999][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.352863][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.361923][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.371288][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.000701][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.741364][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.976681][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.647637][ T5952] process 'syz.2.11' launched './file0' with NULL argv: empty string added [ 116.483083][ T5950] netlink: 'syz.3.10': attribute type 11 has an invalid length. [ 116.491774][ T5950] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10'. [ 116.631902][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.658371][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.040676][ T5959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.060866][ T5959] xt_NFQUEUE: number of total queues is 0 [ 118.825845][ T5963] binder: 5962:5963 ioctl c0306201 200000000100 returned -22 [ 120.233226][ T5972] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 120.243175][ T5972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 120.253238][ T5972] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 120.291387][ T5972] syz.3.15 (5972) used greatest stack depth: 18912 bytes left [ 121.108297][ T30] audit: type=1800 audit(1747441986.809:2): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.15" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 122.963053][ T5985] lo speed is unknown, defaulting to 1000 [ 122.969306][ T5985] lo speed is unknown, defaulting to 1000 [ 122.979864][ T5985] lo speed is unknown, defaulting to 1000 [ 122.990855][ T5985] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.005963][ T5985] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 123.034550][ T5985] lo speed is unknown, defaulting to 1000 [ 123.043349][ T5985] lo speed is unknown, defaulting to 1000 [ 123.053824][ T5985] lo speed is unknown, defaulting to 1000 [ 123.061161][ T5985] lo speed is unknown, defaulting to 1000 [ 123.068490][ T5985] lo speed is unknown, defaulting to 1000 [ 127.784950][ T5878] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 128.199220][ T6004] netlink: 'syz.1.21': attribute type 2 has an invalid length. [ 133.605336][ T6030] netlink: 'syz.4.29': attribute type 13 has an invalid length. [ 134.219840][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.229303][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.000573][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.093135][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.388914][ T6030] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.408996][ T6030] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.432603][ T6030] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.451893][ T6030] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.574406][ T5880] lo speed is unknown, defaulting to 1000 [ 137.622896][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.653441][ T5880] syz0: Port: 1 Link DOWN [ 137.872853][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 137.902804][ T5881] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 137.918322][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.097351][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.125693][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.170068][ T5881] usb 3-1: config 0 descriptor?? [ 138.230023][ T6070] netlink: 'syz.1.35': attribute type 2 has an invalid length. [ 139.530987][ T6080] netlink: 'syz.1.37': attribute type 11 has an invalid length. [ 139.538872][ T6080] netlink: 224 bytes leftover after parsing attributes in process `syz.1.37'. [ 140.256873][ T5881] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.439189][ T5881] asix 3-1:0.0: probe with driver asix failed with error -71 [ 140.999210][ T5881] usb 3-1: USB disconnect, device number 2 [ 141.889628][ T6095] ======================================================= [ 141.889628][ T6095] WARNING: The mand mount option has been deprecated and [ 141.889628][ T6095] and is ignored by this kernel. Remove the mand [ 141.889628][ T6095] option from the mount to silence this warning. [ 141.889628][ T6095] ======================================================= [ 141.933094][ T6097] 9pnet_virtio: no channels available for device syz [ 142.252754][ T6095] orangefs_mount: mount request failed with -4 [ 143.715251][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.733718][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.307258][ T6111] netlink: 'syz.1.43': attribute type 13 has an invalid length. [ 144.542118][ T6114] overlayfs: overlapping lowerdir path [ 145.626393][ T6132] netlink: 'syz.0.47': attribute type 11 has an invalid length. [ 145.634832][ T6132] netlink: 224 bytes leftover after parsing attributes in process `syz.0.47'. [ 145.663614][ T5835] Bluetooth: hci2: command tx timeout [ 146.221983][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.229828][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.653628][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.714015][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.191298][ T6111] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.200980][ T6111] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.217327][ T6111] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.226999][ T6111] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.292814][ T30] audit: type=1326 audit(1747442016.869:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6155 comm="syz.4.52" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9f6f8e969 code=0x0 [ 150.380555][ T6164] 9pnet_virtio: no channels available for device syz [ 150.493973][ T5835] Bluetooth: hci0: command tx timeout [ 151.532034][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.217563][ T30] audit: type=1326 audit(1747442019.779:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.55" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8b58e969 code=0x0 [ 154.525287][ T6167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.877677][ T6219] Zero length message leads to an empty skb [ 159.305652][ T6236] 9pnet_virtio: no channels available for device syz [ 160.229352][ T6237] syz.3.70 (6237) used greatest stack depth: 17048 bytes left [ 163.638038][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.648608][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.422708][ T5833] Bluetooth: hci4: command tx timeout [ 164.976879][ T30] audit: type=1326 audit(1747442031.559:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.3.76" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcebd8e969 code=0x0 [ 166.053698][ T6278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.552709][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.266616][ T6284] orangefs_mount: mount request failed with -4 [ 167.645258][ T5809] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.667867][ T5809] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 167.707348][ T5809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.932695][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 167.952568][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 168.875256][ T5809] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.892573][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.901082][ T5809] usb 2-1: Product: syz [ 168.932193][ T5809] usb 2-1: Manufacturer: syz [ 168.953294][ T5809] cdc_wdm 2-1:1.0: skipping garbage [ 168.958763][ T5809] cdc_wdm 2-1:1.0: skipping garbage [ 168.969727][ T5809] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 168.976567][ T5809] cdc_wdm 2-1:1.0: Unknown control protocol [ 170.139256][ T6305] 9pnet_virtio: no channels available for device syz [ 170.604601][ T24] usb 2-1: USB disconnect, device number 2 [ 171.731328][ T6311] binder: 6310:6311 ioctl c0306201 200000000100 returned -22 [ 173.222662][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.386810][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 173.477832][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.590613][ T24] usb 2-1: Product: syz [ 173.596138][ T24] usb 2-1: Manufacturer: syz [ 173.602769][ T24] usb 2-1: SerialNumber: syz [ 173.632675][ T24] usb 2-1: config 0 descriptor?? [ 173.643332][ T24] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 174.831867][ T24] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 174.882665][ T5809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.990810][ T24] usb 2-1: USB disconnect, device number 3 [ 176.052610][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 176.099412][ T5809] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 176.127802][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.856129][ T6358] 9pnet_virtio: no channels available for device syz [ 177.261903][ T5809] usb 3-1: config 0 descriptor?? [ 177.623196][ T5809] usb 3-1: can't set config #0, error -71 [ 177.673058][ T5809] usb 3-1: USB disconnect, device number 3 [ 178.925468][ T6380] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 178.974963][ T6380] CIFS mount error: No usable UNC path provided in device string! [ 178.974963][ T6380] [ 178.989016][ T6380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 182.212387][ T6385] orangefs_mount: mount request failed with -4 [ 188.030269][ T30] audit: type=1800 