last executing test programs: 1m25.878396835s ago: executing program 0 (id=232): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x58, 0x1b, 0x0, 0x70bd2d, 0x25dfdbfb, {0x2}, [@nested={0x39, 0x17, 0x0, 0x1, [@generic="407f", @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@loopback}, @generic="9b4044673df2b489fed6b4df98a7225ad976b1e5227d6cd5c45b540ac2a293", @typed={0x8, 0xe5, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xc9}]}, @typed={0x8, 0xa8, 0x0, 0x0, @uid}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000054) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x2, 0x0) fcntl$setstatus(r8, 0x4, 0x2000) vmsplice(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) 1m21.743368496s ago: executing program 0 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000080), &(0x7f0000000100)=0x4) shutdown(r3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x1000000, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd3702374d402ab73e482db7ec1e0a5748900"}, 0xd8) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000400)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e886f4d6458ca8eaa02cafb7a6f64655f686172646c696d69743d372c20"]) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc0080, &(0x7f0000000180)={[{@metacopy_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) 1m19.919214501s ago: executing program 0 (id=241): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000300)={0x3, "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"}, 0xff, 0x800) recvmmsg(r3, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/153, 0x99}], 0x3, &(0x7f0000000780)=""/161, 0xa1}, 0x4}, {{&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000500)=""/42, 0x2a}], 0x2, &(0x7f0000000980)=""/196, 0xc4}, 0x6}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/33, 0x21}, {&(0x7f0000000b40)=""/7, 0x7}], 0x2, &(0x7f0000000bc0)=""/27, 0x1b}, 0x1}, {{&(0x7f0000000c00)=@x25, 0x80, &(0x7f0000000cc0)=[{0x0}], 0x1, &(0x7f0000000d00)=""/72, 0x48}, 0x101}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/17, 0x11}], 0x1, &(0x7f0000000e80)=""/131, 0x83}, 0x2}, {{&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003300), 0x0, &(0x7f0000003340)=""/67, 0x43}, 0x724}, {{&(0x7f00000033c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004580)=[{&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/126, 0x7e}, {&(0x7f00000044c0)=""/135, 0x87}], 0x3, &(0x7f00000045c0)=""/201, 0xc9}, 0x2}, {{&(0x7f00000046c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004740)=""/200, 0xc8}, {&(0x7f0000004840)=""/31, 0x1f}, {&(0x7f0000004880)=""/240, 0xf0}], 0x3, &(0x7f00000049c0)=""/4096, 0x1000}, 0x4}], 0x8, 0x11001, &(0x7f0000005ac0)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000122adeac80a0000ffdbdf253904dedc7e368570cf67fe9a3f399a3620cc71da", @ANYRES32=0x0, @ANYBLOB="850b01000000000014000300766c616e3100000000000000000000000a000100ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000000000", @ANYBLOB="00400000000000001c0012800b00010067656e65766500000c0002800800010001bd4c8f9f64dd98e5656e65766531000000000000000000623be4b29a2f096619fc0e27ad2afd4f79f8082cb1874fb6d758cf227e94c8dabb2fa9c3c3b09d7f027f17a7e6ed0802cae07addd419bf149a274c9a1f5d13b20e8870fb25be03baf259cafb6ecbfb92b9d1bf199413d449d868d480"], 0x50}}, 0x2000000) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m18.274898132s ago: executing program 0 (id=248): r0 = io_uring_setup(0x664c, &(0x7f0000000500)) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000380)=0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r7) 1m16.480557132s ago: executing program 0 (id=251): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000357000/0x3000)=nil, 0x3000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 1m14.635543695s ago: executing program 0 (id=258): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040840}, 0x20040000) 58.947372836s ago: executing program 32 (id=258): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040840}, 0x20040000) 25.13726631s ago: executing program 1 (id=346): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x154}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendfile(r3, r3, 0x0, 0x3) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x3, 0xfffc, 0x1800}, {0x0, 0xe65b}], 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f]) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = dup(0xffffffffffffffff) sendto$inet6(r5, &(0x7f0000000280)="1e", 0x1, 0x4041, 0x0, 0x0) fanotify_mark(r1, 0x102, 0x48001050, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 23.653636127s ago: executing program 1 (id=349): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="a38fff48010000003448412bac000000", 0x10}, {&(0x7f0000000900)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a04", 0xa1}, {&(0x7f00000006c0)="b87dbb9f67fb505f3e50af156971e4c9d85eb220be1dfce3e92a74a4d5f164804bed590d5e433a7c233c77ae0bcd80c7a8f1a472ff1f8426ac7fc4517a2211bee8b892a5a72acc2ef443386afb38979d7ef1629c4b7c8845502556c12dcdc469f53cacfbcff821968fb560d1be7e40de4c0e9e194e1b1f8ba738c114155ed4b85671d587064b849d3bb60ed38d20a67a2650628b74df0a5763e3e85bdaa8822e98f906c34ebd05e0017e9c3017f18d53cb30f5cf9124bb", 0xb7}, {&(0x7f0000000780)="58cee89c15960870bb9be5aa7d31051633b84e2e8caa66ac0b327e168c92f15ec2ea8ae1903009c2c9954d2680128a7ea31b61c523ae08724d6a5fd81e6e3d72addb9ccc56e92c65bb", 0x49}], 0x5}], 0x1, 0x4001000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 22.066255764s ago: executing program 1 (id=356): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x10001, 0x2, @thr={0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 20.359206785s ago: executing program 1 (id=360): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x154}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendfile(r3, r3, 0x0, 0x3) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x3, 0xfffc, 0x1800}, {0x0, 0xe65b}], 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f]) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = dup(0xffffffffffffffff) sendto$inet6(r5, &(0x7f0000000280)="1e", 0x1, 0x4041, 0x0, 0x0) fanotify_mark(r1, 0x102, 0x48001050, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 18.265412352s ago: executing program 1 (id=363): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x2cc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) openat$procfs(0xffffffffffffff9c, &(0x7f0000004800)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) unshare(0x42000000) 17.102767802s ago: executing program 3 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102600"], &(0x7f0000000480)='GPL\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) ioperm(0x3, 0x4, 0x1000008) 16.663483276s ago: executing program 3 (id=368): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000100010008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 15.243176242s ago: executing program 5 (id=371): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000007880)={0x1, 0x58, &(0x7f0000007800)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000078c0)=ANY=[], 0x50) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) socket(0x400000000010, 0x3, 0x0) r2 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syslog(0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x8, 0x11, r3, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r4 = syz_open_dev$mouse(0x0, 0x4, 0x200000) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) syslog(0x4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) sched_setscheduler(r6, 0x5, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0xfd, 0x0}, 0x4623, 0x0, 'dh\x00', 0x1, 0x10001, 0x49}, 0x2c) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) 10.947446463s ago: executing program 2 (id=377): openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) 10.63987676s ago: executing program 5 (id=378): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socket$kcm(0x11, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}]}}}]}, 0x40}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 9.967393187s ago: executing program 2 (id=379): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x8, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000024c0)=@gettaction={0x18, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_io_uring_setup(0x2bcd, &(0x7f0000000200)={0x0, 0x4e59, 0x2000, 0x3, 0x121, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000300)=0x80000000) listen(r11, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095fec7"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r12, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r11}, 0x20) recvmmsg(r11, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) shutdown(r11, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x80, 0x0, 0x0, 0x4) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1000, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010009bd7000000000003b0000000800", @ANYRES32=r13], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 9.947223151s ago: executing program 3 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 9.579735282s ago: executing program 3 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1816c1, 0x24) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r7, 0x0, 0x0, 0x10002, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8.307486259s ago: executing program 3 (id=384): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x64040011, 0x1}) 7.879141201s ago: executing program 1 (id=385): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000300)={0x3, "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"}, 0xff, 0x800) recvmmsg(r3, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/153, 0x99}], 0x3, &(0x7f0000000780)=""/161, 0xa1}, 0x4}, {{&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000500)=""/42, 0x2a}], 0x2, &(0x7f0000000980)=""/196, 0xc4}, 0x6}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/33, 0x21}, {&(0x7f0000000b40)=""/7, 0x7}], 0x2, &(0x7f0000000bc0)=""/27, 0x1b}, 0x1}, {{&(0x7f0000000c00)=@x25, 0x80, &(0x7f0000000cc0)=[{0x0}], 0x1, &(0x7f0000000d00)=""/72, 0x48}, 0x101}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/17, 0x11}], 0x1, &(0x7f0000000e80)=""/131, 0x83}, 0x2}, {{&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003300), 0x0, &(0x7f0000003340)=""/67, 0x43}, 0x724}, {{&(0x7f00000033c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004580)=[{&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/126, 0x7e}, {&(0x7f00000044c0)=""/135, 0x87}], 0x3, &(0x7f00000045c0)=""/201, 0xc9}, 0x2}, {{&(0x7f00000046c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004740)=""/200, 0xc8}, {&(0x7f0000004840)=""/31, 0x1f}, {&(0x7f0000004880)=""/240, 0xf0}], 0x3, &(0x7f00000049c0)=""/4096, 0x1000}, 0x4}], 0x8, 0x11001, &(0x7f0000005ac0)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000122adeac80a0000ffdbdf253904dedc7e368570cf67fe9a3f399a3620cc71da", @ANYRES32=0x0, @ANYBLOB="850b01000000000014000300766c616e3100000000000000000000000a000100ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000000000", @ANYBLOB="00400000000000001c0012800b00010067656e65766500000c0002800800010001bd4c8f9f64dd98e5656e65766531000000000000000000623be4b29a2f096619fc0e27ad2afd4f79f8082cb1874fb6d758cf227e94c8dabb2fa9c3c3b09d7f027f17a7e6ed0802cae07addd419bf149a274c9a1f5d13b20e8870fb25be03baf259cafb6ecbfb92b9d1bf199413d449d868d480"], 0x50}}, 0x2000000) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 7.277178196s ago: executing program 2 (id=387): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x154}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendfile(r3, r3, 0x0, 0x3) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x3, 0xfffc, 0x1800}, {0x0, 0xe65b}], 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x1]) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = dup(0xffffffffffffffff) sendto$inet6(r5, &(0x7f0000000280)="1e", 0x1, 0x4041, 0x0, 0x0) fanotify_mark(r1, 0x102, 0x48001050, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 6.107882681s ago: executing program 2 (id=389): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000001480)="fbb0", 0x2}], 0x1, 0xe) 5.73316357s ago: executing program 5 (id=390): openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) 5.562954493s ago: executing program 2 (id=391): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) close(0xffffffffffffffff) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}], 0x2, 0xfaf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'trylock', ' ', 'none'}, 0xd) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @multicast}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900080000000000b56a78b1a24d"], 0x2c}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 5.562102387s ago: executing program 3 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x8, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4000000) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_io_uring_setup(0x2bcd, &(0x7f0000000200)={0x0, 0x4e59, 0x2000, 0x3, 0x121, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000300)=0x80000000) listen(r11, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095fe"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r12, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r11}, 0x20) recvmmsg(r11, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x80, 0x0, 0x0, 0x4) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1000, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010009bd7000000000003b0000000800", @ANYRES32=r13, @ANYBLOB="0600cd00000000005200330080200900ffffffffffff0802110000005050505050505f0004000000000000006400001001000301040602"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 4.163524949s ago: executing program 5 (id=394): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) shutdown(0xffffffffffffffff, 0x1) 3.626945584s ago: executing program 5 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0xe765d31487654569, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x20004040) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0xc0a85320, &(0x7f00000000c0)={0x1080}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.714295551s ago: executing program 4 (id=397): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000380), 0x0, 0x1}}, 0x40) 1.889768194s ago: executing program 5 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x8, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000024c0)=@gettaction={0x18, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_io_uring_setup(0x2bcd, &(0x7f0000000200)={0x0, 0x4e59, 0x2000, 0x3, 0x121, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000300)=0x80000000) listen(r11, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095fec7"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r12, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r11}, 0x20) recvmmsg(r11, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) shutdown(r11, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x80, 0x0, 0x0, 0x4) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1000, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010009bd7000000000003b0000000800", @ANYRES32=r13], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 1.499429033s ago: executing program 4 (id=399): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000040)="027ff2002e40a2bdc63e38f59cbf20afd3806c97da07c8cc17b550b4867833d8ed9e34fe9731292ccbf2df1a089aa40f2eb216b034b1c28807a94d1096922ad64c9a92c4aad9982ab3342d4795e7fe59c88f7745272e9fb3d853", 0x5a, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x80c010, &(0x7f0000000240), 0x0, 0x240, &(0x7f0000000700)="$eJzs3TFoJFUcBvBvZnc9926RUxtBUEFENBDOTrA5G4UDOQ4RQYUTERslEWKCXZLKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnUSiWVGy647c/H4wyczue/N/w8z3dpvHBmiti0kuJ+kkmUvSS1KcbHBPvV08Otzo71xPhsMnfypG7erj2nG/C0nWkjycZLss8nI3Wdl6dv+X3cfvf3O5d9/7W8/0Z3qRRw729544fO/qGx9deWjli69+uFrkcgZ/uq7pK8a81i2S2/6LYv8TRbfpEbTY+r9veu31D7+ucn97kntH+e+lTH3z3lq6abuXB9/9u75v//jlnVMZL9CY4bBXfQauDYHWKZMMUpTzSer9spyfr7/Df9M5X76yuPTa3EuLywsvNj1TAdMySPYe++Tcxxf+kv/vO3X+gRtXlf+nrm1+W+0fdpoeDTBLVf7nnl99IPIPrSP/0F7yD+0l/9Be8g/tJf/QXvIP7SX/0F7yD+0l/9BeJ/MPALTL8NxZVg33M/2VyMCsNT3/AAAAAAAAAAAAAAAAAAAAp230d64fb7Oq+dk7ycGjSbrj6ndGv0ec3Dz6e/7nomr2h6LuNpHn7p7wBBP6oOHV17d812z9z+9qtv7qQrK2nuRSt3v6+SuOnr+zu/Uf3u+9MGGBCT3ydLP1f9tstv6V3eTTav65NG7+KXPH6P/4+WdQ3b8J67/664QnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGZ+DwAA///zA2u1") r2 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4f1d, 0x1, @mcast1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000d80)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYBLOB="373c41cab7e987f3ed79cca32727e0be448f7683baee4ff4c67c9c081a4477730603b28825142267c65c3a2500251ad673d2b0f0b7c54793a123be1e59941ef74f2e660d61f7f6372f4ce5036bc79adfe3a359cec19cbe88ec89071b2408c75d1f5f0d80b0", @ANYRESDEC=r0, @ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="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", @ANYRESDEC=r2], 0xd8) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f00000001c0)='./file0\x00', 0x402, &(0x7f0000000700)=ANY=[], 0x2, 0x204, &(0x7f0000000b40)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = getpid() r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchdir(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0xee01, 0x0) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x24020000) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r8, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xe80}, {0x0, 0xe00}], 0x10000000000000fb) umount2(&(0x7f0000000040)='.\x00', 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 458.803267ms ago: executing program 4 (id=400): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x154}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendfile(r3, r3, 0x0, 0x3) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x3, 0xfffc, 0x1800}, {0x0, 0xe65b}], 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x1]) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = dup(0xffffffffffffffff) sendto$inet6(r5, &(0x7f0000000280)="1e", 0x1, 0x4041, 0x0, 0x0) fanotify_mark(r1, 0x102, 0x48001050, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 347.701083ms ago: executing program 4 (id=401): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011) 223.514755ms ago: executing program 4 (id=402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 41.88813ms ago: executing program 2 (id=403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0xa1ea}, 0x1c) 0s ago: executing program 4 (id=404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 101.156491][ T5847] cgroup: Unknown subsys name 'net' [ 101.286488][ T5847] cgroup: Unknown subsys name 'cpuset' [ 101.296234][ T5847] cgroup: Unknown subsys name 'rlimit' [ 101.499577][ T24] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 102.979150][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.101188][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.116696][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.125965][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.135123][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.144767][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.155091][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.163200][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.171089][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.178720][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.205789][ T5884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.211855][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.220799][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.228113][ T5885] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.237297][ T5888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.237690][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.245995][ T5888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.259300][ T5888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.266833][ T5885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.274762][ T5885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.275539][ T5887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.290645][ T5888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.290865][ T5887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.299032][ T5888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.308453][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.319273][ T5887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.326600][ T5885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.338970][ T5888] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.347246][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.355950][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.379553][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.170493][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 107.340164][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 107.464361][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 107.570180][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 107.669478][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 107.702916][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.710160][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.718468][ T5870] bridge_slave_0: entered allmulticast mode [ 107.726423][ T5870] bridge_slave_0: entered promiscuous mode [ 107.786132][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 107.799046][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.806653][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.814452][ T5870] bridge_slave_1: entered allmulticast mode [ 107.822426][ T5870] bridge_slave_1: entered promiscuous mode [ 107.938780][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.946353][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.954769][ T5866] bridge_slave_0: entered allmulticast mode [ 107.963777][ T5866] bridge_slave_0: entered promiscuous mode [ 108.046106][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.054276][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.062794][ T5866] bridge_slave_1: entered allmulticast mode [ 108.070446][ T5866] bridge_slave_1: entered promiscuous mode [ 108.094080][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.101432][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.108652][ T5874] bridge_slave_0: entered allmulticast mode [ 108.117076][ T5874] bridge_slave_0: entered promiscuous mode [ 108.145931][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.243197][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.250498][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.261543][ T5874] bridge_slave_1: entered allmulticast mode [ 108.269241][ T5874] bridge_slave_1: entered promiscuous mode [ 108.287636][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.304719][ T5873] Bluetooth: hci2: command tx timeout [ 108.316616][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.324383][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.332070][ T5868] bridge_slave_0: entered allmulticast mode [ 108.339625][ T5868] bridge_slave_0: entered promiscuous mode [ 108.362964][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.370152][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.377885][ T5864] bridge_slave_0: entered allmulticast mode [ 108.383578][ T5867] Bluetooth: hci0: command tx timeout [ 108.386367][ T5864] bridge_slave_0: entered promiscuous mode [ 108.389819][ T5873] Bluetooth: hci3: command tx timeout [ 108.399014][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.408439][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.415703][ T5864] bridge_slave_1: entered allmulticast mode [ 108.424261][ T5864] bridge_slave_1: entered promiscuous mode [ 108.451801][ T5873] Bluetooth: hci5: command tx timeout [ 108.457759][ T5867] Bluetooth: hci4: command tx timeout [ 108.457772][ T5888] Bluetooth: hci1: command tx timeout [ 108.496057][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.503701][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.510901][ T5868] bridge_slave_1: entered allmulticast mode [ 108.520492][ T5868] bridge_slave_1: entered promiscuous mode [ 108.530707][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.562231][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.593768][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.613344][ T5870] team0: Port device team_slave_0 added [ 108.637769][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.665840][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.695606][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.740264][ T5870] team0: Port device team_slave_1 added [ 108.767209][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.845002][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.852328][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.859541][ T5865] bridge_slave_0: entered allmulticast mode [ 108.868455][ T5865] bridge_slave_0: entered promiscuous mode [ 108.910393][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.938179][ T5866] team0: Port device team_slave_0 added [ 108.946240][ T5864] team0: Port device team_slave_0 added [ 108.956050][ T5864] team0: Port device team_slave_1 added [ 108.964465][ T5874] team0: Port device team_slave_0 added [ 108.989274][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.996856][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.004624][ T5865] bridge_slave_1: entered allmulticast mode [ 109.013591][ T5865] bridge_slave_1: entered promiscuous mode [ 109.023752][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.030693][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.057233][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.088582][ T5866] team0: Port device team_slave_1 added [ 109.117411][ T5874] team0: Port device team_slave_1 added [ 109.157085][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.164227][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.190606][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.219624][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.227207][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.254405][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.268164][ T5868] team0: Port device team_slave_0 added [ 109.277461][ T5868] team0: Port device team_slave_1 added [ 109.314855][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.322128][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.348458][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.417441][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.424822][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.451124][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.464285][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.471256][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.498384][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.521250][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.549288][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.556380][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.589446][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.603729][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.610773][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.637618][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.649645][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.657463][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.683779][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.707903][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.754230][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.761207][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.787853][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.921765][ T5865] team0: Port device team_slave_0 added [ 109.936759][ T5870] hsr_slave_0: entered promiscuous mode [ 109.943486][ T5870] hsr_slave_1: entered promiscuous mode [ 110.013577][ T5866] hsr_slave_0: entered promiscuous mode [ 110.020136][ T5866] hsr_slave_1: entered promiscuous mode [ 110.027190][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 110.033694][ T5866] Cannot create hsr debugfs directory [ 110.042089][ T5865] team0: Port device team_slave_1 added [ 110.095103][ T5864] hsr_slave_0: entered promiscuous mode [ 110.102576][ T5864] hsr_slave_1: entered promiscuous mode [ 110.108815][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 110.114893][ T5864] Cannot create hsr debugfs directory [ 110.131545][ T5874] hsr_slave_0: entered promiscuous mode [ 110.138031][ T5874] hsr_slave_1: entered promiscuous mode [ 110.144758][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 110.150489][ T5874] Cannot create hsr debugfs directory [ 110.245932][ T5868] hsr_slave_0: entered promiscuous mode [ 110.253261][ T5868] hsr_slave_1: entered promiscuous mode [ 110.259519][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 110.265634][ T5868] Cannot create hsr debugfs directory [ 110.344691][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.352212][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.379230][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.390007][ T5867] Bluetooth: hci2: command tx timeout [ 110.398072][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.405093][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.431050][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.451617][ T5867] Bluetooth: hci3: command tx timeout [ 110.451656][ T5873] Bluetooth: hci0: command tx timeout [ 110.536738][ T5873] Bluetooth: hci5: command tx timeout [ 110.536761][ T5867] Bluetooth: hci4: command tx timeout [ 110.536777][ T5888] Bluetooth: hci1: command tx timeout [ 110.836177][ T5865] hsr_slave_0: entered promiscuous mode [ 110.843188][ T5865] hsr_slave_1: entered promiscuous mode [ 110.849564][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 110.856186][ T5865] Cannot create hsr debugfs directory [ 111.204515][ T5870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.259226][ T5870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.282482][ T5870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.314689][ T5870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.393207][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.405567][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.418798][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.449584][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.531233][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.545382][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.560886][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.587215][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.725025][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.738623][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.751198][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.765271][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.909329][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.929206][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.963411][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.976042][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.048546][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.159890][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.168780][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.195648][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.226618][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.235369][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.247243][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.274154][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.281490][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.358630][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.365808][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.406709][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.425233][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.450460][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.458041][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.466765][ T5873] Bluetooth: hci2: command tx timeout [ 112.507427][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.514609][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.534540][ T5867] Bluetooth: hci3: command tx timeout [ 112.540068][ T5873] Bluetooth: hci0: command tx timeout [ 112.586413][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.611861][ T5873] Bluetooth: hci5: command tx timeout [ 112.617327][ T5873] Bluetooth: hci1: command tx timeout [ 112.622358][ T5867] Bluetooth: hci4: command tx timeout [ 112.642959][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.674244][ T2130] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.681517][ T2130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.712263][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.741550][ T2130] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.748730][ T2130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.783443][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.806513][ T2130] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.813718][ T2130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.863997][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.874938][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.882163][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.958028][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.976030][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.037490][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.044735][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.057836][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.065092][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.133846][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.141068][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.153823][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.160993][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.699868][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.069251][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.179611][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.274175][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.472430][ T5864] veth0_vlan: entered promiscuous mode [ 114.494232][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.538304][ T5867] Bluetooth: hci2: command tx timeout [ 114.566671][ T5866] veth0_vlan: entered promiscuous mode [ 114.590134][ T5866] veth1_vlan: entered promiscuous mode [ 114.610606][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.622227][ T5867] Bluetooth: hci0: command tx timeout [ 114.627655][ T5867] Bluetooth: hci3: command tx timeout [ 114.637540][ T5864] veth1_vlan: entered promiscuous mode [ 114.698756][ T5867] Bluetooth: hci4: command tx timeout [ 114.698775][ T5888] Bluetooth: hci1: command tx timeout [ 114.698824][ T5888] Bluetooth: hci5: command tx timeout [ 114.839170][ T5866] veth0_macvtap: entered promiscuous mode [ 114.874375][ T5874] veth0_vlan: entered promiscuous mode [ 114.889423][ T5866] veth1_macvtap: entered promiscuous mode [ 114.962053][ T5870] veth0_vlan: entered promiscuous mode [ 114.981221][ T5874] veth1_vlan: entered promiscuous mode [ 115.008663][ T5864] veth0_macvtap: entered promiscuous mode [ 115.031245][ T5865] veth0_vlan: entered promiscuous mode [ 115.051992][ T5870] veth1_vlan: entered promiscuous mode [ 115.065931][ T5864] veth1_macvtap: entered promiscuous mode [ 115.088570][ T5865] veth1_vlan: entered promiscuous mode [ 115.103658][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.118379][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.159484][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.192869][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.200263][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.210290][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.239494][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.249494][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.286896][ T5874] veth0_macvtap: entered promiscuous mode [ 115.321107][ T5870] veth0_macvtap: entered promiscuous mode [ 115.329471][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.352719][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.373426][ T5865] veth0_macvtap: entered promiscuous mode [ 115.395216][ T5874] veth1_macvtap: entered promiscuous mode [ 115.402950][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.414423][ T1105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.483387][ T5870] veth1_macvtap: entered promiscuous mode [ 115.515282][ T5865] veth1_macvtap: entered promiscuous mode [ 115.538965][ T5868] veth0_vlan: entered promiscuous mode [ 115.566322][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.588755][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.623283][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.634465][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.651774][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.659012][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.662105][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.695227][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.705663][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.729321][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.779021][ T5868] veth1_vlan: entered promiscuous mode [ 115.789700][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.803694][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.828645][ T1105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.870171][ T1105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.879221][ T1105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.919556][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.934073][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.948983][ T2130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.952190][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.961834][ T2130] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.973553][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.045988][ T2130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.056170][ T2130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.067505][ T2130] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.141573][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.149444][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.225987][ T5868] veth0_macvtap: entered promiscuous mode [ 116.253255][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.256443][ T5868] veth1_macvtap: entered promiscuous mode [ 116.261115][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.278486][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.301141][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.313493][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.471140][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.518365][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.544073][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.652967][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.706256][ T2130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.772838][ T2130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.659981][ T5987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.710188][ T5987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.835758][ T5987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.844951][ T2130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.864288][ T2130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.872355][ T5987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.882067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.901946][ T5949] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 118.013239][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.034625][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.090412][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.109387][ T6030] loop3: detected capacity change from 0 to 8 [ 118.122786][ T5949] usb 3-1: not running at top speed; connect to a high speed hub [ 118.149509][ T6030] squashfs image failed sanity check [ 118.182749][ T5949] usb 3-1: config 128 interface 0 has no altsetting 0 [ 118.205758][ T5949] usb 3-1: New USB device found, idVendor=15a4, idProduct=901b, bcdDevice=7a.d1 [ 118.236116][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.268798][ T5949] usb 3-1: Product: syz [ 118.295022][ T5949] usb 3-1: Manufacturer: syz [ 118.321487][ T5949] usb 3-1: SerialNumber: syz [ 118.344636][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.391903][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.753810][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.766908][ T6018] capability: warning: `syz.2.8' uses 32-bit capabilities (legacy support in use) [ 118.769041][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.841686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 118.920745][ T30] audit: type=1326 audit(1758691937.326:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1d98eec9 code=0x7ffc0000 [ 118.940791][ T5949] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 118.943462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 118.959066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.028620][ T5949] dvb_usb_af9015 3-1:128.0: probe with driver dvb_usb_af9015 failed with error -22 [ 119.062739][ T6037] loop1: detected capacity change from 0 to 1024 [ 119.221741][ T30] audit: type=1326 audit(1758691937.326:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1d98eec9 code=0x7ffc0000 [ 119.258689][ T5949] usb 3-1: USB disconnect, device number 2 [ 119.496994][ T30] audit: type=1326 audit(1758691937.326:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef1d98eec9 code=0x7ffc0000 [ 119.521343][ T30] audit: type=1326 audit(1758691937.326:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1d98eec9 code=0x7ffc0000 [ 119.562503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.821892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.873032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.974603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.983630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.281839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 120.503401][ T30] audit: type=1326 audit(1758691937.326:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef1d990de7 code=0x7ffc0000 [ 120.961568][ T30] audit: type=1326 audit(1758691937.326:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fef1d990d5c code=0x7ffc0000 [ 121.545774][ T30] audit: type=1326 audit(1758691937.326:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fef1d990c94 code=0x7ffc0000 [ 122.314941][ T30] audit: type=1326 audit(1758691937.326:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fef1d990c94 code=0x7ffc0000 [ 122.727828][ T30] audit: type=1326 audit(1758691937.326:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fef1d98db2a code=0x7ffc0000 [ 122.933324][ T30] audit: type=1326 audit(1758691937.326:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1d98eec9 code=0x7ffc0000 [ 123.146626][ T6062] process 'syz.4.15' launched '/dev/fd/10' with NULL argv: empty string added [ 124.127321][ T6067] kAFS: unable to lookup cell 'syz0.r™iXýÕßðÒ<̧®© +âÔR!K+K™áû4ÚÍö[Ÿ“EšýÖîê¯dî<¾æ6ócº7Ë( nÅÙÓÅ@À×8A¯5W®/7|{ÒÚü?îÇhÇT•³8#&3ræ?3ÚUü<·ÚG`-իǾóQ8õ%¹$­lH•YïL5еžYÏ^÷!!–\p"È3¹Ä!£ò· [ 124.127321][ T6067] ÛñÙÔh1„#-¹ï*·º„EºÍ=î)ú½¥"À6<Ú—H#.‚ýLÝÊ(˜Ü[Ý1„hã¯uC8yÞê½Ða½HÚ'(ùè‘lÚ“—+#-€nоYMËÆî²Àÿð«%' [ 126.746968][ T6068] delete_channel: no stack [ 130.322922][ T6079] sctp: failed to load transform for md5: -2 [ 133.602959][ T6114] loop4: detected capacity change from 0 to 128 [ 133.951570][ T6114] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 134.030245][ T5871] udevd[5871]: incorrect ext4 checksum on /dev/loop4 [ 134.375513][ T6114] loop4: detected capacity change from 0 to 8 [ 134.399214][ T6114] squashfs: Unknown parameter 'xœìÝ1h$Uðofw' [ 135.931756][ T6129] loop2: detected capacity change from 0 to 2048 [ 136.348379][ T6129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.461833][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 137.518338][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.316236][ T6149] loop0: detected capacity change from 0 to 4096 [ 138.502525][ T6149] ntfs3: Unknown parameter '`iscard' [ 138.713024][ T6157] loop2: detected capacity change from 0 to 8 [ 139.414630][ T6157] SQUASHFS error: lzo decompression failed, data probably corrupt [ 139.422589][ T6157] SQUASHFS error: Failed to read block 0x144: -5 [ 139.429942][ T6157] SQUASHFS error: Unable to read metadata cache entry [142] [ 139.437339][ T6157] SQUASHFS error: Unable to read inode 0x11f [ 142.033506][ T6173] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 142.249302][ T6176] loop0: detected capacity change from 0 to 128 [ 142.356752][ T6176] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 142.507172][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.514815][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.660840][ T5871] udevd[5871]: incorrect ext4 checksum on /dev/loop0 [ 145.755577][ T6198] loop0: detected capacity change from 0 to 128 [ 148.306645][ T6198] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 148.365850][ T5871] udevd[5871]: incorrect ext4 checksum on /dev/loop0 [ 151.148223][ T6228] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 152.208678][ T6222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.237873][ T6218] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.289386][ T6222] block device autoloading is deprecated and will be removed. [ 152.317166][ T6218] block device autoloading is deprecated and will be removed. [ 152.739382][ T6242] netlink: 92 bytes leftover after parsing attributes in process `syz.2.58'. [ 153.671683][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 153.749053][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 153.857041][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.468398][ T6256] fuse: Bad value for 'fd' [ 155.049905][ T6251] bridge_slave_1 (unregistering): left allmulticast mode [ 155.101893][ T6251] bridge_slave_1 (unregistering): left promiscuous mode [ 155.109835][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.335875][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 157.394718][ T6281] virtio-fs: tag not found [ 157.401142][ T6279] mmap: syz.0.69 (6279) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.484131][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.71'. [ 158.434595][ T6297] loop3: detected capacity change from 0 to 1024 [ 158.915224][ T5969] IPVS: starting estimator thread 0... [ 159.220082][ T6297] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 159.341557][ T6303] IPVS: using max 22 ests per chain, 52800 per kthread [ 159.814867][ T6311] tc_dump_action: action bad kind [ 161.179330][ T6325] loop2: detected capacity change from 0 to 64 [ 163.344606][ T6333] veth1_macvtap: left promiscuous mode [ 166.442028][ T6352] netlink: 212 bytes leftover after parsing attributes in process `syz.0.89'. [ 167.622360][ T6372] tc_dump_action: action bad kind [ 168.979666][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 171.559812][ T6393] loop1: detected capacity change from 0 to 512 [ 171.852123][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 172.697664][ T6396] IPVS: Error connecting to the multicast addr [ 172.721532][ T6393] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 172.831635][ T6393] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.880158][ T6393] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 173.433864][ T6393] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 173.580783][ T6393] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 173.678368][ T6393] System zones: 0-2, 18-18, 34-35 [ 173.792692][ T6393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.488445][ T6007] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.700513][ T6423] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.103: bg 0: block 353: padding at end of block bitmap is not set [ 175.934020][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 175.992942][ T6007] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 176.250582][ T6425] Zero length message leads to an empty skb [ 176.363598][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 176.377472][ T6007] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 177.077991][ T6007] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 177.105209][ T6435] loop3: detected capacity change from 0 to 512 [ 177.121469][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.163499][ T6007] usb 6-1: config 0 descriptor?? [ 177.183941][ T6007] usb 6-1: can't set config #0, error -71 [ 177.195406][ T6438] tc_dump_action: action bad kind [ 177.227657][ T6007] usb 6-1: USB disconnect, device number 2 [ 177.299163][ T6435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.381899][ T6435] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.154756][ T5865] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.794231][ T6478] netlink: 48 bytes leftover after parsing attributes in process `syz.2.123'. [ 181.947902][ T6478] syz.2.123 (6478) used greatest stack depth: 19256 bytes left [ 181.992883][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.070566][ T6490] ALSA: seq fatal error: cannot create timer (-16) [ 185.731042][ T6519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.737145][ T6519] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 185.790940][ T6519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.797045][ T6519] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 185.811227][ T6519] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.818303][ T6519] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 185.933944][ T6519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.939957][ T6519] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 185.968127][ T6519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.976182][ T6519] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 185.989711][ T6519] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 185.996151][ T6519] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 186.281407][ T6528] tc_dump_action: action bad kind [ 186.359706][ T6532] overlayfs: failed to clone upperpath [ 188.351501][ T6044] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 189.128211][ T6550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.141'. [ 189.721386][ T6044] usb 4-1: Using ep0 maxpacket: 16 [ 189.775457][ T6044] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.876765][ T6044] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.911630][ T6044] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.977591][ T6044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.241404][ T6044] usb 4-1: Product: syz [ 190.245681][ T6044] usb 4-1: Manufacturer: syz [ 190.250336][ T6044] usb 4-1: SerialNumber: syz [ 191.173249][ T6044] usb 4-1: can't set config #1, error -71 [ 191.231598][ T6044] usb 4-1: USB disconnect, device number 2 [ 192.291486][ T6044] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 192.466415][ T6044] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 192.491523][ T6044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.541361][ T6007] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 192.541861][ T6044] usb 3-1: config 0 descriptor?? [ 192.631485][ T6044] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 192.699336][ T6579] loop5: detected capacity change from 0 to 1024 [ 192.765327][ T6007] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.779663][ T6579] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 192.809845][ T6007] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.863006][ T6007] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.032894][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 193.141839][ T6007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.385522][ T6007] usb 4-1: usb_control_msg returned -32 [ 193.413840][ T6007] usbtmc 4-1:16.0: can't read capabilities [ 193.444903][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.449196][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 193.517572][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.584536][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.611027][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.625223][ T6593] evm: overlay not supported [ 193.665347][ T6044] gspca_cpia1: usb_control_msg 03, error -71 [ 193.684269][ T6044] gspca_cpia1: usb_control_msg 01, error -71 [ 193.723704][ T6044] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 193.774242][ T6044] usb 3-1: USB disconnect, device number 3 [ 193.798453][ T6601] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 195.708296][ T6021] usb 4-1: USB disconnect, device number 3 [ 197.171767][ T6630] loop1: detected capacity change from 0 to 128 [ 197.236336][ T6630] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 197.264711][ T5889] udevd[5889]: incorrect ext4 checksum on /dev/loop1 [ 202.659986][ T6692] loop1: detected capacity change from 0 to 1024 [ 202.763862][ T6696] loop5: detected capacity change from 0 to 128 [ 202.818002][ T6696] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 203.084994][ T5880] udevd[5880]: incorrect ext4 checksum on /dev/loop5 [ 203.405448][ T6698] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.974726][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.004580][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.100681][ T6698] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 204.103174][ T6696] loop5: detected capacity change from 0 to 8 [ 204.122576][ T6696] squashfs: Unknown parameter 'xœìÝ1h$Uðofw' [ 206.052251][ T6727] loop1: detected capacity change from 0 to 64 [ 206.942751][ T6733] loop3: detected capacity change from 0 to 1024 [ 207.060086][ T6733] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 207.302216][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 210.980246][ T6762] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 211.782919][ T6774] loop5: detected capacity change from 0 to 128 [ 211.898494][ T6774] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 211.965424][ T5871] udevd[5871]: incorrect ext4 checksum on /dev/loop5 [ 213.275546][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.196'. [ 214.480181][ T6800] netlink: 40 bytes leftover after parsing attributes in process `syz.5.200'. [ 214.537218][ T6800] loop5: detected capacity change from 0 to 256 [ 214.550267][ T6800] ======================================================= [ 214.550267][ T6800] WARNING: The mand mount option has been deprecated and [ 214.550267][ T6800] and is ignored by this kernel. Remove the mand [ 214.550267][ T6800] option from the mount to silence this warning. [ 214.550267][ T6800] ======================================================= [ 214.585215][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.449991][ T6800] FAT-fs (loop5): count of clusters too big (66845694) [ 215.457076][ T6800] FAT-fs (loop5): Can't find a valid FAT filesystem [ 215.742704][ T6799] loop5: detected capacity change from 0 to 32768 [ 216.267890][ T6808] netlink: 92 bytes leftover after parsing attributes in process `syz.4.202'. [ 219.024817][ T6877] overlayfs: failed to clone upperpath [ 222.455934][ T6900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.216'. [ 223.277804][ T6895] loop3: detected capacity change from 0 to 1024 [ 223.723443][ T6895] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 227.265880][ T6974] loop1: detected capacity change from 0 to 128 [ 227.472544][ T6974] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 227.549485][ T6971] netlink: 92 bytes leftover after parsing attributes in process `syz.0.222'. [ 228.313189][ T5871] udevd[5871]: incorrect ext4 checksum on /dev/loop1 [ 228.425761][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 228.470774][ T6983] bridge_slave_1: left allmulticast mode [ 228.541414][ T6983] bridge_slave_1: left promiscuous mode [ 228.585585][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.226607][ T6983] bridge_slave_0: left allmulticast mode [ 229.401335][ T6983] bridge_slave_0: left promiscuous mode [ 229.407125][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.927463][ T7027] tmpfs: Unknown parameter 'usrquota_inˆoMdXÊŽªÊûzode_hardlimit' [ 236.583353][ T7045] netlink: 48 bytes leftover after parsing attributes in process `syz.0.241'. [ 236.977305][ T7047] netlink: 92 bytes leftover after parsing attributes in process `syz.4.244'. [ 237.121727][ T6044] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 237.368902][ T7055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.471189][ T6044] usb 6-1: unable to get BOS descriptor or descriptor too short [ 237.614427][ T6044] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 237.758469][ T6044] usb 6-1: config 1 interface 0 has no altsetting 0 [ 237.924605][ T6044] usb 6-1: string descriptor 0 read error: -22 [ 238.006599][ T6044] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 238.115925][ T6044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.366077][ T7041] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 238.464262][ T6044] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input5 [ 238.721974][ T5214] bcm5974 6-1:1.0: could not read from device [ 238.777274][ T6044] usb 6-1: USB disconnect, device number 3 [ 238.793850][ T5214] bcm5974 6-1:1.0: could not read from device [ 240.653964][ T7074] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 243.435713][ T7111] netlink: 92 bytes leftover after parsing attributes in process `syz.5.264'. [ 246.279284][ T6044] kernel write not supported for file /cpu/0/msr (pid: 6044 comm: kworker/0:8) [ 246.384692][ T7085] infiniband syz1: set down [ 246.400336][ T7085] infiniband syz1: added ipvlan0 [ 246.448679][ T7085] syz1: rxe_create_cq: returned err = -12 [ 246.491682][ T7085] infiniband syz1: Couldn't create ib_mad CQ [ 246.701819][ T7085] infiniband syz1: Couldn't open port 1 [ 248.264162][ T7085] RDS/IB: syz1: added [ 248.341169][ T7085] smc: adding ib device syz1 with port count 1 [ 248.361878][ T7085] smc: ib device syz1 port 1 has pnetid [ 248.634285][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.275'. [ 249.397122][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.275'. [ 255.803756][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 256.174190][ T5848] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 256.292567][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.361490][ T5848] usb 4-1: Product: syz [ 256.400930][ T5848] usb 4-1: Manufacturer: syz [ 256.426596][ T5848] usb 4-1: SerialNumber: syz [ 257.875614][ T5848] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 257.920922][ T5848] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 258.090172][ T5848] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 258.256736][ T5848] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 258.320956][ T5848] usb 4-1: USB disconnect, device number 4 [ 263.796503][ T5878] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.896400][ T5867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 264.002575][ T5867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.503143][ T5867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.513487][ T5867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.071808][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 265.124690][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 265.134158][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 265.150245][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 265.164052][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.338580][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.345086][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.651799][ T5888] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 266.862954][ T7236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.303'. [ 267.251638][ T5888] Bluetooth: hci6: command tx timeout [ 269.092439][ T7249] tc_dump_action: action bad kind [ 269.333810][ T5888] Bluetooth: hci6: command tx timeout [ 271.666391][ T5888] Bluetooth: hci6: command tx timeout [ 271.858926][ T7272] loop5: detected capacity change from 0 to 1024 [ 271.971823][ T7272] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 273.594178][ T7276] loop1: detected capacity change from 0 to 128 [ 273.715158][ T7276] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 273.731441][ T5888] Bluetooth: hci6: command tx timeout [ 273.802689][ T5880] udevd[5880]: incorrect ext4 checksum on /dev/loop1 [ 275.227394][ T7294] netlink: 48 bytes leftover after parsing attributes in process `syz.1.316'. [ 276.792294][ T7301] 9pnet_virtio: no channels available for device syz [ 277.172448][ T7311] netlink: 92 bytes leftover after parsing attributes in process `syz.4.320'. [ 279.970013][ T7322] veth1_macvtap: left promiscuous mode [ 280.173906][ T7332] tc_dump_action: action bad kind [ 280.499144][ T7213] chnl_net:caif_netlink_parms(): no params data found [ 281.131623][ T7346] loop2: detected capacity change from 0 to 1024 [ 281.220976][ T7346] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 281.769644][ T7341] sctp: failed to load transform for md5: -2 [ 282.704108][ T7357] Falling back ldisc for ptm0. [ 282.883638][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.890839][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.901822][ T7213] bridge_slave_0: entered allmulticast mode [ 283.909973][ T7213] bridge_slave_0: entered promiscuous mode [ 283.973054][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.980254][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.221510][ T7213] bridge_slave_1: entered allmulticast mode [ 284.229667][ T7213] bridge_slave_1: entered promiscuous mode [ 285.364089][ T7380] netlink: 88 bytes leftover after parsing attributes in process `syz.4.335'. [ 286.482624][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.515763][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.892548][ T7376] lo speed is unknown, defaulting to 1000 [ 286.898644][ T7376] lo speed is unknown, defaulting to 1000 [ 286.905719][ T7376] lo speed is unknown, defaulting to 1000 [ 286.915891][ T7376] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 286.930470][ T7376] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 286.957803][ T7376] lo speed is unknown, defaulting to 1000 [ 286.965517][ T7376] lo speed is unknown, defaulting to 1000 [ 286.972922][ T7376] lo speed is unknown, defaulting to 1000 [ 286.980219][ T7376] lo speed is unknown, defaulting to 1000 [ 286.987542][ T7376] lo speed is unknown, defaulting to 1000 [ 286.994902][ T7376] lo speed is unknown, defaulting to 1000 [ 287.026598][ T7213] team0: Port device team_slave_0 added [ 287.045531][ T7394] netlink: 92 bytes leftover after parsing attributes in process `syz.3.338'. [ 287.079692][ T7376] lo speed is unknown, defaulting to 1000 [ 287.082029][ T7213] team0: Port device team_slave_1 added [ 287.480617][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.521009][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.547023][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.764734][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.864276][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.891835][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.998866][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.072934][ T7401] tc_dump_action: action bad kind [ 289.346384][ T7410] loop3: detected capacity change from 0 to 2048 [ 289.513268][ T7411] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.567120][ T7213] hsr_slave_0: entered promiscuous mode [ 289.596085][ T7213] hsr_slave_1: entered promiscuous mode [ 289.624071][ T7213] debugfs: 'hsr0' already exists in 'hsr' [ 289.647727][ T7213] Cannot create hsr debugfs directory [ 291.382509][ T7420] atomic_op ffff88802a72e998 conn xmit_atomic 0000000000000000 [ 292.062317][ T6966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.636076][ T6966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.674907][ T5940] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 292.948429][ T5940] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 293.101712][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.202815][ T5940] usb 4-1: config 0 descriptor?? [ 293.581121][ T5940] kaweth 4-1:0.0: Firmware present in device. [ 293.931495][ T5940] kaweth 4-1:0.0: Statistics collection: 0 [ 293.944746][ T5940] kaweth 4-1:0.0: Multicast filter limit: 0 [ 293.952247][ T5940] kaweth 4-1:0.0: MTU: 0 [ 293.956529][ T5940] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 294.721657][ T5940] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 294.745451][ T5940] usb 4-1: USB disconnect, device number 5 [ 294.797823][ T6966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.938175][ T7455] tc_dump_action: action bad kind [ 295.425780][ T6966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.173017][ T7473] atomic_op ffff888028e2a998 conn xmit_atomic 0000000000000000 [ 299.509852][ T7481] lo speed is unknown, defaulting to 1000 [ 300.874099][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.370'. [ 301.563021][ T7509] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 301.572763][ T7509] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 301.582478][ T7509] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 301.661502][ T6966] bridge_slave_1: left allmulticast mode [ 301.682818][ T6966] bridge_slave_1: left promiscuous mode [ 301.725717][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.156692][ T6966] bridge_slave_0: left allmulticast mode [ 302.177731][ T6966] bridge_slave_0: left promiscuous mode [ 302.201549][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.392853][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 302.581888][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 302.597346][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.644073][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.722162][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 302.816671][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 302.861309][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.884926][ T24] usb 6-1: config 0 descriptor?? [ 302.895993][ T7522] netlink: 92 bytes leftover after parsing attributes in process `syz.4.375'. [ 303.448306][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 303.462502][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 303.474497][ T24] usb 6-1: USB disconnect, device number 4 [ 304.778634][ T7531] atomic_op ffff88803460c998 conn xmit_atomic 0000000000000000 [ 304.908482][ T6966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.922149][ T6966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.937386][ T6966] bond0 (unregistering): Released all slaves [ 305.768943][ T7543] tc_dump_action: action bad kind [ 307.049705][ T7213] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 307.241664][ T7543] netlink: 64 bytes leftover after parsing attributes in process `syz.2.379'. [ 307.815597][ T7213] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.031429][ T7213] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.336981][ T7213] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.537535][ T6966] hsr_slave_0: left promiscuous mode [ 309.605794][ T6966] hsr_slave_1: left promiscuous mode [ 309.663194][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.670680][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.787631][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.838789][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.228786][ T7594] atomic_op ffff888079c36998 conn xmit_atomic 0000000000000000 [ 311.419687][ T7606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.385'. [ 311.464918][ T6966] veth1_macvtap: left promiscuous mode [ 311.486964][ T6966] veth0_macvtap: left promiscuous mode [ 311.487731][ T7603] netlink: 92 bytes leftover after parsing attributes in process `syz.3.392'. [ 311.517351][ T6966] veth1_vlan: left promiscuous mode [ 311.561655][ T6966] veth0_vlan: left promiscuous mode [ 314.051937][ T7628] netlink: 64 bytes leftover after parsing attributes in process `syz.5.398'. [ 314.280355][ T1157] smc: removing ib device syz1 [ 314.638660][ T6966] team0 (unregistering): Port device team_slave_1 removed [ 314.683416][ T6966] team0 (unregistering): Port device team_slave_0 removed [ 315.229029][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 315.287971][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.356293][ T7213] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.390605][ T7604] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 315.443788][ T7604] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 315.482293][ T7604] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 315.493869][ T7627] tc_dump_action: action bad kind [ 315.501285][ T24] ================================================================== [ 315.509368][ T24] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1bf/0x200 [ 315.518261][ T24] Read of size 8 at addr ffff88807ccaa2e8 by task kworker/1:0/24 [ 315.526016][ T24] [ 315.528351][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 315.528390][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.528413][ T24] Workqueue: events smc_ib_port_event_work [ 315.528471][ T24] Call Trace: [ 315.528482][ T24] [ 315.528494][ T24] dump_stack_lvl+0x116/0x1f0 [ 315.528547][ T24] print_report+0xcd/0x630 [ 315.528578][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.528619][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.528657][ T24] ? __phys_addr+0xe8/0x180 [ 315.528704][ T24] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 315.528745][ T24] kasan_report+0xe0/0x110 [ 315.528776][ T24] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 315.528821][ T24] __ethtool_get_link_ksettings+0x1bf/0x200 [ 315.528863][ T24] __ethtool_get_link_ksettings+0x148/0x200 [ 315.528904][ T24] ib_get_eth_speed+0x122/0xb50 [ 315.528938][ T24] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 315.528969][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 315.529008][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.529047][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 315.529094][ T24] rxe_query_port+0x108/0x330 [ 315.529133][ T24] ib_query_port+0x441/0x8a0 [ 315.529166][ T24] smc_ib_port_event_work+0x12f/0xbf0 [ 315.529216][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.529260][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.529299][ T24] ? rcu_is_watching+0x12/0xc0 [ 315.529344][ T24] process_one_work+0x9cf/0x1b70 [ 315.529390][ T24] ? __pfx_process_one_work+0x10/0x10 [ 315.529427][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.529471][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.529510][ T24] ? assign_work+0x1a0/0x250 [ 315.529543][ T24] worker_thread+0x6c8/0xf10 [ 315.529589][ T24] ? __pfx_worker_thread+0x10/0x10 [ 315.529624][ T24] kthread+0x3c5/0x780 [ 315.529657][ T24] ? __pfx_kthread+0x10/0x10 [ 315.529689][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.529728][ T24] ? rcu_is_watching+0x12/0xc0 [ 315.529768][ T24] ? __pfx_kthread+0x10/0x10 [ 315.529801][ T24] ret_from_fork+0x56d/0x730 [ 315.529831][ T24] ? __pfx_kthread+0x10/0x10 [ 315.529863][ T24] ret_from_fork_asm+0x1a/0x30 [ 315.529915][ T24] [ 315.529925][ T24] [ 315.749044][ T24] Allocated by task 5864: [ 315.753370][ T24] kasan_save_stack+0x33/0x60 [ 315.758074][ T24] kasan_save_track+0x14/0x30 [ 315.762792][ T24] __kasan_kmalloc+0xaa/0xb0 [ 315.767409][ T24] __kvmalloc_node_noprof+0x27b/0x620 [ 315.772804][ T24] alloc_netdev_mqs+0xd2/0x1530 [ 315.777678][ T24] rtnl_create_link+0xc08/0xf90 [ 315.782555][ T24] rtnl_newlink+0xb69/0x2000 [ 315.787171][ T24] rtnetlink_rcv_msg+0x95e/0xe90 [ 315.792133][ T24] netlink_rcv_skb+0x158/0x420 [ 315.796910][ T24] netlink_unicast+0x5aa/0x870 [ 315.801697][ T24] netlink_sendmsg+0x8d1/0xdd0 [ 315.806488][ T24] __sys_sendto+0x4a3/0x520 [ 315.811004][ T24] __x64_sys_sendto+0xe0/0x1c0 [ 315.815781][ T24] do_syscall_64+0xcd/0x4e0 [ 315.820289][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.826186][ T24] [ 315.828500][ T24] Freed by task 6966: [ 315.832470][ T24] kasan_save_stack+0x33/0x60 [ 315.837172][ T24] kasan_save_track+0x14/0x30 [ 315.841866][ T24] kasan_save_free_info+0x3b/0x60 [ 315.846900][ T24] __kasan_slab_free+0x60/0x70 [ 315.851683][ T24] kfree+0x2b4/0x4d0 [ 315.855590][ T24] device_release+0xa4/0x240 [ 315.860275][ T24] kobject_put+0x1e7/0x5a0 [ 315.864692][ T24] netdev_run_todo+0x7e9/0x1320 [ 315.869740][ T24] default_device_exit_batch+0x858/0xaf0 [ 315.875385][ T24] ops_undo_list+0x363/0xab0 [ 315.879995][ T24] cleanup_net+0x408/0x890 [ 315.884414][ T24] process_one_work+0x9cf/0x1b70 [ 315.889360][ T24] worker_thread+0x6c8/0xf10 [ 315.893956][ T24] kthread+0x3c5/0x780 [ 315.898049][ T24] ret_from_fork+0x56d/0x730 [ 315.902729][ T24] ret_from_fork_asm+0x1a/0x30 [ 315.907503][ T24] [ 315.909817][ T24] The buggy address belongs to the object at ffff88807ccaa000 [ 315.909817][ T24] which belongs to the cache kmalloc-cg-4k of size 4096 [ 315.924132][ T24] The buggy address is located 744 bytes inside of [ 315.924132][ T24] freed 4096-byte region [ffff88807ccaa000, ffff88807ccab000) [ 315.938051][ T24] [ 315.940373][ T24] The buggy address belongs to the physical page: [ 315.946776][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cca8 [ 315.955545][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 315.964045][ T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 315.971601][ T24] page_type: f5(slab) [ 315.975586][ T24] raw: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 315.984171][ T24] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 315.992762][ T24] head: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 316.001437][ T24] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 316.010124][ T24] head: 00fff00000000003 ffffea0001f32a01 00000000ffffffff 00000000ffffffff [ 316.018800][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 316.027467][ T24] page dumped because: kasan: bad access detected [ 316.033873][ T24] page_owner tracks the page as allocated [ 316.039578][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 110522001312, free_ts 110466059778 [ 316.061137][ T24] post_alloc_hook+0x1c0/0x230 [ 316.065932][ T24] get_page_from_freelist+0x132b/0x38e0 [ 316.071504][ T24] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 316.077423][ T24] alloc_pages_mpol+0x1fb/0x550 [ 316.082281][ T24] new_slab+0x247/0x330 [ 316.086452][ T24] ___slab_alloc+0xcf2/0x1750 [ 316.091147][ T24] __slab_alloc.constprop.0+0x56/0xb0 [ 316.096537][ T24] __kmalloc_noprof+0x2f2/0x510 [ 316.101405][ T24] __register_sysctl_table+0xb3/0x1900 [ 316.106881][ T24] __addrconf_sysctl_register+0x1a2/0x360 [ 316.112613][ T24] addrconf_sysctl_register+0x15f/0x1f0 [ 316.118185][ T24] ipv6_add_dev+0xb31/0x15f0 [ 316.122788][ T24] addrconf_notify+0x53e/0x19e0 [ 316.127921][ T24] notifier_call_chain+0xbc/0x410 [ 316.132964][ T24] call_netdevice_notifiers_info+0xbe/0x140 [ 316.138865][ T24] register_netdevice+0x182e/0x2270 [ 316.144061][ T24] page last free pid 5866 tgid 5866 stack trace: [ 316.150388][ T24] __free_frozen_pages+0x7d5/0x10f0 [ 316.155599][ T24] qlist_free_all+0x4d/0x120 [ 316.160211][ T24] kasan_quarantine_reduce+0x195/0x1e0 [ 316.165690][ T24] __kasan_slab_alloc+0x69/0x90 [ 316.170569][ T24] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 316.175953][ T24] kset_create_and_add+0x4d/0x190 [ 316.180982][ T24] netdev_register_kobject+0x1ef/0x3d0 [ 316.186445][ T24] register_netdevice+0x13dc/0x2270 [ 316.191645][ T24] veth_newlink+0x446/0xa00 [ 316.196167][ T24] rtnl_newlink+0xc45/0x2000 [ 316.200777][ T24] rtnetlink_rcv_msg+0x95e/0xe90 [ 316.205738][ T24] netlink_rcv_skb+0x158/0x420 [ 316.210502][ T24] netlink_unicast+0x5aa/0x870 [ 316.215289][ T24] netlink_sendmsg+0x8d1/0xdd0 [ 