last executing test programs: 18m35.918102884s ago: executing program 32 (id=1987): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x404000, 0x100) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000080)={0x0, 0x100000000}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 13m5.687460679s ago: executing program 2 (id=2987): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x678f40a9) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket(0x1, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x0, 0xefc, 0x10000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 13m5.54357577s ago: executing program 2 (id=2988): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1) syz_pidfd_open(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x5, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0xffffffff, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x2, 0xe69, 0x3, 0x8, 0x4087, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 13m3.59648439s ago: executing program 2 (id=2995): syz_open_procfs$pagemap(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 13m0.152579013s ago: executing program 2 (id=3004): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1) syz_pidfd_open(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x5, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0xffffffff, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x2, 0xe69, 0x3, 0x8, 0x4087, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 12m59.39154673s ago: executing program 2 (id=3007): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x678f40a9) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(r1, 0x0, 0xefc, 0x10000) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 12m55.768012964s ago: executing program 2 (id=3017): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) 12m54.904161298s ago: executing program 33 (id=3017): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) 11m23.139463771s ago: executing program 0 (id=3181): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x1, 0x5}, 0x50) 11m22.641268391s ago: executing program 0 (id=3182): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) 11m21.49695336s ago: executing program 0 (id=3184): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f64004fa81182e6eae27df59655f4acab134d99a8bb6b9f7d6a7f0a652b6c6cd366bb5562bef203e119f2a9120a5b524adb8ee0927a0c463d7f29c5d441bf9c29d3f1c6133f911765f2493ed24571da986ec6cd145eca1e3e5d46b458f55720ab8bfa49914be4e38fad34699c2c022421fe730f0", 0xb9}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000c00)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192907f44d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426208000000000000009baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000640)="68a55d6df108bed91373cc794c16187a680c0c711ae161400d400e28f7117e17fd75340a58f8d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1000000fc4d76dadbb000759cb2f693eff182746b249aa9483b11dade49bf97b853ae95b84f3eed14754fae6563f748000000007f8756cc1926bac0efdaf88b1e564330937dc7f3f7fc7068d78c6560db794529dbb68908107d29bc416fb4a8de77d47822236d092e91f1f88e8a83feb0f7f50a17fae8a172ac9d3defbec33c08a2c11ef021118bd13619ba412f9613bf26f1f7feaac135f0929c7996385e7eba0d372dedb1b8540847fc6c4270a553d0827ffe3a1b2853db84c44625869d153c8b80e54653ca024ce2bfeefcb5e049b456100013bd7718117839e1ab32c7dc129dc2228161cbdad00059e7fdd78cc49f23b1d57fbea4697e4d5998", 0x13a}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) 11m20.041343084s ago: executing program 0 (id=3187): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) 11m18.974883663s ago: executing program 0 (id=3188): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) fdatasync(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 11m18.60353379s ago: executing program 0 (id=3189): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000400)=0xffffff41, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x7}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 11m3.005006999s ago: executing program 34 (id=3189): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000400)=0xffffff41, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x7}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 8m11.650910739s ago: executing program 6 (id=3565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m9.839416522s ago: executing program 6 (id=3569): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1028) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 8m1.92834126s ago: executing program 6 (id=3573): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x20d41, 0x0) flock(r1, 0x5) 8m0.995626565s ago: executing program 6 (id=3578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r7}, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x38dc68d3d6e0aeb0) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, &(0x7f0000003780)) 7m59.095927589s ago: executing program 6 (id=3582): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1028) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 7m56.759795123s ago: executing program 6 (id=3587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x0, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x16, 0x3313, @empty, @multicast2, {[@end, @generic={0x94, 0x0, "4fcf02d60e646404e8e478505e"}, @end, @noop, @cipso={0x86, 0x0, 0x3, [{0x1, 0x0, "97e3eedcb1b4f0f6c3fb95c6087f31"}, {0x5, 0x0, "2d3110a90aa230a1"}, {0x5e232c06587b5052, 0x0, "66079e88e964c34418c418a7ed5b"}]}, @rr={0x7, 0x0, 0x16, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @loopback]}, @timestamp={0x44, 0x0, 0x84, 0x0, 0x4, [0x4, 0x0, 0x6, 0x1, 0x1]}]}}, "c819"}}}, 0xfe30) 7m41.591113783s ago: executing program 35 (id=3587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x0, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x16, 0x3313, @empty, @multicast2, {[@end, @generic={0x94, 0x0, "4fcf02d60e646404e8e478505e"}, @end, @noop, @cipso={0x86, 0x0, 0x3, [{0x1, 0x0, "97e3eedcb1b4f0f6c3fb95c6087f31"}, {0x5, 0x0, "2d3110a90aa230a1"}, {0x5e232c06587b5052, 0x0, "66079e88e964c34418c418a7ed5b"}]}, @rr={0x7, 0x0, 0x16, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @loopback]}, @timestamp={0x44, 0x0, 0x84, 0x0, 0x4, [0x4, 0x0, 0x6, 0x1, 0x1]}]}}, "c819"}}}, 0xfe30) 7m19.260421994s ago: executing program 7 (id=3657): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x20, 0x0, 0x37, {0x37, 0xd, "d7d444b41c6d58575070cc88519d49a84a00cb148b1df401b8942897698a7c4d539fb0363ff5f3445355a3809d583570bf1c41c7f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7m16.239110664s ago: executing program 7 (id=3663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb31}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) 7m14.898359064s ago: executing program 7 (id=3664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x44) 7m13.747508148s ago: executing program 7 (id=3667): syz_emit_vhci(0x0, 0x7) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) times(0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 7m4.088711272s ago: executing program 7 (id=3677): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r0, &(0x7f0000001140)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2c}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0x5, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 7m0.742098653s ago: executing program 7 (id=3685): syz_emit_vhci(0x0, 0x7) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) times(0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 6m45.071824828s ago: executing program 36 (id=3685): syz_emit_vhci(0x0, 0x7) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) times(0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m25.749218285s ago: executing program 1 (id=4122): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000300600000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 2m25.611810438s ago: executing program 1 (id=4123): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000000)='r', 0x1}, {0x0}], 0x2, 0x0, 0x80000000, 0x0) close(0x3) 2m24.053670011s ago: executing program 1 (id=4128): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, @none, 0x77f, 0x1}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(0xffffffffffffffff, &(0x7f0000000d40)="729fe1c2e4ac239344b19b840aba55a9062707a6e7ca7f816018ab0f3a28952199284bbc48ea7b7f089c367fad4242053d4320245bc9b55d19d6eff69bb321aff847833d68b132a3ca59d2926414d1acba88e4541c88b391078f12775ace458f7486e2c3e15f059b3d6645975a10013f948e9bde32a3d08ece3a027cdaac44d40aed", 0x82) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r5, r5, 0x0, 0x4) 2m22.687362451s ago: executing program 1 (id=4129): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1) syz_pidfd_open(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x5, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0xffffffff, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x2, 0xe69, 0x3, 0x8, 0x4087, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r3 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r3, &(0x7f00000037c0), 0x0, 0x2, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 2m22.39872613s ago: executing program 1 (id=4131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() memfd_create(0x0, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 2m19.690879681s ago: executing program 1 (id=4136): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, @none, 0x77f, 0x1}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(0xffffffffffffffff, &(0x7f0000000d40)="729fe1c2e4ac239344b19b840aba55a9062707a6e7ca7f816018ab0f3a28952199284bbc48ea7b7f089c367fad4242053d4320245bc9b55d19d6eff69bb321aff847833d68b132a3ca59d2926414d1acba88e4541c88b391078f12775ace458f7486e2c3e15f059b3d6645975a10013f948e9bde32a3d08ece3a027cdaac44d40aed", 0x82) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r5, r5, 0x0, 0x4) 2m19.357543018s ago: executing program 37 (id=4136): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, @none, 0x77f, 0x1}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(0xffffffffffffffff, &(0x7f0000000d40)="729fe1c2e4ac239344b19b840aba55a9062707a6e7ca7f816018ab0f3a28952199284bbc48ea7b7f089c367fad4242053d4320245bc9b55d19d6eff69bb321aff847833d68b132a3ca59d2926414d1acba88e4541c88b391078f12775ace458f7486e2c3e15f059b3d6645975a10013f948e9bde32a3d08ece3a027cdaac44d40aed", 0x82) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r5, r5, 0x0, 0x4) 44.282455621s ago: executing program 5 (id=4237): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010022, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "37a07e", 0x8, 0x2c, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[@hopopts={0xff}]}}}}}, 0x0) 43.183794541s ago: executing program 5 (id=4240): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 42.930176129s ago: executing program 5 (id=4242): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 42.497910765s ago: executing program 5 (id=4244): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 41.479988459s ago: executing program 5 (id=4246): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.302427248s ago: executing program 5 (id=4249): ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000300)={0xc0000000, 0x105, "7ad0ab1734568345529581fc533d7645fd072a61bcfbf434413b51418bda9bc8", 0x5, 0xf, 0x1, 0x7, 0x0, 0x6, 0x6, 0x4, [0xb, 0x3, 0x2, 0xb]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 16.787400049s ago: executing program 9 (id=4300): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1028) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 13.617703723s ago: executing program 4 (id=4306): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113200000000000bf1000000000000025000200091bb0ff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 13.153502334s ago: executing program 8 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a3000"], 0x80}}, 0x0) 12.831557833s ago: executing program 3 (id=4309): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x800003) write$ppp(r0, &(0x7f0000000240)="27e9dd00", 0x4) 12.659695402s ago: executing program 8 (id=4310): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 11.598237228s ago: executing program 8 (id=4311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11.416432334s ago: executing program 4 (id=4312): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 11.335305013s ago: executing program 8 (id=4313): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UI_DEV_CREATE(r0, 0x5501) 11.193449305s ago: executing program 4 (id=4314): r0 = fanotify_init(0x0, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x39, 0x1a, r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 10.040460198s ago: executing program 4 (id=4315): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) unshare(0x480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.252087849s ago: executing program 4 (id=4316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, 0x0, 0x25, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00'}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r8, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmsg$802154_dgram(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xffff}}, 