audit(1747442054.609:6): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.109" name="file1" dev="tmpfs" ino=108 res=0 errno=0 [ 189.688589][ T6425] orangefs_mount: mount request failed with -4 [ 198.602969][ T6484] binder: 6480:6484 ioctl c0306201 200000000100 returned -22 [ 199.642117][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.648921][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.505246][ T6499] binder: 6498:6499 ioctl c0306201 200000000100 returned -22 [ 201.972305][ T6504] 9pnet: Unknown protocol version 9p20\++} [ 202.615681][ T6515] ip6tnl1: entered promiscuous mode [ 202.621141][ T6515] ip6tnl1: entered allmulticast mode [ 202.631548][ T6515] team0: Device ip6tnl1 is of different type [ 203.978534][ T6521] binder: 6519:6521 ioctl c0306201 200000000100 returned -22 [ 205.231133][ T6531] binder: 6530:6531 ioctl c0306201 200000000100 returned -22 [ 207.732581][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 207.992626][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 208.017565][ T5881] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 208.041200][ T6564] binder: 6561:6564 ioctl c0306201 200000000100 returned -22 [ 208.319602][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.144494][ T5881] usb 5-1: config 0 descriptor?? [ 209.454287][ T5881] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 209.540123][ T5881] asix 5-1:0.0: probe with driver asix failed with error -71 [ 209.633590][ T5881] usb 5-1: USB disconnect, device number 2 [ 210.233174][ T6580] siw: device registration error -23 [ 212.508007][ T6592] orangefs_mount: mount request failed with -4 [ 216.190629][ T30] audit: type=1326 audit(1747442082.729:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6631 comm="syz.2.156" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5d038e969 code=0x0 [ 216.242038][ T6632] netlink: 256 bytes leftover after parsing attributes in process `syz.4.155'. [ 216.294442][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.4.155'. [ 216.545856][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.391153][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 222.224631][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 222.231334][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 222.239174][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 222.245933][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 223.405370][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 223.644553][ T5809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 224.319859][ T30] audit: type=1800 audit(1747442090.899:8): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.169" name="bus" dev="overlay" ino=228 res=0 errno=0 [ 225.867354][ T6695] orangefs_mount: mount request failed with -4 [ 227.702980][ T6699] siw: device registration error -23 [ 228.427705][ T5809] usb 2-1: device descriptor read/all, error -71 [ 232.109605][ T30] audit: type=1800 audit(1747442097.499:9): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.177" name="bus" dev="overlay" ino=207 res=0 errno=0 [ 235.705533][ T6752] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 235.803922][ T6752] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.058038][ T6752] bond0: (slave team0): Enslaving as an active interface with an up link [ 236.368096][ T5809] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 237.883957][ T5809] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 238.115931][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.152818][ T6768] netlink: 'syz.3.187': attribute type 11 has an invalid length. [ 238.160907][ T6768] netlink: 224 bytes leftover after parsing attributes in process `syz.3.187'. [ 239.576396][ T5809] usb 3-1: Product: syz [ 239.580713][ T5809] usb 3-1: Manufacturer: syz [ 239.812869][ T5809] usb 3-1: SerialNumber: syz [ 239.826122][ T5809] usb 3-1: config 0 descriptor?? [ 239.832288][ T5809] usb 3-1: can't set config #0, error -71 [ 239.958485][ T5809] usb 3-1: USB disconnect, device number 4 [ 241.542815][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 242.167070][ T6786] binder: 6783:6786 ioctl c0306201 200000000100 returned -22 [ 247.151737][ T5809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 247.438776][ T6822] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 247.448210][ T5809] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.457897][ T5809] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 247.480735][ T6822] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.490886][ T6822] bond0: (slave team0): Enslaving as an active interface with an up link [ 247.495687][ T5809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.542590][ T5809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 