316.220087][ T24] __sys_sendto+0x4a3/0x520 [ 316.224611][ T24] __x64_sys_sendto+0xe0/0x1c0 [ 316.229390][ T24] [ 316.231698][ T24] Memory state around the buggy address: [ 316.237317][ T24] ffff88807ccaa180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.245375][ T24] ffff88807ccaa200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.253435][ T24] >ffff88807ccaa280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.261488][ T24] ^ [ 316.268931][ T24] ffff88807ccaa300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.276986][ T24] ffff88807ccaa380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.285038][ T24] ================================================================== [ 317.443595][ T24] Disabling lock debugging due to kernel taint [ 317.503984][ T24] ================================================================== [ 317.512108][ T24] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0xa4/0x200 [ 317.520903][ T24] Read of size 8 at addr ffff88807ccaa0a8 by task kworker/1:0/24 [ 317.528635][ T24] [ 317.530971][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 317.531024][ T24] Tainted: [B]=BAD_PAGE [ 317.531037][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.531061][ T24] Workqueue: events smc_ib_port_event_work [ 317.531121][ T24] Call Trace: [ 317.531133][ T24] [ 317.531147][ T24] dump_stack_lvl+0x116/0x1f0 [ 317.531203][ T24] print_report+0xcd/0x630 [ 317.531235][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.531278][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.531320][ T24] ? __phys_addr+0xe8/0x180 [ 317.531377][ T24] ? __ethtool_get_link_ksettings+0xa4/0x200 [ 317.531422][ T24] kasan_report+0xe0/0x110 [ 317.531456][ T24] ? __ethtool_get_link_ksettings+0xa4/0x200 [ 317.531506][ T24] kasan_check_range+0x100/0x1b0 [ 317.531548][ T24] __ethtool_get_link_ksettings+0xa4/0x200 [ 317.531593][ T24] __ethtool_get_link_ksettings+0x148/0x200 [ 317.531639][ T24] ib_get_eth_speed+0x122/0xb50 [ 317.531675][ T24] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 317.531710][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 317.531753][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.531797][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 317.531843][ T24] rxe_query_port+0x108/0x330 [ 317.531885][ T24] ib_query_port+0x441/0x8a0 [ 317.531925][ T24] smc_ib_port_event_work+0x12f/0xbf0 [ 317.531981][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.532029][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.532073][ T24] ? rcu_is_watching+0x12/0xc0 [ 317.532122][ T24] process_one_work+0x9cf/0x1b70 [ 317.532171][ T24] ? __pfx_process_one_work+0x10/0x10 [ 317.532211][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.532260][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.532304][ T24] ? assign_work+0x1a0/0x250 [ 317.532346][ T24] worker_thread+0x6c8/0xf10 [ 317.532395][ T24] ? __pfx_worker_thread+0x10/0x10 [ 317.532435][ T24] kthread+0x3c5/0x780 [ 317.532470][ T24] ? __pfx_kthread+0x10/0x10 [ 317.532506][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.532549][ T24] ? rcu_is_watching+0x12/0xc0 [ 317.532594][ T24] ? __pfx_kthread+0x10/0x10 [ 317.532630][ T24] ret_from_fork+0x56d/0x730 [ 317.532663][ T24] ? __pfx_kthread+0x10/0x10 [ 317.532698][ T24] ret_from_fork_asm+0x1a/0x30 [ 317.532755][ T24] [ 317.532767][ T24] [ 317.762296][ T24] Allocated by task 5864: [ 317.766626][ T24] kasan_save_stack+0x33/0x60 [ 317.771331][ T24] kasan_save_track+0x14/0x30 [ 317.776042][ T24] __kasan_kmalloc+0xaa/0xb0 [ 317.780660][ T24] __kvmalloc_node_noprof+0x27b/0x620 [ 317.786056][ T24] alloc_netdev_mqs+0xd2/0x1530 [ 317.790932][ T24] rtnl_create_link+0xc08/0xf90 [ 317.795808][ T24] rtnl_newlink+0xb69/0x2000 [ 317.800426][ T24] rtnetlink_rcv_msg+0x95e/0xe90 [ 317.805399][ T24] netlink_rcv_skb+0x158/0x420 [ 317.810164][ T24] netlink_unicast+0x5aa/0x870 [ 317.814950][ T24] netlink_sendmsg+0x8d1/0xdd0 [ 317.819741][ T24] __sys_sendto+0x4a3/0x520 [ 317.824285][ T24] __x64_sys_sendto+0xe0/0x1c0 [ 317.829072][ T24] do_syscall_64+0xcd/0x4e0 [ 317.833583][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.839658][ T24] [ 317.841974][ T24] Freed by task 6966: [ 317.845948][ T24] kasan_save_stack+0x33/0x60 [ 317.850658][ T24] kasan_save_track+0x14/0x30 [ 317.855364][ T24] kasan_save_free_info+0x3b/0x60 [ 317.860403][ T24] __kasan_slab_free+0x60/0x70 [ 317.865190][ T24] kfree+0x2b4/0x4d0 [ 317.869099][ T24] device_release+0xa4/0x240 [ 317.873694][ T24] kobject_put+0x1e7/0x5a0 [ 317.878110][ T24] netdev_run_todo+0x7e9/0x1320 [ 317.883071][ T24] default_device_exit_batch+0x858/0xaf0 [ 317.888705][ T24] ops_undo_list+0x363/0xab0 [ 317.893317][ T24] cleanup_net+0x408/0x890 [ 317.897737][ T24] process_one_work+0x9cf/0x1b70 [ 317.902680][ T24] worker_thread+0x6c8/0xf10 [ 317.907284][ T24] kthread+0x3c5/0x780 [ 317.911360][ T24] ret_from_fork+0x56d/0x730 [ 317.915948][ T24] ret_from_fork_asm+0x1a/0x30 [ 317.920720][ T24] [ 317.923031][ T24] The buggy address belongs to the object at ffff88807ccaa000 [ 317.923031][ T24] which belongs to the cache kmalloc-cg-4k of size 4096 [ 317.937352][ T24] The buggy address is located 168 bytes inside of [ 317.937352][ T24] freed 4096-byte region [ffff88807ccaa000, ffff88807ccab000) [ 317.951246][ T24] [ 317.953570][ T24] The buggy address belongs to the physical page: [ 317.959970][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cca8 [ 317.968739][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 317.977242][ T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 317.984787][ T24] page_type: f5(slab) [ 317.988770][ T24] raw: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 317.997359][ T24] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 318.005947][ T24] head: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 318.014621][ T24] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 318.023557][ T24] head: 00fff00000000003 ffffea0001f32a01 00000000ffffffff 00000000ffffffff [ 318.032234][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 318.040902][ T24] page dumped because: kasan: bad access detected [ 318.047306][ T24] page_owner tracks the page as allocated [ 318.053015][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 110522001312, free_ts 110466059778 [ 318.074665][ T24] post_alloc_hook+0x1c0/0x230 [ 318.079560][ T24] get_page_from_freelist+0x132b/0x38e0 [ 318.085215][ T24] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 318.091136][ T24] alloc_pages_mpol+0x1fb/0x550 [ 318.095994][ T24] new_slab+0x247/0x330 [ 318.100164][ T24] ___slab_alloc+0xcf2/0x1750 [ 318.104854][ T24] __slab_alloc.constprop.0+0x56/0xb0 [ 318.110244][ T24] __kmalloc_noprof+0x2f2/0x510 [ 318.115113][ T24] __register_sysctl_table+0xb3/0x1900 [ 318.120591][ T24] __addrconf_sysctl_register+0x1a2/0x360 [ 318.126346][ T24] addrconf_sysctl_register+0x15f/0x1f0 [ 318.131989][ T24] ipv6_add_dev+0xb31/0x15f0 [ 318.136588][ T24] addrconf_notify+0x53e/0x19e0 [ 318.141455][ T24] notifier_call_chain+0xbc/0x410 [ 318.146501][ T24] call_netdevice_notifiers_info+0xbe/0x140 [ 318.152401][ T24] register_netdevice+0x182e/0x2270 [ 318.157602][ T24] page last free pid 5866 tgid 5866 stack trace: [ 318.163918][ T24] __free_frozen_pages+0x7d5/0x10f0 [ 318.169130][ T24] qlist_free_all+0x4d/0x120 [ 318.173737][ T24] kasan_quarantine_reduce+0x195/0x1e0 [ 318.179218][ T24] __kasan_slab_alloc+0x69/0x90 [ 318.184092][ T24] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 318.189569][ T24] kset_create_and_add+0x4d/0x190 [ 318.194600][ T24] netdev_register_kobject+0x1ef/0x3d0 [ 318.200065][ T24] register_netdevice+0x13dc/0x2270 [ 318.205289][ T24] veth_newlink+0x446/0xa00 [ 318.209818][ T24] rtnl_newlink+0xc45/0x2000 [ 318.214428][ T24] rtnetlink_rcv_msg+0x95e/0xe90 [ 318.219388][ T24] netlink_rcv_skb+0x158/0x420 [ 318.224157][ T24] netlink_unicast+0x5aa/0x870 [ 318.228946][ T24] netlink_sendmsg+0x8d1/0xdd0 [ 318.233732][ T24] __sys_sendto+0x4a3/0x520 [ 318.238255][ T24] __x64_sys_sendto+0xe0/0x1c0 [ 318.243039][ T24] [ 318.245351][ T24] Memory state around the buggy address: [ 318.250971][ T24] ffff88807cca9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.259030][ T24] ffff88807ccaa000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.267094][ T24] >ffff88807ccaa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.275150][ T24] ^ [ 318.280511][ T24] ffff88807ccaa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.288571][ T24] ffff88807ccaa180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.296629][ T24] ================================================================== [ 318.366416][ T24] ================================================================== [ 318.374531][ T24] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1cc/0x200 [ 318.383418][ T24] Read of size 8 at addr ffff88807ccaa0a8 by task kworker/1:0/24 [ 318.391152][ T24] [ 318.393488][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 318.393542][ T24] Tainted: [B]=BAD_PAGE [ 318.393555][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.393581][ T24] Workqueue: events smc_ib_port_event_work [ 318.393642][ T24] Call Trace: [ 318.393653][ T24] [ 318.393666][ T24] dump_stack_lvl+0x116/0x1f0 [ 318.393724][ T24] print_report+0xcd/0x630 [ 318.393757][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.393802][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.393846][ T24] ? __phys_addr+0xe8/0x180 [ 318.393896][ T24] ? __ethtool_get_link_ksettings+0x1cc/0x200 [ 318.393941][ T24] kasan_report+0xe0/0x110 [ 318.393976][ T24] ? __ethtool_get_link_ksettings+0x1cc/0x200 [ 318.394026][ T24] __ethtool_get_link_ksettings+0x1cc/0x200 [ 318.394072][ T24] __ethtool_get_link_ksettings+0x148/0x200 [ 318.394117][ T24] ib_get_eth_speed+0x122/0xb50 [ 318.394154][ T24] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 318.394189][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 318.394232][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.394275][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 318.394321][ T24] rxe_query_port+0x108/0x330 [ 318.394367][ T24] ib_query_port+0x441/0x8a0 [ 318.394403][ T24] smc_ib_port_event_work+0x12f/0xbf0 [ 318.394459][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.394508][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.394551][ T24] ? rcu_is_watching+0x12/0xc0 [ 318.394601][ T24] process_one_work+0x9cf/0x1b70 [ 318.394651][ T24] ? __pfx_process_one_work+0x10/0x10 [ 318.394691][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.394740][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.394784][ T24] ? assign_work+0x1a0/0x250 [ 318.394820][ T24] worker_thread+0x6c8/0xf10 [ 318.394870][ T24] ? __pfx_worker_thread+0x10/0x10 [ 318.394910][ T24] kthread+0x3c5/0x780 [ 318.394945][ T24] ? __pfx_kthread+0x10/0x10 [ 318.394981][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.395024][ T24] ? rcu_is_watching+0x12/0xc0 [ 318.395069][ T24] ? __pfx_kthread+0x10/0x10 [ 318.395104][ T24] ret_from_fork+0x56d/0x730 [ 318.395138][ T24] ? __pfx_kthread+0x10/0x10 [ 318.395173][ T24] ret_from_fork_asm+0x1a/0x30 [ 318.395229][ T24] [ 318.395241][ T24] [ 318.619826][ T24] Allocated by task 5864: [ 318.624146][ T24] kasan_save_stack+0x33/0x60 [ 318.628850][ T24] kasan_save_track+0x14/0x30 [ 318.633544][ T24] __kasan_kmalloc+0xaa/0xb0 [ 318.638154][ T24] __kvmalloc_node_noprof+0x27b/0x620 [ 318.643546][ T24] alloc_netdev_mqs+0xd2/0x1530 [ 318.648421][ T24] rtnl_create_link+0xc08/0xf90 [ 318.653294][ T24] rtnl_newlink+0xb69/0x2000 [ 318.657912][ T24] rtnetlink_rcv_msg+0x95e/0xe90 [ 318.662877][ T24] netlink_rcv_skb+0x158/0x420 [ 318.667643][ T24] netlink_unicast+0x5aa/0x870 [ 318.672432][ T24] netlink_sendmsg+0x8d1/0xdd0 [ 318.677222][ T24] __sys_sendto+0x4a3/0x520 [ 318.681739][ T24] __x64_sys_sendto+0xe0/0x1c0 [ 318.686524][ T24] do_syscall_64+0xcd/0x4e0 [ 318.691031][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.696932][ T24] [ 318.699241][ T24] Freed by task 6966: [ 318.703206][ T24] kasan_save_stack+0x33/0x60 [ 318.707902][ T24] kasan_save_track+0x14/0x30 [ 318.712616][ T24] kasan_save_free_info+0x3b/0x60 [ 318.717672][ T24] __kasan_slab_free+0x60/0x70 [ 318.722462][ T24] kfree+0x2b4/0x4d0 [ 318.726375][ T24] device_release+0xa4/0x240 [ 318.730970][ T24] kobject_put+0x1e7/0x5a0 [ 318.735386][ T24] netdev_run_todo+0x7e9/0x1320 [ 318.740260][ T24] default_device_exit_batch+0x858/0xaf0 [ 318.745897][ T24] ops_undo_list+0x363/0xab0 [ 318.750597][ T24] cleanup_net+0x408/0x890 [ 318.755013][ T24] process_one_work+0x9cf/0x1b70 [ 318.759955][ T24] worker_thread+0x6c8/0xf10 [ 318.764549][ T24] kthread+0x3c5/0x780 [ 318.768619][ T24] ret_from_fork+0x56d/0x730 [ 318.773211][ T24] ret_from_fork_asm+0x1a/0x30 [ 318.777989][ T24] [ 318.780325][ T24] The buggy address belongs to the object at ffff88807ccaa000 [ 318.780325][ T24] which belongs to the cache kmalloc-cg-4k of size 4096 [ 318.794636][ T24] The buggy address is located 168 bytes inside of [ 318.794636][ T24] freed 4096-byte region [ffff88807ccaa000, ffff88807ccab000) [ 318.808525][ T24] [ 318.810841][ T24] The buggy address belongs to the physical page: [ 318.817240][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cca8 [ 318.826002][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 318.834499][ T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 318.842049][ T24] page_type: f5(slab) [ 318.846032][ T24] raw: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 318.854620][ T24] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 318.863209][ T24] head: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 318.871884][ T24] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 318.880555][ T24] head: 00fff00000000003 ffffea0001f32a01 00000000ffffffff 00000000ffffffff [ 318.889324][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 318.897993][ T24] page dumped because: kasan: bad access detected [ 318.904414][ T24] page_owner tracks the page as allocated [ 318.910118][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 110522001312, free_ts 110466059778 [ 318.931672][ T24] post_alloc_hook+0x1c0/0x230 [ 318.936460][ T24] get_page_from_freelist+0x132b/0x38e0 [ 318.942027][ T24] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 318.947947][ T24] alloc_pages_mpol+0x1fb/0x550 [ 318.952797][ T24] new_slab+0x247/0x330 [ 318.956968][ T24] ___slab_alloc+0xcf2/0x1750 [ 318.961655][ T24] __slab_alloc.constprop.0+0x56/0xb0 [ 318.967040][ T24] __kmalloc_noprof+0x2f2/0x510 [ 318.971933][ T24] __register_sysctl_table+0xb3/0x1900 [ 318.977496][ T24] __addrconf_sysctl_register+0x1a2/0x360 [ 318.983226][ T24] addrconf_sysctl_register+0x15f/0x1f0 [ 318.988791][ T24] ipv6_add_dev+0xb31/0x15f0 [ 318.993386][ T24] addrconf_notify+0x53e/0x19e0 [ 318.998252][ T24] notifier_call_chain+0xbc/0x410 [ 319.003307][ T24] call_netdevice_notifiers_info+0xbe/0x140 [ 319.009207][ T24] register_netdevice+0x182e/0x2270 [ 319.014402][ T24] page last free pid 5866 tgid 5866 stack trace: [ 319.020714][ T24] __free_frozen_pages+0x7d5/0x10f0 [ 319.025922][ T24] qlist_free_all+0x4d/0x120 [ 319.030529][ T24] kasan_quarantine_reduce+0x195/0x1e0 [ 319.036006][ T24] __kasan_slab_alloc+0x69/0x90 [ 319.040878][ T24] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 319.046265][ T24] kset_create_and_add+0x4d/0x190 [ 319.051291][ T24] netdev_register_kobject+0x1ef/0x3d0 [ 319.056751][ T24] register_netdevice+0x13dc/0x2270 [ 319.061945][ T24] veth_newlink+0x446/0xa00 [ 319.066461][ T24] rtnl_newlink+0xc45/0x2000 [ 319.071067][ T24] rtnetlink_rcv_msg+0x95e/0xe90 [ 319.076029][ T24] netlink_rcv_skb+0x158/0x420 [ 319.080790][ T24] netlink_unicast+0x5aa/0x870 [ 319.085572][ T24] netlink_sendmsg+0x8d1/0xdd0 [ 319.090357][ T24] __sys_sendto+0x4a3/0x520 [ 319.094875][ T24] __x64_sys_sendto+0xe0/0x1c0 [ 319.099654][ T24] [ 319.101963][ T24] Memory state around the buggy address: [ 319.107582][ T24] ffff88807cca9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 319.115638][ T24] ffff88807ccaa000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.123698][ T24] >ffff88807ccaa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.131750][ T24] ^ [ 319.137115][ T24] ffff88807ccaa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.145172][ T24] ffff88807ccaa180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.153222][ T24] ================================================================== [ 319.183470][ T24] ================================================================== [ 319.191564][ T24] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1e3/0x200 [ 319.200448][ T24] Read of size 8 at addr ffff88807ccaa2e8 by task kworker/1:0/24 [ 319.208265][ T24] [ 319.210597][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 319.210637][ T24] Tainted: [B]=BAD_PAGE [ 319.210646][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.210665][ T24] Workqueue: events smc_ib_port_event_work [ 319.210712][ T24] Call Trace: [ 319.210721][ T24] [ 319.210731][ T24] dump_stack_lvl+0x116/0x1f0 [ 319.210775][ T24] print_report+0xcd/0x630 [ 319.210800][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.210833][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.210866][ T24] ? __phys_addr+0xe8/0x180 [ 319.210907][ T24] ? __ethtool_get_link_ksettings+0x1e3/0x200 [ 319.210953][ T24] kasan_report+0xe0/0x110 [ 319.210987][ T24] ? __ethtool_get_link_ksettings+0x1e3/0x200 [ 319.211027][ T24] __ethtool_get_link_ksettings+0x1e3/0x200 [ 319.211061][ T24] __ethtool_get_link_ksettings+0x148/0x200 [ 319.211095][ T24] ib_get_eth_speed+0x122/0xb50 [ 319.211129][ T24] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 319.211155][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 319.211189][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.211233][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 319.211276][ T24] rxe_query_port+0x108/0x330 [ 319.211314][ T24] ib_query_port+0x441/0x8a0 [ 319.211342][ T24] smc_ib_port_event_work+0x12f/0xbf0 [ 319.211385][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.211422][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.211454][ T24] ? rcu_is_watching+0x12/0xc0 [ 319.211491][ T24] process_one_work+0x9cf/0x1b70 [ 319.211529][ T24] ? __pfx_process_one_work+0x10/0x10 [ 319.211559][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.211597][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.211629][ T24] ? assign_work+0x1a0/0x250 [ 319.211656][ T24] worker_thread+0x6c8/0xf10 [ 319.211693][ T24] ? __pfx_worker_thread+0x10/0x10 [ 319.211723][ T24] kthread+0x3c5/0x780 [ 319.211750][ T24] ? __pfx_kthread+0x10/0x10 [ 319.211776][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.211809][ T24] ? rcu_is_watching+0x12/0xc0 [ 319.211842][ T24] ? __pfx_kthread+0x10/0x10 [ 319.211869][ T24] ret_from_fork+0x56d/0x730 [ 319.211894][ T24] ? __pfx_kthread+0x10/0x10 [ 319.211921][ T24] ret_from_fork_asm+0x1a/0x30 [ 319.211963][ T24] [ 319.211972][ T24] [ 319.436801][ T24] Allocated by task 5864: [ 319.441121][ T24] kasan_save_stack+0x33/0x60 [ 319.445828][ T24] kasan_save_track+0x14/0x30 [ 319.450612][ T24] __kasan_kmalloc+0xaa/0xb0 [ 319.455216][ T24] __kvmalloc_node_noprof+0x27b/0x620 [ 319.460610][ T24] alloc_netdev_mqs+0xd2/0x1530 [ 319.465490][ T24] rtnl_create_link+0xc08/0xf90 [ 319.470363][ T24] rtnl_newlink+0xb69/0x2000 [ 319.474980][ T24] rtnetlink_rcv_msg+0x95e/0xe90 [ 319.479950][ T24] netlink_rcv_skb+0x158/0x420 [ 319.484714][ T24] netlink_unicast+0x5aa/0x870 [ 319.489501][ T24] netlink_sendmsg+0x8d1/0xdd0 [ 319.494287][ T24] __sys_sendto+0x4a3/0x520 [ 319.498808][ T24] __x64_sys_sendto+0xe0/0x1c0 [ 319.503675][ T24] do_syscall_64+0xcd/0x4e0 [ 319.508180][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.514076][ T24] [ 319.516387][ T24] Freed by task 6966: [ 319.520529][ T24] kasan_save_stack+0x33/0x60 [ 319.525234][ T24] kasan_save_track+0x14/0x30 [ 319.529937][ T24] kasan_save_free_info+0x3b/0x60 [ 319.534977][ T24] __kasan_slab_free+0x60/0x70 [ 319.539766][ T24] kfree+0x2b4/0x4d0 [ 319.543671][ T24] device_release+0xa4/0x240 [ 319.548269][ T24] kobject_put+0x1e7/0x5a0 [ 319.552694][ T24] netdev_run_todo+0x7e9/0x1320 [ 319.557574][ T24] default_device_exit_batch+0x858/0xaf0 [ 319.563245][ T24] ops_undo_list+0x363/0xab0 [ 319.567859][ T24] cleanup_net+0x408/0x890 [ 319.572278][ T24] process_one_work+0x9cf/0x1b70 [ 319.577746][ T24] worker_thread+0x6c8/0xf10 [ 319.582341][ T24] kthread+0x3c5/0x780 [ 319.586416][ T24] ret_from_fork+0x56d/0x730 [ 319.591003][ T24] ret_from_fork_asm+0x1a/0x30 [ 319.595774][ T24] [ 319.598087][ T24] The buggy address belongs to the object at ffff88807ccaa000 [ 319.598087][ T24] which belongs to the cache kmalloc-cg-4k of size 4096 [ 319.612499][ T24] The buggy address is located 744 bytes inside of [ 319.612499][ T24] freed 4096-byte region [ffff88807ccaa000, ffff88807ccab000) [ 319.626569][ T24] [ 319.629340][ T24] The buggy address belongs to the physical page: [ 319.635744][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cca8 [ 319.644690][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 319.653188][ T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 319.660730][ T24] page_type: f5(slab) [ 319.664712][ T24] raw: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 319.673407][ T24] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 319.682005][ T24] head: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 319.690682][ T24] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 319.699359][ T24] head: 00fff00000000003 ffffea0001f32a01 00000000ffffffff 00000000ffffffff [ 319.708032][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 319.716783][ T24] page dumped because: kasan: bad access detected [ 319.723190][ T24] page_owner tracks the page as allocated [ 319.728890][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 110522001312, free_ts 110466059778 [ 319.750715][ T24] post_alloc_hook+0x1c0/0x230 [ 319.755516][ T24] get_page_from_freelist+0x132b/0x38e0 [ 319.761109][ T24] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 319.767034][ T24] alloc_pages_mpol+0x1fb/0x550 [ 319.771892][ T24] new_slab+0x247/0x330 [ 319.776066][ T24] ___slab_alloc+0xcf2/0x1750 [ 319.780756][ T24] __slab_alloc.constprop.0+0x56/0xb0 [ 319.786158][ T24] __kmalloc_noprof+0x2f2/0x510 [ 319.791027][ T24] __register_sysctl_table+0xb3/0x1900 [ 319.796507][ T24] __addrconf_sysctl_register+0x1a2/0x360 [ 319.802330][ T24] addrconf_sysctl_register+0x15f/0x1f0 [ 319.807890][ T24] ipv6_add_dev+0xb31/0x15f0 [ 319.812493][ T24] addrconf_notify+0x53e/0x19e0 [ 319.817369][ T24] notifier_call_chain+0xbc/0x410 [ 319.822420][ T24] call_netdevice_notifiers_info+0xbe/0x140 [ 319.828318][ T24] register_netdevice+0x182e/0x2270 [ 319.833521][ T24] page last free pid 5866 tgid 5866 stack trace: [ 319.839838][ T24] __free_frozen_pages+0x7d5/0x10f0 [ 319.845047][ T24] qlist_free_all+0x4d/0x120 [ 319.849660][ T24] kasan_quarantine_reduce+0x195/0x1e0 [ 319.855161][ T24] __kasan_slab_alloc+0x69/0x90 [ 319.860087][ T24] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 319.865561][ T24] kset_create_and_add+0x4d/0x190 [ 319.870589][ T24] netdev_register_kobject+0x1ef/0x3d0 [ 319.876051][ T24] register_netdevice+0x13dc/0x2270 [ 319.881251][ T24] veth_newlink+0x446/0xa00 [ 319.885769][ T24] rtnl_newlink+0xc45/0x2000 [ 319.890383][ T24] rtnetlink_rcv_msg+0x95e/0xe90 [ 319.895344][ T24] netlink_rcv_skb+0x158/0x420 [ 319.900122][ T24] netlink_unicast+0x5aa/0x870 [ 319.904910][ T24] netlink_sendmsg+0x8d1/0xdd0 [ 319.909696][ T24] __sys_sendto+0x4a3/0x520 [ 319.914296][ T24] __x64_sys_sendto+0xe0/0x1c0 [ 319.919087][ T24] [ 319.921403][ T24] Memory state around the buggy address: [ 319.927021][ T24] ffff88807ccaa180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.935075][ T24] ffff88807ccaa200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.943135][ T24] >ffff88807ccaa280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.951186][ T24] ^ [ 319.959071][ T24] ffff88807ccaa300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.967305][ T24] ffff88807ccaa380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.975367][ T24] ================================================================== [ 320.015024][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.022201][ T6864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.046174][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.053322][ T6864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.529246][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.980246][ T7213] veth0_vlan: entered promiscuous mode [ 320.996739][ T7213] veth1_vlan: entered promiscuous mode [ 321.026675][ T7213] veth0_macvtap: entered promiscuous mode [ 321.035489][ T7213] veth1_macvtap: entered promiscuous mode [ 321.054956][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.068318][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.085037][ T6966] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.109353][ T6966] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.131046][ T6966] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.168575][ T6966] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.194582][ T6230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.209838][ T6230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.233485][ T6966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.245349][ T6966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50