last executing test programs: 9.1781641s ago: executing program 0 (id=13): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000440)={{0xc, 0x9}, 0x0, 0x3, 0x101, {0x4}, 0x7, 0x6}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0x7}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x4d, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @mcast2, {[], {0x4e23, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x2, 0x1, 0x0, @void}, "a01422c0876c392bd10fae4a7c4a9953afd9c2ca40f09ca29fa7aeb159f7f9cfd13dc736bdd4a500094176a24f7663e73fb0e2b2e7d236f85d36e508afa5aadf09"}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r6, &(0x7f00000005c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x8ac0}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xb13}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x9, &(0x7f0000000040)=""/9, 0x41000, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sched_getscheduler(0x0) capset(&(0x7f0000000000)={0x20080522, r1}, 0xfffffffffffffffd) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) 8.520029551s ago: executing program 0 (id=16): pipe(&(0x7f0000000600)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) file_setattr(r0, 0x0, &(0x7f0000000040)={0x9f20e36a208d6686, 0xd9, 0x3, 0x1000c, 0x7ff}, 0x18, 0x1000) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendfile(r2, r2, 0x0, 0x8) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) read$watch_queue(r3, &(0x7f0000000100)=""/244, 0xf4) 7.804053474s ago: executing program 1 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7.379319907s ago: executing program 1 (id=23): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7.334332032s ago: executing program 0 (id=24): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002800)) (fail_nth: 2) 6.882061104s ago: executing program 0 (id=27): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x211a10, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x100000d) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) 6.833651643s ago: executing program 4 (id=29): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 6.793628657s ago: executing program 1 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf2501000000000000000241fcffffffffffffff68"], 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r3 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_crypto(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=@getstat={0xe0, 0x15, 0x800, 0x70bd25, 0x25dfdbfd, {{'sha3-384\x00'}, '\x00', '\x00', 0x2000, 0x200}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0xd2bfeb7115555019}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x600}}, 0x3c) 6.793029017s ago: executing program 2 (id=31): syz_io_uring_setup(0xbd7, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200006600000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 6.694105326s ago: executing program 2 (id=32): socket$l2tp6(0xa, 0x2, 0x73) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 6.158987515s ago: executing program 4 (id=33): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) lseek(r0, 0xfffffffffffffff9, 0x2) read(r0, &(0x7f00000002c0)=""/22, 0x16) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 6.153301057s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6.030137196s ago: executing program 2 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x3, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xd}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0xe6295626380add95, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48010}, 0x4000081) 5.897809789s ago: executing program 2 (id=36): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003400), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0x4, 0x0, 0x8, 0x6, 0x7fff, "16b0bc450cfc57533d42b2177d4f7865", 0x1, 0x52, 0x4, 0x4, 0x9, 0x8, 0xd}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_emit_ethernet(0x5b, &(0x7f0000000280)={@random="80e775a5040b", @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x1}}, {@llc={0x4, {@llc={0xf8, 0xf4, "28b5", "df0221731c4e2618151091909c7b808273eab1765f6f7fbd9b5ef7bd9b9446a146f347588492456d63ace7a04aee3e95607be4c361005dd82167ed4bcb01844f6f"}}}}}, &(0x7f0000000300)={0x1, 0x1, [0xb51, 0xb7f, 0x51f, 0x5fc]}) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000240), 0xb, 0x900) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 5.186828159s ago: executing program 3 (id=37): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x8182, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000000c0)) (fail_nth: 1) 4.653243406s ago: executing program 1 (id=38): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) r3 = mq_open(&(0x7f0000000280)='vcan0\x00', 0x1, 0xc0, &(0x7f00000002c0)={0x451b, 0x9, 0xf4, 0x9}) mq_timedsend(r3, &(0x7f0000000640)="2b7071b8356af8c5294395e2f19fef6b937a7bbee6312f4b9302b453535b1048282765944e4c303fc6bcdbd04761c38acc649e5169a107beed2b9c71af983a1fb14b075649f1243cbd8ac3a0782977cbc81b1204299f8ed37e4d7ffb35566691f95041bc3be6ad11c4cf756be15623b55b63e13b82b87ab4ed64c89e03361c528c6db87792e41b644956ab7a745ce2a4735670bab52e8941d72496d27f655516232565444c8445aabdc5e0cae82ac2703e5198d60128e71dd70dea35fd5cd5bc5402188a428f89c7b204f49f9a0d40746916db856ff28b09df5d15a1966585c5ef", 0xe1, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000001c0), 0x2}, 0x20) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x9) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000040)=0x40000000010000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000240)={0x1, 0xe, "5c392ccfe4da251dde42c23f845d"}) 4.596505029s ago: executing program 0 (id=39): openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0xc182, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0003001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300671a05002c00128009000100626f6e64000000001c00028008001c001801000005000100050000000800050001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48051}, 0x20008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2028000, &(0x7f0000019300)={[], [{@subj_role={'subj_role', 0x3d, '\x00'}}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x8000, &(0x7f0000000240)=0x21f, 0x29, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = syz_open_dev$video(0x0, 0x7, 0xa000) read(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b8bae4403d0fa368182c01020301"], 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d46edf623c14fd00", r6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0x100}, 