247.574499][ T5809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 247.649186][ T5809] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 247.655559][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 247.692735][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 247.757998][ T5809] usb 5-1: Product: syz [ 247.822113][ T5809] usb 5-1: Manufacturer: syz [ 248.248737][ T5809] cdc_wdm 5-1:1.0: skipping garbage [ 248.273564][ T5881] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 248.300191][ T5809] cdc_wdm 5-1:1.0: skipping garbage [ 248.302616][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.319034][ T5809] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 248.479803][ T5809] cdc_wdm 5-1:1.0: Unknown control protocol [ 248.756673][ T6828] netlink: 'syz.0.203': attribute type 11 has an invalid length. [ 248.764694][ T6828] netlink: 224 bytes leftover after parsing attributes in process `syz.0.203'. [ 248.827739][ T5881] usb 3-1: Product: syz [ 248.861074][ T5881] usb 3-1: Manufacturer: syz [ 248.919734][ T5881] usb 3-1: SerialNumber: syz [ 248.950040][ T5881] usb 3-1: config 0 descriptor?? [ 248.992086][ T5881] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 249.311938][ T6839] netlink: 36 bytes leftover after parsing attributes in process `syz.1.204'. [ 249.519233][ T5881] sonixb 3-1:0.0: Error writing register 01: -71 [ 249.527521][ T5881] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 249.665235][ T5881] usb 3-1: USB disconnect, device number 5 [ 252.323811][ T5881] usb 5-1: USB disconnect, device number 3 [ 253.496998][ T6867] binder: 6866:6867 ioctl c0306201 200000000100 returned -22 [ 255.662847][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 255.819486][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.837659][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.886659][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.905291][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 255.920958][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 256.220346][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.270196][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.301882][ T10] usb 5-1: Product: syz [ 256.339452][ T10] usb 5-1: Manufacturer: syz [ 256.714658][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 256.812657][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 256.878846][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 256.907536][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 257.023350][ T30] audit: type=1326 audit(1747442123.609:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8b58e969 code=0x0 [ 258.366441][ T1207] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 258.881559][ T10] usb 5-1: USB disconnect, device number 4 [ 258.976162][ T6905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 259.015188][ T1207] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 259.092578][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.100643][ T1207] usb 2-1: Product: syz [ 259.103446][ T6914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.114286][ T1207] usb 2-1: Manufacturer: syz [ 259.118952][ T1207] usb 2-1: SerialNumber: syz [ 259.134821][ T1207] usb 2-1: config 0 descriptor?? [ 259.216656][ T1207] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 259.891505][ T6927] ALSA: mixer_oss: invalid OSS volume '' [ 261.014712][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.021255][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.082612][ T1207] sonixb 2-1:0.0: Error writing register 01: -110 [ 261.094349][ T1207] sonixb 2-1:0.0: probe with driver sonixb failed with error -110 [ 261.411093][ T5881] usb 2-1: USB disconnect, device number 6 [ 261.930836][ T6943] 9pnet_virtio: no channels available for device syz [ 263.839000][ T6958] netlink: 'syz.1.227': attribute type 11 has an invalid length. [ 263.847754][ T6958] netlink: 224 bytes leftover after parsing attributes in process `syz.1.227'. [ 267.952929][ T6987] netlink: 'syz.1.235': attribute type 11 has an invalid length. [ 267.961603][ T6987] netlink: 224 bytes leftover after parsing attributes in process `syz.1.235'. [ 268.990276][ T5845] Bluetooth: hci1: command tx timeout [ 269.464810][ T30] audit: type=1326 audit(1747442136.039:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 270.051064][ T5881] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 270.119246][ T30] audit: type=1326 audit(1747442136.