0x3, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4, r4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 8.472968619s ago: executing program 8 (id=4317): socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r6, 0x0, r1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8.286162203s ago: executing program 8 (id=4318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='setgroups\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) shutdown(r2, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r4, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x140) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 4.043239751s ago: executing program 9 (id=4319): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x5) sendmmsg$inet(r0, 0x0, 0x0, 0x10) 3.870370698s ago: executing program 9 (id=4320): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/142, 0x8e}], 0x1, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/136, 0x88}, {0x0}], 0x2, 0x0) 3.650123558s ago: executing program 9 (id=4321): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000140)=""/192, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3.29339988s ago: executing program 4 (id=4322): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.103493152s ago: executing program 3 (id=4323): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 3.071277124s ago: executing program 9 (id=4324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 2.877251937s ago: executing program 3 (id=4325): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) unshare(0x480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.118498471s ago: executing program 9 (id=4326): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.926673625s ago: executing program 3 (id=4327): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x20}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9"], 0x21) 1.709946206s ago: executing program 3 (id=4328): openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1b980c37, 0x121000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 0s ago: executing program 3 (id=4329): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010200f8dfffffb702000008000000b7030000b400000085000000720000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) read$FUSE(r2, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1b980c37, 0x121000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): type=1326 audit(1760878837.004:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.5.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1492.467157][ T38] audit: type=1326 audit(1760878837.034:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.5.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1492.467508][ T38] audit: type=1326 audit(1760878837.034:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.5.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1492.467849][ T38] audit: type=1326 audit(1760878837.044:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.5.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1492.468352][ T38] audit: type=1326 audit(1760878837.054:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.5.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1492.679477][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.999307][T19050] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1492.999354][T19050] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1492.999377][T19050] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1493.116760][ C1] vkms_vblank_simulate: vblank timer overrun [ 1493.165002][T18923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.165123][T18923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.165368][T18923] bridge_slave_1: entered allmulticast mode [ 1493.167869][T18923] bridge_slave_1: entered promiscuous mode [ 1493.646224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1493.906474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1494.066309][T18873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.066454][T18873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.066656][T18873] bridge_slave_0: entered allmulticast mode [ 1494.070741][T18873] bridge_slave_0: entered promiscuous mode [ 1494.281669][T18873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.281765][T18873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.281930][T18873] bridge_slave_1: entered allmulticast mode [ 1494.288024][T18873] bridge_slave_1: entered promiscuous mode [ 1494.342333][T18923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.816138][T18923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.709922][T18873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.951647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1496.130898][T18873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.133172][T18923] team0: Port device team_slave_0 added [ 1496.254107][T17365] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 1496.655041][T18923] team0: Port device team_slave_1 added [ 1497.252346][ T58] IPVS: stop unused estimator thread 0... [ 1497.268591][T17365] usb 2-1: config 7 has an invalid interface number: 112 but max is 1 [ 1497.268625][T17365] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.268648][T17365] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1497.268673][T17365] usb 2-1: config 7 has no interface number 0 [ 1497.268724][T17365] usb 2-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1497.268766][T17365] usb 2-1: config 7 interface 112 has no altsetting 0 [ 1497.318812][T17365] usb 2-1: string descriptor 0 read error: -22 [ 1497.319024][T17365] usb 2-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 1497.319054][T17365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.335533][T17365] uvcvideo 2-1:7.112: Found UVC 0.00 device (046d:089b) [ 1497.335574][T17365] uvcvideo 2-1:7.112: No valid video chain found. [ 1497.458186][T18873] team0: Port device team_slave_0 added [ 1497.459035][T18967] chnl_net:caif_netlink_parms(): no params data found [ 1497.537464][T16842] IPVS: starting estimator thread 0... [ 1497.624380][T19104] IPVS: using max 7 ests per chain, 16800 per kthread [ 1498.067137][T18873] team0: Port device team_slave_1 added [ 1498.068837][T18923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.068853][T18923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.068882][T18923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.070925][T12907] usb 2-1: USB disconnect, device number 89 [ 1498.911188][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 1498.911240][ T38] audit: type=1326 audit(1760878843.424:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19107 comm="syz.5.