0xf, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0x76, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80010001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x10003, 0xe, 0x8, 0xc000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x4, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x4, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x3, 0xb, 0x1, 0x9, 0x401, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0xc, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x4006d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0xffff, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb32, 0x80000000, 0xb, 0xfffffff8, 0x3ff, 0x6, 0x1000003, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0xfff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x200005, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x400fff]}, 0x45c) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000200)=0xfffff50e) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.346072071s ago: executing program 3 (id=40): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4.194610999s ago: executing program 3 (id=41): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(r0) (fail_nth: 2) 3.921883432s ago: executing program 3 (id=42): syz_io_uring_setup(0xbd7, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200006600000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 3.743114778s ago: executing program 4 (id=43): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 3.582032824s ago: executing program 3 (id=44): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x8000) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)="a9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)}, {&(0x7f0000002880)="d3d0ad6f98ae76390c1ab6204a0b3874d7e9d1c8b9d0e946a6e9fae55340b0edac65ad54d7f6072952a75935563edef3a08f6e5dd948ca96d92aa48f185b6f3142ec5522a7d207064c4c1d4938ae16228db8dc8803214b882cac2efd33f685370ca76a30ba500c77a0a91aa19d72cd6ec2771c476112c2dc961d5e3f00dcf1a34c77ad149a32a5", 0x87}], 0x2, &(0x7f00000006c0)}}], 0x2, 0x80) socket(0x2c, 0x3, 0x0) 3.548327155s ago: executing program 4 (id=45): socket$l2tp6(0xa, 0x2, 0x73) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 3.517797877s ago: executing program 1 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) 3.403438528s ago: executing program 3 (id=47): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4142, 0xba) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) copy_file_range(r0, &(0x7f0000000100), r0, 0x0, 0x6, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2010000, &(0x7f0000000080), 0x0, &(0x7f0000000140), {0x4}, &(0x7f0000000240)=""/58, 0x3a, &(0x7f0000000300)=""/53, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10fc}], 0x0, 0x1f, 0x0}) capset(0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_print_times', 0x82802, 0xf) 2.879573467s ago: executing program 4 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf2501000000000000000241fcffffffffffffff68"], 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r3 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_crypto(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=@getstat={0xe0, 0x15, 0x800, 0x70bd25, 0x25dfdbfd, {{'sha3-384\x00'}, '\x00', '\x00', 0x2000, 0x200}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0xd2bfeb7115555019}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x600}}, 0x3c) 2.556733582s ago: executing program 2 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 601.131796ms ago: executing program 1 (id=50): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) unshare(0x22020600) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x4, {0xa, 0x4e21, 0x0, @remote, 0x8001}}}, 0x3a) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000380)=0x1ff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x10000000}) accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{}, [@bcast, @remote, @null, @default, @bcast, @bcast, @remote, @rose]}, &(0x7f00000001c0)=0x48, 0x80800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000200)) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}) 599.47886ms ago: executing program 4 (id=51): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000b80)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x3, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x20000000) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x71, 0x11cfa, 0xffffffff, 0x8000008, 0x4, 0x7, 0x1, 0x0, 0x0, 0x4d}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1c, 0x2, @thr={&(0x7f0000000400)="b9558cea4eac0b2a6a42f3df0e98bd735b70284171e8ccaff9a6741fb656e3f5715fe1a08223e7d583b731cdc79fee1d98547281a437e8962d2efd555b8b90f25f0e1985", 0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xe) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x6, 0x0, 0x1c, 0x1c}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 72.368169][ T5789] cgroup: Unknown subsys name 'net' [ 72.609088][ T5789] cgroup: Unknown subsys name 'cpuset' [ 72.665632][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.262910][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.440069][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.447102][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.448527][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.449501][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.452558][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.453169][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.454612][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.455979][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.457231][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.457593][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.459057][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.461393][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.466369][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.469536][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.477824][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.480715][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.485599][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.486942][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.503260][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.518069][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.519944][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.520638][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.521482][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.526847][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.534202][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.349724][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 