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 270.586300][ T30] audit: type=1326 audit(1747442136.179:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 270.609814][ T30] audit: type=1326 audit(1747442136.179:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 270.632359][ T30] audit: type=1326 audit(1747442136.199:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 270.687670][ T30] audit: type=1326 audit(1747442136.199:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 270.720773][ T30] audit: type=1326 audit(1747442136.629:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 270.772598][ T5881] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 270.835414][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.850194][ T30] audit: type=1326 audit(1747442136.629:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 270.897767][ T5881] usb 4-1: Product: syz [ 271.102783][ T30] audit: type=1326 audit(1747442136.629:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 271.149005][ T30] audit: type=1326 audit(1747442136.629:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8b58e969 code=0x7ffc0000 [ 271.170940][ T5881] usb 4-1: Manufacturer: syz [ 271.180931][ T5881] usb 4-1: SerialNumber: syz [ 271.194217][ T5881] usb 4-1: config 0 descriptor?? [ 271.925824][ T5881] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 272.171228][ T5881] sonixb 4-1:0.0: Error reading register 00: -71 [ 272.209968][ T5881] usb 4-1: USB disconnect, device number 2 [ 272.586096][ T7027] netlink: 'syz.4.242': attribute type 11 has an invalid length. [ 272.594203][ T7027] netlink: 224 bytes leftover after parsing attributes in process `syz.4.242'. [ 275.483363][ T1207] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 276.500788][ T1207] usb 5-1: Using ep0 maxpacket: 16 [ 276.666140][ T1207] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 277.130643][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.472906][ T1207] usb 5-1: Product: syz [ 277.907564][ T7054] siw: device registration error -23 [ 278.083836][ T1207] usb 5-1: Manufacturer: syz [ 278.088595][ T1207] usb 5-1: SerialNumber: syz [ 278.225671][ T1207] usb 5-1: config 0 descriptor?? [ 278.437078][ T1207] usb 5-1: can't set config #0, error -71 [ 278.492945][ T1207] usb 5-1: USB disconnect, device number 5 [ 278.943437][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 279.411002][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 279.420701][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.429784][ T10] usb 2-1: Product: syz [ 279.434677][ T10] usb 2-1: Manufacturer: syz [ 279.439423][ T10] usb 2-1: SerialNumber: syz [ 279.449559][ T10] usb 2-1: config 0 descriptor?? [ 279.459953][ T10] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 279.463392][ T7081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.253'. [ 279.572090][ T7091] Bluetooth: MGMT ver 1.23 [ 280.004041][ T10] sonixb 2-1:0.0: Error reading register 00: -32 [ 280.042754][ T10] usb 2-1: USB disconnect, device number 7 [ 280.522667][ T7100] siw: device registration error -23 [ 284.769699][ T7138] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.267'. [ 284.823444][ T7138] netlink: 5 bytes leftover after parsing attributes in process `syz.0.267'. [ 284.928110][ T7135] siw: device registration error -23 [ 285.606853][ T7148] netlink: 'syz.0.269': attribute type 11 has an invalid length. [ 285.614751][ T7148] netlink: 224 bytes leftover after parsing attributes in process `syz.0.269'. [ 287.489420][ T7159] netlink: 'syz.0.271': attribute type 11 has an invalid length. [ 287.497431][ T7159] netlink: 224 bytes leftover after parsing attributes in process `syz.0.271'. [ 290.311377][ T7173] netlink: 'syz.2.274': attribute type 11 has an invalid length. [ 290.319550][ T7173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.274'. [ 291.415753][ T7176] kvm: pic: non byte read [ 291.420969][ T7176] kvm: pic: level sensitive irq not supported [ 291.421077][ T7176] kvm: pic: non byte read [ 291.982979][ T7176] kvm: pic: level sensitive irq not supported [ 291.983063][ T7176] kvm: pic: non byte read [ 292.033040][ T7176] kvm: pic: level sensitive irq not supported [ 292.033118][ T7176] kvm: pic: non byte read [ 292.082926][ T7176] kvm: pic: level sensitive irq not supported [ 292.082983][ T7176] kvm: pic: non byte read [ 293.114483][ T7199] netlink: 'syz.1.279': attribute type 11 has an invalid length. [ 293.122694][ T7199] netlink: 224 bytes leftover after parsing attributes in process `syz.1.279'. [ 293.873399][ T7201] xt_NFQUEUE: number of total queues is 0 [ 296.862732][ T7227] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.723414][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 299.784200][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 299.793723][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 301.156263][ T1207] IPVS: starting estimator thread 0... [ 301.173553][ T7248] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 301.251198][ T7248] netlink: 'syz.0.290': attribute type 13 has an invalid length. [ 301.332735][ T7251] IPVS: using max 28 ests per chain, 67200 per kthread [ 302.500775][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.508926][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.345159][ T7281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.234425][ T7292] netlink: 412 bytes leftover after parsing attributes in process `syz.4.298'. [ 304.289503][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 304.553986][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.323965][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.709664][ T7248] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.726270][ T7248] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.762513][ T7248] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.833733][ T7293] xt_NFQUEUE: number of total queues is 0 [ 305.852619][ T7248] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.074099][ T7308] netlink: 'syz.2.300': attribute type 11 has an invalid length. [ 306.082117][ T7308] netlink: 224 bytes leftover after parsing attributes in process `syz.2.300'. [ 309.171799][ T7340] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.308'. [ 312.521878][ T7351] kvm: pic: single mode not supported [ 312.521910][ T7351] kvm: pic: level sensitive irq not supported [ 312.564770][ T7351] kvm: pic: non byte read [ 312.609742][ T7351] kvm: pic: level sensitive irq not supported [ 312.609816][ T7351] kvm: pic: non byte read [ 312.648217][ T7351] kvm: pic: non byte read [ 312.662739][ T5880] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 312.662918][ T7351] kvm: pic: non byte read [ 312.743008][ T7351] kvm: pic: non byte read [ 312.747843][ T7351] kvm: pic: level sensitive irq not supported [ 312.747922][ T7351] kvm: pic: non byte read [ 312.804257][ T7351] kvm: pic: non byte read [ 312.808976][ T7351] kvm: pic: non byte read [ 312.852907][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 312.951836][ T5880] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 313.012250][ T7351] kvm: pic: non byte read [ 313.041282][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.174077][ T5880] usb 3-1: Product: syz [ 313.245545][ T5880] usb 3-1: Manufacturer: syz [ 313.313310][ T5880] usb 3-1: SerialNumber: syz [ 313.487194][ T5880] usb 3-1: config 0 descriptor?? [ 313.702925][ T5880] usb-storage 3-1:0.0: USB Mass Storage device detected [ 314.230950][ T5880] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 314.239325][ T5880] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc6-syzkaller-00208-g3c21441eeffc) [ 314.239325][ T5880] Please send a copy of this message to and [ 314.268469][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.288873][ T7364] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 315.648864][ T7383] netlink: 'syz.1.315': attribute type 13 has an invalid length. [ 315.654629][ T5879] IPVS: starting estimator thread 0... [ 315.878582][ T7384] IPVS: using max 26 ests per chain, 62400 per kthread [ 315.921170][ T7373] hfs: unable to load iocharset "io#harset" [ 316.379795][ T7397] xt_NFQUEUE: number of total queues is 0 [ 317.073875][ T9] usb 3-1: USB disconnect, device number 6 [ 317.518112][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 317.958070][ T7414] vlan2: entered promiscuous mode [ 317.974789][ T7414] vlan2: entered allmulticast mode [ 317.984679][ T7414] hsr_slave_1: entered allmulticast mode [ 318.047211][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 320.848842][ T7445] siw: device registration error -23 [ 321.263643][ T7454] netlink: 'syz.4.330': attribute type 13 has an invalid length. [ 321.282809][ T9] IPVS: starting estimator thread 0... [ 321.299158][ T7453] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 321.372882][ T7456] IPVS: using max 24 ests per chain, 57600 per kthread [ 321.964138][ T7463] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.332'. [ 321.993925][ T7463] netlink: 5 bytes leftover after parsing attributes in process `syz.2.332'. [ 322.423001][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.429695][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.612595][ T5881] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 322.808688][ T7473] xt_NFQUEUE: number of total queues is 0 [ 322.872542][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 322.973280][ T5881] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 323.002486][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.037508][ T5881] usb 3-1: Product: syz [ 323.062391][ T5881] usb 3-1: Manufacturer: syz [ 323.071646][ T5881] usb 3-1: SerialNumber: syz [ 323.091096][ T5881] usb 3-1: config 0 descriptor?? [ 323.105809][ T5881] usb-storage 3-1:0.0: USB Mass Storage device detected [ 323.139087][ T5881] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 323.393139][ T5881] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc6-syzkaller-00208-g3c21441eeffc) [ 323.393139][ T5881] Please send a copy of this message to and [ 325.795217][ T7488] hfs: unable to load iocharset "io#harset" [ 325.922929][ T7500] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.340'. [ 325.959431][ T7500] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.340'. [ 329.533318][ T5881] usb 3-1: USB disconnect, device number 7 [ 330.751681][ T7524] siw: device registration error -23 [ 333.598629][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 333.768443][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 333.788630][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 333.831825][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 333.885727][ T5881] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.901443][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 333.972554][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 333.989933][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 334.008349][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 334.133131][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 334.323930][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 334.730338][ T5881] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.764256][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 334.792697][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.800954][ T24] usb 3-1: Product: syz [ 334.814260][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 334.852797][ T24] usb 3-1: Manufacturer: syz [ 334.863071][ T24] usb 3-1: SerialNumber: syz [ 334.904399][ T24] usb 3-1: config 0 descriptor?? [ 334.910277][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 334.923217][ T5881] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.975897][ T24] usb-storage 3-1:0.0: USB Mass Storage device detected [ 334.984276][ T5881] usb 1-1: string descriptor 0 read error: -22 [ 334.990819][ T5881] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 335.025943][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.056960][ T24] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 335.071801][ T24] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc6-syzkaller-00208-g3c21441eeffc) [ 335.071801][ T24] Please send a copy of this message to and [ 335.105667][ T5881] adutux 1-1:168.0: interrupt endpoints not found [ 335.817971][ T5881] usb 1-1: USB disconnect, device number 3 [ 335.947331][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 335.953748][ T7569] vlan2: entered promiscuous mode [ 335.975810][ T7569] vlan2: entered allmulticast mode [ 335.981494][ T7569] hsr_slave_1: entered allmulticast mode [ 335.996999][ T7566] hfs: unable to load iocharset "io#harset" [ 336.552720][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 336.802729][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 337.133981][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 337.222597][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 337.253088][ T5879] usb 3-1: USB disconnect, device number 8 [ 337.292734][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.322692][ T24] usb 2-1: Product: syz [ 337.355437][ T24] usb 2-1: Manufacturer: syz [ 337.497269][ T24] usb 2-1: SerialNumber: syz [ 339.040013][ T24] usb 2-1: config 0 descriptor?? [ 339.093793][ T24] usb-storage 2-1:0.0: USB Mass Storage device detected [ 339.964270][ T24] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 340.023149][ T24] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc6-syzkaller-00208-g3c21441eeffc) [ 340.023149][ T24] Please send a copy of this message to and [ 340.052093][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.352767][ T7614] lo speed is unknown, defaulting to 1000 [ 340.573317][ T24] usb 2-1: USB disconnect, device number 8 [ 344.765421][ T7636] lo speed is unknown, defaulting to 1000 [ 348.551932][ T7693] mmap: syz.0.373 (7693) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 348.992609][ T5879] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 349.318666][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 349.338884][ T5879] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 349.369173][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.391729][ T5879] usb 3-1: Product: syz [ 349.409125][ T5879] usb 3-1: Manufacturer: syz [ 349.419970][ T5879] usb 3-1: SerialNumber: syz [ 349.577147][ T5879] usb 3-1: config 0 descriptor?? [ 349.618437][ T5879] usb-storage 3-1:0.0: USB Mass Storage device detected [ 350.125703][ T5879] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 350.812526][ T5879] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc6-syzkaller-00208-g3c21441eeffc) [ 350.812526][ T5879] Please send a copy of this message to and [ 351.100176][ T7712] hfs: unable to load iocharset "io#harset" [ 352.261819][ T9] usb 3-1: USB disconnect, device number 9 [ 353.938493][ T5845] non-paged memory [ 353.942932][ T5845] list_del corruption, ffff88801f3c7d80->next is LIST_POISON1 (dead000000000100) [ 353.961117][ T5845] ------------[ cut here ]------------ [ 353.967438][ T5845] kernel BUG at lib/list_debug.c:58! [ 354.002764][ T5845] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 354.009179][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: kworker/u9:9 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 354.021580][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.031681][ T5845] Workqueue: hci4 hci_conn_timeout [ 354.036933][ T5845] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 354.044187][ T5845] Code: e0 09 c1 8b 48 89 de e8 80 e2 6f fc 90 0f 0b 4c 89 e7 e8 85 8d 48 fd 48 c7 c7 40 0a c1 8b 48 89 de 4c 89 e2 e8 63 e2 6f fc 90 <0f> 0b 4c 89 e7 e8 68 8d 48 fd 48 c7 c7 a0 0a c1 8b 48 89 de 4c 89 [ 354.064282][ T5845] RSP: 0018:ffffc90004dbfa20 EFLAGS: 00010246 [ 354.070912][ T5845] RAX: 000000000000004e RBX: ffff88801f3c7d80 RCX: 3e380d5baeb58500 [ 354.079106][ T5845] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 354.087218][ T5845] RBP: ffffffff8a5f8aa0 R08: ffffc90004dbf707 R09: 1ffff920009b7ee0 [ 354.095480][ T5845] R10: dffffc0000000000 R11: fffff520009b7ee1 R12: dead000000000100 [ 354.103602][ T5845] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 354.112155][ T5845] FS: 0000000000000000(0000) GS:ffff8881261f9000(0000) knlGS:0000000000000000 [ 354.121402][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.128200][ T5845] CR2: 00007f58e4d7d2d8 CR3: 000000002dfa0000 CR4: 00000000003526f0 [ 354.136301][ T5845] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.144755][ T5845] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.153474][ T5845] Call Trace: [ 354.157357][ T5845] [ 354.160782][ T5845] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 354.167013][ T5845] hci_cancel_connect_sync+0xc8/0x120 [ 354.172567][ T5845] hci_abort_conn+0x191/0x330 [ 354.177564][ T5845] ? process_scheduled_works+0x9ec/0x17a0 [ 354.183614][ T5845] process_scheduled_works+0xadb/0x17a0 [ 354.189436][ T5845] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.195569][ T5845] worker_thread+0x8a0/0xda0 [ 354.200297][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.206759][ T5845] ? __kthread_parkme+0x7b/0x200 [ 354.212011][ T5845] kthread+0x70e/0x8a0 [ 354.216132][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 354.221906][ T5845] ? __pfx_kthread+0x10/0x10 [ 354.226538][ T5845] ? __pfx_kthread+0x10/0x10 [ 354.231422][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.236746][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.242043][ T5845] ? __pfx_kthread+0x10/0x10 [ 354.246991][ T5845] ret_from_fork+0x4b/0x80 [ 354.251814][ T5845] ? __pfx_kthread+0x10/0x10 [ 354.256712][ T5845] ret_from_fork_asm+0x1a/0x30 [ 354.262821][ T5845] [ 354.265866][ T5845] Modules linked in: [ 354.270683][ T5845] ---[ end trace 0000000000000000 ]--- [ 354.363014][ T5845] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 354.378775][ T5845] Code: e0 09 c1 8b 48 89 de e8 80 e2 6f fc 90 0f 0b 4c 89 e7 e8 85 8d 48 fd 48 c7 c7 40 0a c1 8b 48 89 de 4c 89 e2 e8 63 e2 6f fc 90 <0f> 0b 4c 89 e7 e8 68 8d 48 fd 48 c7 c7 a0 0a c1 8b 48 89 de 4c 89 [ 354.407313][ T5845] RSP: 0018:ffffc90004dbfa20 EFLAGS: 00010246 [ 354.414051][ T5845] RAX: 000000000000004e RBX: ffff88801f3c7d80 RCX: 3e380d5baeb58500 [ 354.423000][ T5845] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 354.432888][ T5845] RBP: ffffffff8a5f8aa0 R08: ffffc90004dbf707 R09: 1ffff920009b7ee0 [ 354.442592][ T5845] R10: dffffc0000000000 R11: fffff520009b7ee1 R12: dead000000000100 [ 354.451700][ T5845] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 354.464750][ T5845] FS: 0000000000000000(0000) GS:ffff8881261f9000(0000) knlGS:0000000000000000 [ 354.480252][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.495970][ T5845] CR2: 000020000088c030 CR3: 000000003121a000 CR4: 00000000003526f0 [ 354.510675][ T5845] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.519376][ T5845] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.532965][ T5845] Kernel panic - not syncing: Fatal exception [ 354.539465][ T5845] Kernel Offset: disabled [ 354.543904][ T5845] Rebooting in 86400 seconds..