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1498.911620][ T38] audit: type=1326 audit(1760878843.424:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19107 comm="syz.5.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1499.327661][T18923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.327682][T18923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.327713][T18923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.733711][T18873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.733731][T18873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.733761][T18873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.906823][T18873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.906837][T18873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.906857][T18873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.692526][T18923] hsr_slave_0: entered promiscuous mode [ 1501.694431][T18923] hsr_slave_1: entered promiscuous mode [ 1502.076761][T18967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.076900][T18967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.077120][T18967] bridge_slave_0: entered allmulticast mode [ 1502.080165][T18967] bridge_slave_0: entered promiscuous mode [ 1502.471452][T18967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.471591][T18967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.471814][T18967] bridge_slave_1: entered allmulticast mode [ 1502.496870][T18967] bridge_slave_1: entered promiscuous mode [ 1502.600728][T18873] hsr_slave_0: entered promiscuous mode [ 1502.610264][T18873] hsr_slave_1: entered promiscuous mode [ 1502.620015][T18873] debugfs: 'hsr0' already exists in 'hsr' [ 1502.620037][T18873] Cannot create hsr debugfs directory [ 1503.074054][T17365] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 1503.157105][T18967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.239202][T17365] usb 2-1: config 7 has an invalid interface number: 112 but max is 1 [ 1503.239234][T17365] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.239256][T17365] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1503.239281][T17365] usb 2-1: config 7 has no interface number 0 [ 1503.239318][T17365] usb 2-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1503.239339][T17365] usb 2-1: config 7 interface 112 has no altsetting 0 [ 1503.242986][T17365] usb 2-1: string descriptor 0 read error: -22 [ 1503.243121][T17365] usb 2-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 1503.243139][T17365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.299705][T17365] uvcvideo 2-1:7.112: Found UVC 0.00 device (046d:089b) [ 1503.299745][T17365] uvcvideo 2-1:7.112: No valid video chain found. [ 1503.491813][T18967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.962788][T12907] usb 2-1: USB disconnect, device number 90 [ 1504.247421][T18967] team0: Port device team_slave_0 added [ 1504.270686][T18967] team0: Port device team_slave_1 added [ 1509.879118][T18967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.879138][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.879163][T18967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.935495][T18967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.935515][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.935546][T18967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.177215][T18967] hsr_slave_0: entered promiscuous mode [ 1511.195244][T18967] hsr_slave_1: entered promiscuous mode [ 1511.196306][T18967] debugfs: 'hsr0' already exists in 'hsr' [ 1511.196333][T18967] Cannot create hsr debugfs directory [ 1511.294350][T17363] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 1511.463112][T17363] usb 6-1: config 7 has an invalid interface number: 112 but max is 1 [ 1511.463143][T17363] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.463165][T17363] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1511.463228][T17363] usb 6-1: config 7 has no interface number 0 [ 1511.469707][T17363] usb 6-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1511.478257][T17363] usb 6-1: config 7 interface 112 has no altsetting 0 [ 1511.551544][T17363] usb 6-1: string descriptor 0 read error: -22 [ 1511.552015][T17363] usb 6-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 1511.552043][T17363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.229334][T17363] uvcvideo 6-1:7.112: Found UVC 0.00 device (046d:089b) [ 1512.229590][T17363] uvcvideo 6-1:7.112: No valid video chain found. [ 1512.361100][T19191] lo speed is unknown, defaulting to 1000 [ 1512.468572][T12923] usb 6-1: USB disconnect, device number 56 [ 1512.576699][T19191] lo speed is unknown, defaulting to 1000 [ 1512.605477][T19191] lo speed is unknown, defaulting to 1000 [ 1512.628887][T19191] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1512.749130][T19191] lo speed is unknown, defaulting to 1000 [ 1512.767948][T19191] lo speed is unknown, defaulting to 1000 [ 1512.788245][T19191] lo speed is unknown, defaulting to 1000 [ 1512.792742][T18923] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1512.855710][T19191] lo speed is unknown, defaulting to 1000 [ 1512.934843][T18923] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1512.958938][T19191] lo speed is unknown, defaulting to 1000 [ 1512.978314][T18923] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1513.020078][T19191] lo speed is unknown, defaulting to 1000 [ 1513.126877][T18923] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1513.168783][T19191] lo speed is unknown, defaulting to 1000 [ 1513.264872][T19191] lo speed is unknown, defaulting to 1000 [ 1513.284301][T12923] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1513.285248][T19191] lo speed is unknown, defaulting to 1000 [ 1513.472225][T12923] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1513.472258][T12923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.472282][T12923] usb 6-1: Product: syz [ 1513.472299][T12923] usb 6-1: Manufacturer: syz [ 1513.472316][T12923] usb 6-1: SerialNumber: syz [ 1513.507238][T12923] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1513.507266][T12923] r8152-cfgselector 6-1: config 0 descriptor?? [ 1513.831451][T18923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.933513][ T58] bridge_slave_1: left allmulticast mode [ 1513.933548][ T58] bridge_slave_1: left promiscuous mode [ 1513.933809][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.229309][ T58] bridge_slave_0: left allmulticast mode [ 1514.229342][ T58] bridge_slave_0: left promiscuous mode [ 1514.229607][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.318338][ T58] bridge_slave_1: left allmulticast mode [ 1514.318362][ T58] bridge_slave_1: left promiscuous mode [ 1514.318649][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.385372][ T58] bridge_slave_0: left allmulticast mode [ 1514.385397][ T58] bridge_slave_0: left promiscuous mode [ 1514.385627][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.460456][ T58] bridge_slave_1: left allmulticast mode [ 1514.460489][ T58] bridge_slave_1: left promiscuous mode [ 1514.460706][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.525465][ T58] bridge_slave_0: left allmulticast mode [ 1514.525489][ T58] bridge_slave_0: left promiscuous mode [ 1514.525689][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.945406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.975002][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.075563][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.143416][ T58] bond0 (unregistering): Released all slaves [ 1515.414902][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.517971][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.577983][ T58] bond0 (unregistering): Released all slaves [ 1515.844953][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.924727][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.989341][ T58] bond0 (unregistering): Released all slaves [ 1516.102558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.130175][ T888] r8152-cfgselector 6-1: USB disconnect, device number 57 [ 1516.229751][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1516.279274][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.323593][ T160] Bluetooth: hci4: Frame reassembly failed (-84) [ 1516.348952][T19225] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1516.439909][T18923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.472860][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.473036][T11488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.515891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.574195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.634796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.645709][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.646317][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.702276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.763287][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.828750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.834291][T12908] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1516.898522][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.961089][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.984084][T12908] usb 2-1: Using ep0 maxpacket: 32 [ 1516.986179][T12908] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1516.986207][T12908] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1516.986230][T12908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1516.986252][T12908] usb 2-1: config 1 has no interface number 0 [ 1516.986302][T12908] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1516.986327][T12908] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1516.986372][T12908] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1516.986399][T12908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.034876][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.052942][T12908] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1517.474577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.527095][ T5815] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1518.530043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.584310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.684170][ T58] hsr_slave_0: left promiscuous mode [ 1518.716973][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.734361][ T58] hsr_slave_1: left promiscuous mode [ 1518.735499][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.777872][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.934058][ T58] hsr_slave_0: left promiscuous mode [ 1519.005070][ T58] hsr_slave_1: left promiscuous mode [ 1519.009948][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.103476][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.146810][T19238] siw: device registration error -23 [ 1519.537770][ T58] hsr_slave_0: left promiscuous mode [ 1519.574897][ T58] hsr_slave_1: left promiscuous mode [ 1519.594601][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.622320][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.762399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1519.803971][T12908] snd_usb_pod 2-1:1.1: set_interface failed [ 1519.804347][T12908] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1519.804608][T12908] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1519.874258][T12908] usb 2-1: USB disconnect, device number 91 [ 1520.486406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.549840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.754007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.880704][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.014796][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1521.128046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.188998][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1521.209141][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1521.272493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.326504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.768438][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.835219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.354422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.468390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.522248][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.586499][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1523.656738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.702345][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.765690][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1523.982724][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.033061][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.155533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.397814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.499832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.147966][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.256733][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.598811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.