77.356358][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 77.374878][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 77.409149][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 77.456396][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 77.718657][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.719425][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.719744][ T5802] bridge_slave_0: entered allmulticast mode [ 77.721205][ T5802] bridge_slave_0: entered promiscuous mode [ 77.724856][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.739779][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.739897][ T5801] bridge_slave_0: entered allmulticast mode [ 77.741311][ T5801] bridge_slave_0: entered promiscuous mode [ 77.781134][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.781244][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.781464][ T5814] bridge_slave_0: entered allmulticast mode [ 77.783116][ T5814] bridge_slave_0: entered promiscuous mode [ 77.835734][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.835846][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.836003][ T5802] bridge_slave_1: entered allmulticast mode [ 77.837937][ T5802] bridge_slave_1: entered promiscuous mode [ 77.840106][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.840184][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.840465][ T5801] bridge_slave_1: entered allmulticast mode [ 77.841783][ T5801] bridge_slave_1: entered promiscuous mode [ 77.842971][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.843041][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.843301][ T5814] bridge_slave_1: entered allmulticast mode [ 77.844727][ T5814] bridge_slave_1: entered promiscuous mode [ 77.877578][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.877697][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.878176][ T5800] bridge_slave_0: entered allmulticast mode [ 77.880630][ T5800] bridge_slave_0: entered promiscuous mode [ 77.955275][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.955398][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.955504][ T5800] bridge_slave_1: entered allmulticast mode [ 77.956840][ T5800] bridge_slave_1: entered promiscuous mode [ 77.957856][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.957936][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.958051][ T5799] bridge_slave_0: entered allmulticast mode [ 77.959415][ T5799] bridge_slave_0: entered promiscuous mode [ 78.029098][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.029183][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.029284][ T5799] bridge_slave_1: entered allmulticast mode [ 78.030628][ T5799] bridge_slave_1: entered promiscuous mode [ 78.034495][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.051461][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.054795][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.095755][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.098674][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.101248][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.104163][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.183483][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.195397][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.476609][ T5120] Bluetooth: hci0: command tx timeout [ 78.481077][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.482625][ T5802] team0: Port device team_slave_0 added [ 78.484412][ T5801] team0: Port device team_slave_0 added [ 78.487553][ T5814] team0: Port device team_slave_0 added [ 78.523631][ T5802] team0: Port device team_slave_1 added [ 78.539535][ T5814] team0: Port device team_slave_1 added [ 78.541091][ T5801] team0: Port device team_slave_1 added [ 78.542659][ T5800] team0: Port device team_slave_0 added [ 78.562171][ T5120] Bluetooth: hci4: command tx timeout [ 78.562214][ T5809] Bluetooth: hci2: command tx timeout [ 78.562322][ T5120] Bluetooth: hci3: command tx timeout [ 78.616137][ T5800] team0: Port device team_slave_1 added [ 78.630065][ T5799] team0: Port device team_slave_0 added [ 78.635143][ T5804] Bluetooth: hci1: command tx timeout [ 78.668562][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.668574][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.668587][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.671700][ T5799] team0: Port device team_slave_1 added [ 78.672330][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.672338][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.672351][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.673316][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.673328][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.673351][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.693246][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.693261][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.693284][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.716354][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.716369][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.716392][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.717820][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.717831][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.717854][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.744509][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.744531][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.744554][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.796749][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.796765][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.796789][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.802250][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.802264][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.802287][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.844209][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.844225][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.844248][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.970361][ T5802] hsr_slave_0: entered promiscuous mode [ 78.971862][ T5802] hsr_slave_1: entered promiscuous mode [ 78.983166][ T5814] hsr_slave_0: entered promiscuous mode [ 78.984409][ T5814] hsr_slave_1: entered promiscuous mode [ 78.988191][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 78.988303][ T5814] Cannot create hsr debugfs directory [ 79.062539][ T5800] hsr_slave_0: entered promiscuous mode [ 79.063765][ T5800] hsr_slave_1: entered promiscuous mode [ 79.064625][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 79.064647][ T5800] Cannot create hsr debugfs directory [ 79.154127][ T5801] hsr_slave_0: entered promiscuous mode [ 79.156082][ T5801] hsr_slave_1: entered promiscuous mode [ 79.156965][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 79.156987][ T5801] Cannot create hsr debugfs directory [ 79.168551][ T5799] hsr_slave_0: entered promiscuous mode [ 79.169731][ T5799] hsr_slave_1: entered promiscuous mode [ 79.170569][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 79.170590][ T5799] Cannot create hsr debugfs directory [ 80.211826][ T5802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.232891][ T5802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.270143][ T5802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.311885][ T5802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.426648][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.453323][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.489265][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.543240][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.556084][ T5804] Bluetooth: hci0: command tx timeout [ 80.635801][ T5804] Bluetooth: hci3: command tx timeout [ 80.646872][ T5804] Bluetooth: hci2: command tx timeout [ 80.646890][ T5120] Bluetooth: hci4: command tx timeout [ 80.662401][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.692986][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.715085][ T5804] Bluetooth: hci1: command tx timeout [ 80.737116][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.782066][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.886091][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.924832][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.967219][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.014763][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.094171][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.130097][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.177171][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.213123][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.252010][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.308582][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.343862][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.344524][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.375711][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.375908][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.380097][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.459125][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.490775][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.494055][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.494127][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.518118][ T1244] cfg80211: failed to load regulatory.db [ 81.550868][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.552400][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.623689][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.633319][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.691549][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.692554][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.771387][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.771521][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.859884][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.874583][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.928072][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.928230][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.964755][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.964880][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.052326][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.107756][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.107953][ T4173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.153675][ T1485] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.155413][ T1485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.244364][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.470435][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.635240][ T5804] Bluetooth: hci0: command tx timeout [ 82.641856][ T5802] veth0_vlan: entered promiscuous mode [ 82.707443][ T5802] veth1_vlan: entered promiscuous mode [ 82.715070][ T5804] Bluetooth: hci2: command tx timeout [ 82.726653][ T5804] Bluetooth: hci4: command tx timeout [ 82.726670][ T5120] Bluetooth: hci3: command tx timeout [ 82.754495][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.796886][ T5120] Bluetooth: hci1: command tx timeout [ 82.900837][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.999556][ T5802] veth0_macvtap: entered promiscuous mode [ 83.027006][ T5802] veth1_macvtap: entered promiscuous mode [ 83.064869][ T5800] veth0_vlan: entered promiscuous mode [ 83.078844][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.104125][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.123520][ T5800] veth1_vlan: entered promiscuous mode [ 83.134792][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.160536][ T5801] veth0_vlan: entered promiscuous mode [ 83.175897][ T1440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.180230][ T1440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.202476][ T1440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.222311][ T1440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.240312][ T5801] veth1_vlan: entered promiscuous mode [ 83.289456][ T5814] veth0_vlan: entered promiscuous mode [ 83.421556][ T5814] veth1_vlan: entered promiscuous mode [ 83.432153][ T5799] veth0_vlan: entered promiscuous mode [ 83.433876][ T5800] veth0_macvtap: entered promiscuous mode [ 83.483162][ T5800] veth1_macvtap: entered promiscuous mode [ 83.499105][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.499128][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.504487][ T5799] veth1_vlan: entered promiscuous mode [ 83.549298][ T5801] veth0_macvtap: entered promiscuous mode [ 83.587666][ T5801] veth1_macvtap: entered promiscuous mode [ 83.591911][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.605177][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.605193][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.646571][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.662626][ T5814] veth0_macvtap: entered promiscuous mode [ 83.680102][ T1221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.682656][ T1221] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.705981][ T1221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.708255][ T5814] veth1_macvtap: entered promiscuous mode [ 83.710741][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.711556][ T1221] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.736065][ T5799] veth0_macvtap: entered promiscuous mode [ 83.740029][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.798516][ T5799] veth1_macvtap: entered promiscuous mode [ 83.809412][ T1221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.856740][ T1221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.869401][ T1221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.880850][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.882027][ T1221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.056224][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.180718][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.308209][ T1221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.311442][ T1221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.318463][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.346449][ T1221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.368124][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.368140][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.370583][ T1485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.414835][ T1485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.464530][ T1485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.474824][ T1485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.488493][ T1485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.519880][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.519898][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.651030][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.651048][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.717616][ T5120] Bluetooth: hci0: command tx timeout [ 84.795173][ T5120] Bluetooth: hci4: command tx timeout [ 84.795201][ T5120] Bluetooth: hci3: command tx timeout [ 84.795216][ T5120] Bluetooth: hci2: command tx timeout [ 84.827344][ T4173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.827362][ T4173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.875702][ T5804] Bluetooth: hci1: command tx timeout [ 85.058774][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.058795][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.108519][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.108539][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.280299][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.280318][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.306262][ T5928] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 85.420104][ T1485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.420125][ T1485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.655616][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.852691][ T5884] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 85.852718][ T5884] usb 3-1: config 220 has an invalid descriptor of length 7, skipping remainder of the config [ 85.852737][ T5884] usb 3-1: config 220 has no interface number 2 [ 85.852943][ T5884] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 85.852967][ T5884] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 85.852993][ T5884] usb 3-1: config 220 interface 0 has no altsetting 0 [ 85.853010][ T5884] usb 3-1: config 220 interface 76 has no altsetting 0 [ 85.853028][ T5884] usb 3-1: config 220 interface 1 has no altsetting 0 [ 85.860412][ T5884] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 85.860439][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.860458][ T5884] usb 3-1: Product: syz [ 85.860471][ T5884] usb 3-1: Manufacturer: syz [ 85.860484][ T5884] usb 3-1: SerialNumber: syz [ 86.104918][ T5942] bond1 (unregistering): Released all slaves [ 86.426050][ T5884] usb 3-1: selecting invalid altsetting 0 [ 86.456160][ T5884] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 86.456202][ T5884] uvcvideo 3-1:220.0: No valid video chain found. [ 86.500855][ T5884] usb 3-1: selecting invalid altsetting 0 [ 86.500891][ T5884] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 86.539640][ T5884] usb 3-1: USB disconnect, device number 2 [ 86.684336][ T5959] FAULT_INJECTION: forcing a failure. [ 86.684336][ T5959] name failslab, interval 1, probability 0, space 0, times 1 [ 86.684380][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 86.684401][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 86.684417][ T5959] Call Trace: [ 86.684427][ T5959] [ 86.684436][ T5959] dump_stack_lvl+0xe8/0x150 [ 86.684470][ T5959] should_fail_ex+0x46b/0x600 [ 86.684497][ T5959] should_failslab+0xa8/0x100 [ 86.684518][ T5959] __kmalloc_noprof+0xdf/0x7b0 [ 86.684538][ T5959] ? bpf_test_init+0x9f/0x150 [ 86.684564][ T5959] bpf_test_init+0x9f/0x150 [ 86.684588][ T5959] bpf_prog_test_run_skb+0x375/0x1d50 [ 86.684616][ T5959] ? __fget_files+0x2a/0x420 [ 86.684641][ T5959] ? __fget_files+0x2a/0x420 [ 86.684660][ T5959] ? __fget_files+0x3a6/0x420 [ 86.684680][ T5959] ? __fget_files+0x2a/0x420 [ 86.684706][ T5959] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 86.684727][ T5959] bpf_prog_test_run+0x2cd/0x340 [ 86.684749][ T5959] __sys_bpf+0x643/0x950 [ 86.684775][ T5959] ? __pfx___sys_bpf+0x10/0x10 [ 86.684795][ T5959] ? rt_mutex_slowunlock+0x1cb/0x300 [ 86.684830][ T5959] ? ksys_write+0x248/0x270 [ 86.684850][ T5959] ? __pfx_ksys_write+0x10/0x10 [ 86.684874][ T5959] __x64_sys_bpf+0x7c/0x90 [ 86.684896][ T5959] do_syscall_64+0x14d/0xf80 [ 86.684917][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.684933][ T5959] ? trace_irq_disable+0x37/0x100 [ 86.684952][ T5959] ? clear_bhb_loop+0x40/0x90 [ 86.684971][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.684987][ T5959] RIP: 0033:0x7f7a3c6fbf79 [ 86.685006][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.685021][ T5959] RSP: 002b:00007f7a3a94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.685040][ T5959] RAX: ffffffffffffffda RBX: 00007f7a3c975fa0 RCX: 00007f7a3c6fbf79 [ 86.685052][ T5959] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 86.685062][ T5959] RBP: 00007f7a3a94e090 R08: 0000000000000000 R09: 0000000000000000 [ 86.685073][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.685084][ T5959] R13: 00007f7a3c976038 R14: 00007f7a3c975fa0 R15: 00007ffcd994b8e8 [ 86.685112][ T5959] [ 87.017191][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.175774][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 87.181873][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.181895][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.196482][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.196509][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.196527][ T5887] usb 4-1: Product: syz [ 87.196540][ T5887] usb 4-1: Manufacturer: syz [ 87.196552][ T5887] usb 4-1: SerialNumber: syz [ 87.446029][ T5887] usb 4-1: 0:2 : does not exist [ 87.471919][ T5887] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 87.585020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.625096][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 87.679167][ T5979] Bluetooth: MGMT ver 1.23 [ 88.102389][ T5887] usb 4-1: USB disconnect, device number 2 [ 88.291577][ T5987] FAULT_INJECTION: forcing a failure. [ 88.291577][ T5987] name failslab, interval 1, probability 0, space 0, times 0 [ 88.291610][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 88.291630][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.291640][ T5987] Call Trace: [ 88.291647][ T5987] [ 88.291655][ T5987] dump_stack_lvl+0xe8/0x150 [ 88.291683][ T5987] should_fail_ex+0x46b/0x600 [ 88.291709][ T5987] should_failslab+0xa8/0x100 [ 88.291731][ T5987] __kmalloc_noprof+0xdf/0x7b0 [ 88.291761][ T5987] ? tomoyo_encode+0x28b/0x550 [ 88.291786][ T5987] tomoyo_encode+0x28b/0x550 [ 88.291810][ T5987] tomoyo_realpath_from_path+0x58d/0x5d0 [ 88.291832][ T5987] ? tomoyo_domain+0xd8/0x130 [ 88.291860][ T5987] ? tomoyo_path_number_perm+0x219/0x630 [ 88.291884][ T5987] tomoyo_path_number_perm+0x246/0x630 [ 88.291910][ T5987] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 88.291933][ T5987] ? __lock_acquire+0x6b5/0x2cf0 [ 88.291957][ T5987] ? do_raw_spin_lock+0x12b/0x2f0 [ 88.292007][ T5987] ? __fget_files+0x2a/0x420 [ 88.292032][ T5987] ? __fget_files+0x2a/0x420 [ 88.292051][ T5987] ? __fget_files+0x3a6/0x420 [ 88.292071][ T5987] ? __fget_files+0x2a/0x420 [ 88.292096][ T5987] security_file_ioctl+0xc3/0x2a0 [ 88.292123][ T5987] __se_sys_ioctl+0x47/0x170 [ 88.292144][ T5987] do_syscall_64+0x14d/0xf80 [ 88.292165][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.292182][ T5987] ? trace_irq_disable+0x37/0x100 [ 88.292197][ T5987] ? clear_bhb_loop+0x40/0x90 [ 88.292219][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.292236][ T5987] RIP: 0033:0x7f375c5cbf79 [ 88.292253][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.292267][ T5987] RSP: 002b:00007f375a826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.292286][ T5987] RAX: ffffffffffffffda RBX: 00007f375c845fa0 RCX: 00007f375c5cbf79 [ 88.292299][ T5987] RDX: 0000200000002800 RSI: 0000000000008903 RDI: 0000000000000003 [ 88.292310][ T5987] RBP: 00007f375a826090 R08: 0000000000000000 R09: 0000000000000000 [ 88.292321][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.292332][ T5987] R13: 00007f375c846038 R14: 00007f375c845fa0 R15: 00007ffc74e689b8 [ 88.292362][ T5987] [ 88.351991][ T5987] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.772303][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.487398][ T6010] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 89.487421][ T6010] netlink: 96 bytes leftover after parsing attributes in process `syz.2.35'. [ 89.975461][ T6015] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 90.287871][ T5120] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.288026][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 90.473504][ T6020] FAULT_INJECTION: forcing a failure. [ 90.473504][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 90.473536][ T6020] CPU: 0 UID: 0 PID: 6020 Comm: syz.3.37 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 90.473557][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.473567][ T6020] Call Trace: [ 90.473574][ T6020] [ 90.473581][ T6020] dump_stack_lvl+0xe8/0x150 [ 90.473609][ T6020] should_fail_ex+0x46b/0x600 [ 90.473636][ T6020] should_failslab+0xa8/0x100 [ 90.473657][ T6020] __kmalloc_noprof+0xdf/0x7b0 [ 90.473675][ T6020] ? kfree+0x4d/0x690 [ 90.473690][ T6020] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 90.473716][ T6020] tomoyo_realpath_from_path+0xe3/0x5d0 [ 90.473737][ T6020] ? tomoyo_domain+0xd8/0x130 [ 90.473763][ T6020] ? tomoyo_path_number_perm+0x219/0x630 [ 90.473786][ T6020] tomoyo_path_number_perm+0x246/0x630 [ 90.473813][ T6020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.473842][ T6020] ? __lock_acquire+0x6b5/0x2cf0 [ 90.473867][ T6020] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.473926][ T6020] ? __fget_files+0x2a/0x420 [ 90.473951][ T6020] ? __fget_files+0x2a/0x420 [ 90.473971][ T6020] ? __fget_files+0x3a6/0x420 [ 90.473991][ T6020] ? __fget_files+0x2a/0x420 [ 90.474016][ T6020] security_file_ioctl+0xc3/0x2a0 [ 90.474043][ T6020] __se_sys_ioctl+0x47/0x170 [ 90.474064][ T6020] do_syscall_64+0x14d/0xf80 [ 90.474085][ T6020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.474102][ T6020] ? trace_irq_disable+0x37/0x100 [ 90.474117][ T6020] ? clear_bhb_loop+0x40/0x90 [ 90.474137][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.474153][ T6020] RIP: 0033:0x7f18f7e2bf79 [ 90.474170][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.474184][ T6020] RSP: 002b:00007f18f607e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.474204][ T6020] RAX: ffffffffffffffda RBX: 00007f18f80a5fa0 RCX: 00007f18f7e2bf79 [ 90.474217][ T6020] RDX: 00002000000000c0 RSI: 0000000080044dfe RDI: 0000000000000003 [ 90.474228][ T6020] RBP: 00007f18f607e090 R08: 0000000000000000 R09: 0000000000000000 [ 90.474239][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.474250][ T6020] R13: 00007f18f80a6038 R14: 00007f18f80a5fa0 R15: 00007ffc5e5668a8 [ 90.474280][ T6020] [ 90.649841][ T6020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.303938][ T6033] FAULT_INJECTION: forcing a failure. [ 91.303938][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.303969][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 