405183][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.484706][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.522767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.654368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.060742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1530.444973][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1530.487975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.636814][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1530.746533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.322026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.374996][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1531.408574][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1531.410101][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1531.411894][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1531.412808][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1531.501897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.837167][T19313] lo speed is unknown, defaulting to 1000 [ 1532.009503][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.169224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.566754][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.687203][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.899703][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.086097][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.494761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.567794][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.605718][ T5815] Bluetooth: hci4: command tx timeout [ 1533.744313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.824075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.900240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.986833][ C1] vkms_vblank_simulate: vblank timer overrun [ 1534.068088][ C1] vkms_vblank_simulate: vblank timer overrun [ 1534.298566][T18923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.420797][ C1] vkms_vblank_simulate: vblank timer overrun [ 1534.614951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1534.660455][T19313] chnl_net:caif_netlink_parms(): no params data found [ 1534.935975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.685994][ T5815] Bluetooth: hci4: command tx timeout [ 1535.880998][T19313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.881212][T19313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.881442][T19313] bridge_slave_0: entered allmulticast mode [ 1535.890943][T19313] bridge_slave_0: entered promiscuous mode [ 1535.918593][T19313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.918815][T19313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.919016][T19313] bridge_slave_1: entered allmulticast mode [ 1535.926840][T19313] bridge_slave_1: entered promiscuous mode [ 1536.382366][ T3501] Bluetooth: hci1: Frame reassembly failed (-84) [ 1536.426023][T19313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.491178][T19313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.526842][T18967] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1536.697289][T18967] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1536.861439][T18967] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1536.886486][T19313] team0: Port device team_slave_0 added [ 1536.911351][T18967] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1536.962395][T19313] team0: Port device team_slave_1 added [ 1537.336096][T19313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.336116][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.336147][T19313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.363287][T19313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.363304][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.363334][T19313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.754171][ T5814] Bluetooth: hci4: command tx timeout [ 1537.802787][T19317] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1537.820399][T19317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1537.823024][T19317] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1537.829304][ T58] bridge_slave_1: left allmulticast mode [ 1537.829338][ T58] bridge_slave_1: left promiscuous mode [ 1537.829631][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.833742][T19317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1537.837482][T19317] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1537.914727][ T10] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 1537.962284][ T58] bridge_slave_0: left allmulticast mode [ 1537.962306][ T58] bridge_slave_0: left promiscuous mode [ 1537.962507][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.070530][ T10] usb 2-1: config 7 has an invalid interface number: 112 but max is 1 [ 1538.070560][ T10] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.070581][ T10] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1538.070602][ T10] usb 2-1: config 7 has no interface number 0 [ 1538.070654][ T10] usb 2-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1538.070685][ T10] usb 2-1: config 7 interface 112 has no altsetting 0 [ 1538.136261][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1538.136436][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 1538.136464][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.182555][ T10] uvcvideo 2-1:7.112: Found UVC 0.00 device (046d:089b) [ 1538.182590][ T10] uvcvideo 2-1:7.112: No valid video chain found. [ 1538.385859][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.394766][ T5815] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1538.735130][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.798855][ T58] bond0 (unregistering): Released all slaves [ 1539.228985][T12908] usb 2-1: USB disconnect, device number 92 [ 1539.260745][T19313] hsr_slave_0: entered promiscuous mode [ 1539.262179][T19313] hsr_slave_1: entered promiscuous mode [ 1539.263281][T19313] debugfs: 'hsr0' already exists in 'hsr' [ 1539.263307][T19313] Cannot create hsr debugfs directory [ 1539.557507][ T58] hsr_slave_0: left promiscuous mode [ 1539.594910][ T58] hsr_slave_1: left promiscuous mode [ 1539.595988][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.638659][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.834149][ T5815] Bluetooth: hci4: command tx timeout [ 1539.914316][ T5815] Bluetooth: hci6: command tx timeout [ 1540.146937][T19404] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 