91.303989][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 91.303999][ T6033] Call Trace: [ 91.304005][ T6033] [ 91.304013][ T6033] dump_stack_lvl+0xe8/0x150 [ 91.304041][ T6033] should_fail_ex+0x46b/0x600 [ 91.304066][ T6033] _copy_to_user+0x31/0xb0 [ 91.304090][ T6033] simple_read_from_buffer+0xe1/0x170 [ 91.304116][ T6033] proc_fail_nth_read+0x1be/0x230 [ 91.304139][ T6033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.304161][ T6033] ? rw_verify_area+0x2ac/0x4e0 [ 91.304184][ T6033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.304203][ T6033] vfs_read+0x212/0xa70 [ 91.304226][ T6033] ? __pfx_vfs_read+0x10/0x10 [ 91.304241][ T6033] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 91.304262][ T6033] ? lockdep_hardirqs_on+0x7a/0x110 [ 91.304283][ T6033] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 91.304303][ T6033] ? mutex_lock_nested+0x152/0x1d0 [ 91.304319][ T6033] ? fdget_pos+0x252/0x320 [ 91.304348][ T6033] ksys_read+0x156/0x270 [ 91.304369][ T6033] ? __pfx_ksys_read+0x10/0x10 [ 91.304398][ T6033] do_syscall_64+0x14d/0xf80 [ 91.304418][ T6033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.304435][ T6033] ? trace_irq_disable+0x37/0x100 [ 91.304450][ T6033] ? clear_bhb_loop+0x40/0x90 [ 91.304471][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.304487][ T6033] RIP: 0033:0x7f18f7dec84e [ 91.304504][ T6033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.304527][ T6033] RSP: 002b:00007f18f607dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.304546][ T6033] RAX: ffffffffffffffda RBX: 00007f18f607e6c0 RCX: 00007f18f7dec84e [ 91.304560][ T6033] RDX: 000000000000000f RSI: 00007f18f607e0a0 RDI: 0000000000000005 [ 91.304571][ T6033] RBP: 00007f18f607e090 R08: 0000000000000000 R09: 0000000000000000 [ 91.304582][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.304593][ T6033] R13: 00007f18f80a6038 R14: 00007f18f80a5fa0 R15: 00007ffc5e5668a8 [ 91.304623][ T6033] [ 91.315057][ T829] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.455028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.556055][ T829] usb 3-1: Using ep0 maxpacket: 16 [ 91.566461][ T829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.566485][ T829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.597895][ T829] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.597912][ T829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.597922][ T829] usb 3-1: Product: syz [ 91.597930][ T829] usb 3-1: Manufacturer: syz [ 91.597937][ T829] usb 3-1: SerialNumber: syz [ 91.869205][ T829] usb 3-1: 0:2 : does not exist [ 91.884397][ T829] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 91.960634][ T5975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.383928][ T5975] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 92.383966][ T5975] usb 1-1: can't read configurations, error -61 [ 92.495767][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 92.868095][ T829] usb 3-1: USB disconnect, device number 3 [ 92.895079][ T5975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.120928][ T5120] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.120990][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 93.166803][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.263040][ T6050] netlink: 'syz.4.48': attribute type 4 has an invalid length. [ 94.371511][ T6051] binder: 6046:6051 ioctl c0306201 2000000003c0 returned -14 [ 94.496325][ T6051] binder: 6046:6051 ioctl 80049367 0 returned -22 [ 94.904991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.559147][ T5975] usb 1-1: device descriptor read/all, error -71 [ 95.578692][ T5975] usb usb1-port1: attempt power cycle [ 95.597777][ T5975] ================================================================== [ 95.597794][ T5975] BUG: KASAN: slab-use-after-free in raw_queue_event+0x292/0x2e0 [ 95.597829][ T5975] Read of size 4 at addr ffff88803e9aaa00 by task kworker/1:8/5975 [ 95.597845][ T5975] [ 95.597857][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.597879][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 95.597891][ T5975] Workqueue: usb_hub_wq hub_event [ 95.597918][ T5975] Call Trace: [ 95.597926][ T5975] [ 95.597935][ T5975] dump_stack_lvl+0xe8/0x150 [ 95.597962][ T5975] print_report+0xba/0x230 [ 95.597985][ T5975] ? raw_queue_event+0x292/0x2e0 [ 95.598010][ T5975] kasan_report+0x117/0x150 [ 95.598031][ T5975] ? raw_queue_event+0x292/0x2e0 [ 95.598057][ T5975] raw_queue_event+0x292/0x2e0 [ 95.598084][ T5975] gadget_disconnect+0x51/0xe0 [ 95.598113][ T5975] set_link_state+0xc0a/0x1220 [ 95.598146][ T5975] dummy_hub_control+0xafc/0x1a00 [ 95.598184][ T5975] ? usb_hcd_submit_urb+0x786/0x1b50 [ 95.598204][ T5975] usb_hcd_submit_urb+0xdbe/0x1b50 [ 95.598227][ T5975] usb_start_wait_urb+0x12b/0x510 [ 95.598250][ T5975] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 95.598281][ T5975] usb_control_msg+0x232/0x3e0 [ 95.598307][ T5975] hub_event+0x2dc0/0x4f60 [ 95.598355][ T5975] ? __pfx_hub_event+0x10/0x10 [ 95.598379][ T5975] ? process_scheduled_works+0xa0f/0x17a0 [ 95.598402][ T5975] ? process_scheduled_works+0xa0f/0x17a0 [ 95.598422][ T5975] ? process_scheduled_works+0xa0f/0x17a0 [ 95.598445][ T5975] process_scheduled_works+0xaec/0x17a0 [ 95.598480][ T5975] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.598504][ T5975] ? assign_work+0x3d5/0x5e0 [ 95.598528][ T5975] worker_thread+0xa50/0xfc0 [ 95.598561][ T5975] kthread+0x388/0x470 [ 95.598589][ T5975] ? __pfx_worker_thread+0x10/0x10 [ 95.598611][ T5975] ? __pfx_kthread+0x10/0x10 [ 95.598635][ T5975] ret_from_fork+0x51e/0xb90 [ 95.598660][ T5975] ? __pfx_ret_from_fork+0x10/0x10 [ 95.598681][ T5975] ? __switch_to+0xc7d/0x1400 [ 95.598703][ T5975] ? __pfx_kthread+0x10/0x10 [ 95.598728][ T5975] ret_from_fork_asm+0x1a/0x30 [ 95.598764][ T5975] [ 95.598771][ T5975] [ 95.598776][ T5975] Allocated by task 6025: [ 95.598786][ T5975] kasan_save_track+0x3e/0x80 [ 95.598802][ T5975] __kasan_kmalloc+0x93/0xb0 [ 95.598818][ T5975] __kmalloc_cache_noprof+0x3a6/0x690 [ 95.598837][ T5975] raw_open+0x8d/0x530 [ 95.598858][ T5975] misc_open+0x2de/0x350 [ 95.598881][ T5975] chrdev_open+0x4d0/0x5f0 [ 95.598899][ T5975] do_dentry_open+0x83d/0x13e0 [ 95.598918][ T5975] vfs_open+0x3b/0x350 [ 95.598937][ T5975] path_openat+0x2e3d/0x38a0 [ 95.598951][ T5975] do_file_open+0x23e/0x4a0 [ 95.598966][ T5975] do_sys_openat2+0x113/0x200 [ 95.598987][ T5975] __x64_sys_openat+0x138/0x170 [ 95.599008][ T5975] do_syscall_64+0x14d/0xf80 [ 95.599029][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.599045][ T5975] [ 95.599048][ T5975] Freed by task 6024: [ 95.599057][ T5975] kasan_save_track+0x3e/0x80 [ 95.599070][ [ 95.599070][ T5975] kasan_save_free_info+0x46/0x50 [ 95.599092][ T5975] __kasan_slab_free+0x5c/0x80 [ 95.599108][ T5975] kfree+0x1c1/0x690 [ 95.599122][ T5975] raw_release+0x191/0x260 [ 95.599140][ T5975] __fput+0x45e/0xa80 [ 95.599159][ T5975] task_work_run+0x1d9/0x270 [ 95.599184][ T5975] do_exit+0x69b/0x2320 [ 95.599207][ T5975] do_group_exit+0x21b/0x2d0 [ 95.599221][ T5975] get_signal+0x125c/0x1310 [ 95.599238][ T5975] arch_do_signal_or_restart+0xbc/0x830 [ 95.599256][ T5975] exit_to_user_mode_loop+0x86/0x480 [ 95.599276][ T5975] do_syscall_64+0x32d/0xf80 [ 95.599296][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.599313][ T5975] [ 95.599317][ T5975] The buggy address belongs to the object at ffff88803e9aa000 [ 95.599317][ T5975] which belongs to the cache kmalloc-4k of size 4096 [ 95.599334][ T5975] The buggy address is located 2560 bytes inside of [ 95.599334][ T5975] freed 4096-byte region [ffff88803e9aa000, ffff88803e9ab000) [ 95.599355][ T5975] [ 95.599360][ T5975] The buggy address belongs to the physical page: [ 95.599376][ T5975] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3e9a8 [ 95.599398][ T5975] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.599415][ T5975] flags: 0x80000000000040(head|node=0|zone=1) [ 95.599438][ T5975] page_type: f5(slab) [ 95.599455][ T5975] raw: 0080000000000040 ffff88813fe0e140 dead000000000100 dead000000000122 [ 95.599472][ T5975] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 95.599491][ T5975] head: 0080000000000040 ffff88813fe0e140 dead000000000100 dead000000000122 [ 95.599507][ T5975] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 95.599525][ T5975] head: 0080000000000003 ffffea0000fa6a01 00000000ffffffff 00000000ffffffff [ 95.599540][ T5975] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 95.599550][ T5975] page dumped because: kasan: bad access detected [ 95.599562][ T5975] page_owner tracks the page as allocated [ 95.599569][ T5975] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1221, tgid 1221 (kworker/u8:6), ts 91396353102, free_ts 91022075648 [ 95.599603][ T5975] post_alloc_hook+0x228/0x280 [ 95.599621][ T5975] get_page_from_freelist+0x28bb/0x2950 [ 95.599640][ T5975] __alloc_frozen_pages_noprof+0x18d/0x380 [ 95.599662][ T5975] alloc_pages_mpol+0xd1/0x380 [ 95.599681][ T5975] allocate_slab+0x83/0x660 [ 95.599704][ T5975] ___slab_alloc+0x150/0x640 [ 95.599728][ T5975] __kmalloc_node_track_caller_noprof+0x29d/0x7e0 [ 95.599749][ T5975] kmalloc_reserve+0x136/0x290 [ 95.599776][ T5975] __alloc_skb+0x204/0x390 [ 95.599796][ T5975] nsim_dev_trap_report_work+0x29f/0xbc0 [ 95.599811][ T5975] process_scheduled_works+0xaec/0x17a0 [ 95.599831][ T5975] worker_thread+0xa50/0xfc0 [ 95.599852][ T5975] kthread+0x388/0x470 [ 95.599876][ T5975] ret_from_fork+0x51e/0xb90 [ 95.599897][ T5975] ret_from_fork_asm+0x1a/0x30 [ 95.599923][ T5975] page last free pid 6022 tgid 6022 stack trace: [ 95.599934][ T5975] __free_frozen_pages+0xfd0/0x1160 [ 95.599954][ T5975] __slab_free+0x24f/0x2a0 [ 95.599971][ T5975] qlist_free_all+0x97/0x100 [ 95.599998][ T5975] kasan_quarantine_reduce+0x148/0x160 [ 95.600023][ T5975] __kasan_slab_alloc+0x22/0x80 [ 95.600039][ T5975] __kvmalloc_node_noprof+0x371/0x8e0 [ 95.600057][ T5975] seq_read_iter+0x203/0xe20 [ 95.600075][ T5975] vfs_read+0x58b/0xa70 [ 95.600090][ T5975] ksys_read+0x156/0x270 [ 95.600106][ T5975] do_syscall_64+0x14d/0xf80 [ 95.600127][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.600144][ T5975] [ 95.600149][ T5975] Memory state around the buggy address: [ 95.600159][ T5975] ffff88803e9aa900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.600204][ T5975] ffff88803e9aa980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.600217][ T5975] >ffff88803e9aaa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.600227][ T5975] ^ [ 95.600236][ T5975] ffff88803e9aaa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.600250][ T5975] ffff88803e9aab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.600259][ T5975] ================================================================== [ 95.925036][ T5975] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.925067][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.925092][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 95.925106][ T5975] Workqueue: usb_hub_wq hub_event [ 95.925136][ T5975] Call Trace: [ 95.925143][ T5975] [ 95.925152][ T5975] vpanic+0x1e0/0x670 [ 95.925183][ T5975] panic+0xc5/0xd0 [ 95.925207][ T5975] ? __pfx_panic+0x10/0x10 [ 95.925234][ T5975] ? preempt_schedule_common+0x82/0xd0 [ 95.925262][ T5975] ? raw_queue_event+0x292/0x2e0 [ 95.925288][ T5975] check_panic_on_warn+0x89/0xb0 [ 95.925307][ T5975] ? raw_queue_event+0x292/0x2e0 [ 95.925330][ T5975] end_report+0x6f/0x140 [ 95.925351][ T5975] kasan_report+0x128/0x150 [ 95.925372][ T5975] ? raw_queue_event+0x292/0x2e0 [ 95.925407][ T5975] raw_queue_event+0x292/0x2e0 [ 95.925433][ T5975] gadget_disconnect+0x51/0xe0 [ 95.925458][ T5975] set_link_state+0xc0a/0x1220 [ 95.925490][ T5975] dummy_hub_control+0xafc/0x1a00 [ 95.925518][ T5975] ? usb_hcd_submit_urb+0x786/0x1b50 [ 95.925538][ T5975] usb_hcd_submit_urb+0xdbe/0x1b50 [ 95.925561][ T5975] usb_start_wait_urb+0x12b/0x510 [ 95.925587][ T5975] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 95.925620][ T5975] usb_control_msg+0x232/0x3e0 [ 95.925645][ T5975] hub_event+0x2dc0/0x4f60 [ 95.925693][ T5975] ? __pfx_hub_event+0x10/0x10 [ 95.925717][ T5975] ? process_scheduled_works+0xa0f/0x17a0 [ 95.925743][ T5975] ? process_scheduled_works+0xa0f/0x17a0 [ 95.925763][ T5975] ? process_scheduled_works+0xa0f/0x17a0 [ 95.925785][ T5975] process_scheduled_works+0xaec/0x17a0 [ 95.925819][ T5975] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.925848][ T5975] ? assign_work+0x3d5/0x5e0 [ 95.925871][ T5975] worker_thread+0xa50/0xfc0 [ 95.925906][ T5975] kthread+0x388/0x470 [ 95.925931][ T5975] ? __pfx_worker_thread+0x10/0x10 [ 95.925952][ T5975] ? __pfx_kthread+0x10/0x10 [ 95.925977][ T5975] ret_from_fork+0x51e/0xb90 [ 95.926001][ T5975] ? __pfx_ret_from_fork+0x10/0x10 [ 95.926022][ T5975] ? __switch_to+0xc7d/0x1400 [ 95.926044][ T5975] ? __pfx_kthread+0x10/0x10 [ 95.926069][ T5975] ret_from_fork_asm+0x1a/0x30 [ 95.926103][ T5975] [ 95.926434][ T5975] Kernel Offset: disabled