1541.052259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.300914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.400016][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.545436][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.626756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.710047][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1541.778704][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.909589][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1541.984732][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.010444][ T5815] Bluetooth: hci6: command tx timeout [ 1542.280689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.047850][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1543.069340][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1543.070890][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1543.072182][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1543.073553][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1543.209760][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.426795][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.503069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.616563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.684962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.780257][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.884118][T12909] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 1544.039850][T12909] usb 6-1: config 7 has an invalid interface number: 112 but max is 1 [ 1544.039880][T12909] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.039901][T12909] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1544.039923][T12909] usb 6-1: config 7 has no interface number 0 [ 1544.039978][T12909] usb 6-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1544.040008][T12909] usb 6-1: config 7 interface 112 has no altsetting 0 [ 1544.045877][T12909] usb 6-1: string descriptor 0 read error: -22 [ 1544.046108][T12909] usb 6-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 1544.046138][T12909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.074017][ T5814] Bluetooth: hci6: command tx timeout [ 1544.095984][T12909] uvcvideo 6-1:7.112: Found UVC 0.00 device (046d:089b) [ 1544.096025][T12909] uvcvideo 6-1:7.112: No valid video chain found. [ 1544.237129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.606155][T16842] usb 6-1: USB disconnect, device number 58 [ 1545.405967][ T5814] Bluetooth: hci1: command tx timeout [ 1545.496358][T19387] lo speed is unknown, defaulting to 1000 [ 1546.158190][ T5814] Bluetooth: hci6: command tx timeout [ 1546.180759][T19418] lo speed is unknown, defaulting to 1000 [ 1546.254024][T16842] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1546.438538][T16842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.438588][T16842] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1546.438628][T16842] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1546.438650][T16842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.443812][T16842] usb 6-1: config 0 descriptor?? [ 1546.520134][T16842] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1547.434166][ T5814] Bluetooth: hci1: command tx timeout [ 1548.414532][T19313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1548.437983][T19387] chnl_net:caif_netlink_parms(): no params data found [ 1548.671554][T19313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1548.708971][T19313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1548.812859][T19313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1549.001051][T17363] usb 6-1: USB disconnect, device number 59 [ 1549.716043][ T5814] Bluetooth: hci1: command tx timeout [ 1551.147294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.361026][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.447586][T19418] chnl_net:caif_netlink_parms(): no params data found [ 1551.640278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.712725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.757209][ T5814] Bluetooth: hci1: command tx timeout [ 1551.914951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.987209][T19387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.987375][T19387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.987639][T19387] bridge_slave_0: entered allmulticast mode [ 1551.990121][T19387] bridge_slave_0: entered promiscuous mode [ 1552.031992][T19387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.032157][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.032358][T19387] bridge_slave_1: entered allmulticast mode [ 1552.037667][T19387] bridge_slave_1: entered promiscuous mode [ 1552.641420][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.880773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.987184][T19387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.202087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.431840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.811267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.258626][T19387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1555.579543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1556.225939][T19418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.226045][T19418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.226205][T19418] bridge_slave_0: entered allmulticast mode [ 1556.230143][T19418] bridge_slave_0: entered promiscuous mode [ 1556.289065][T19387] team0: Port device team_slave_0 added [ 1556.289676][T19418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.289774][T19418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.289920][T19418] bridge_slave_1: entered allmulticast mode [ 1556.293463][T19418] bridge_slave_1: entered promiscuous mode [ 1556.429954][T19387] team0: Port device team_slave_1 added [ 1557.296459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1557.319632][T19418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.321930][T19387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.321949][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.322089][T19387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.398598][T19418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.399945][T19387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.399961][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.399990][T19387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.853465][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.778324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1560.195167][T19418] team0: Port device team_slave_0 added [ 1560.353369][T19536] 9pnet_fd: Insufficient options for proto=fd [ 1560.498288][T19418] team0: Port device team_slave_1 added [ 1561.382074][T19387] hsr_slave_0: entered promiscuous mode [ 1561.392528][T19387] hsr_slave_1: entered promiscuous mode [ 1561.402345][T19387] debugfs: 'hsr0' already exists in 'hsr' [ 1561.402368][T19387] Cannot create hsr debugfs directory [ 1561.539924][T19418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.539938][T19418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.539958][T19418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.188800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.730234][T19418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.730249][T19418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.730271][T19418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.629499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.052793][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.250885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.744040][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.410512][T19568] siw: device registration error -23 [ 1565.559233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.779962][T19418] hsr_slave_0: entered promiscuous mode [ 1565.781583][T19418] hsr_slave_1: entered promiscuous mode [ 1565.783387][T19418] debugfs: 'hsr0' already exists in 'hsr' [ 1565.783415][T19418] Cannot create hsr debugfs directory [ 1566.555904][ T10] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 1567.010009][T19313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.101339][ T10] usb 6-1: config 7 has an invalid interface number: 112 but max is 1 [ 1567.101369][ T10] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.101391][ T10] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1567.101424][ T10] usb 6-1: config 7 has no interface number 0 [ 1567.101471][ T10] usb 6-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1567.101499][ T10] usb 6-1: config 7 interface 112 has no altsetting 0 [ 1567.111991][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1567.112173][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 1567.112197][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.167969][ T10] uvcvideo 6-1:7.112: Found UVC 0.00 device (046d:089b) [ 1567.168010][ T10] uvcvideo 6-1:7.112: No valid video chain found. [ 1567.762534][T19313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.783214][T16842] usb 6-1: USB disconnect, device number 60 [ 1567.843613][ T58] bridge_slave_1: left allmulticast mode [ 1567.843650][ T58] bridge_slave_1: left promiscuous mode [ 1567.856646][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.906223][ T58] bridge_slave_0: left allmulticast mode [ 1567.906247][ T58] bridge_slave_0: left promiscuous mode [ 1567.906451][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.967441][ T58] bridge_slave_1: left allmulticast mode [ 1567.967466][ T58] bridge_slave_1: left promiscuous mode [ 1567.967787][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.984622][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1568.045615][ T58] bridge_slave_0: left allmulticast mode [ 1568.045641][ T58] bridge_slave_0: left promiscuous mode [ 1568.045837][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.146407][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1568.146469][ T10] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1568.146495][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.155691][ T10] usb 2-1: config 0 descriptor?? [ 1568.172430][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1568.420227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.649325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.559491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.636569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.760405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.784594][T12909] usb 2-1: USB disconnect, device number 93 [ 1570.899289][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.236544][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.245156][ T58] bond0 (unregistering): Released all slaves [ 1578.077508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.156996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.237884][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.318442][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.390680][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.273628][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.413653][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.507982][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.558714][ T58] bond0 (unregistering): Released all slaves [ 1579.711035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.924535][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.373044][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.658420][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.658586][T11488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.852964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.793547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.830128][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.915729][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.915936][T17151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.182401][T19681] siw: device registration error -23 [ 1583.756066][ T58] hsr_slave_0: left promiscuous mode [ 1583.814565][ T58] hsr_slave_1: left promiscuous mode [ 1583.820298][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.873578][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.060245][T19685] binder: 19682:19685 ioctl 0 200000000040 returned -22 [ 1587.238324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1587.407288][ T58] hsr_slave_0: left promiscuous mode [ 1587.456805][ T58] hsr_slave_1: left promiscuous mode [ 1587.457845][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1587.509585][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.764650][T12909] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1588.266502][T12909] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1588.266536][T12909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.266559][T12909] usb 6-1: Product: syz [ 1588.266634][T12909] usb 6-1: Manufacturer: syz [ 1588.266697][T12909] usb 6-1: SerialNumber: syz [ 1588.370686][T12909] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1588.370754][T12909] r8152-cfgselector 6-1: config 0 descriptor?? [ 1588.928416][T12909] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1588.929128][T12909] r8152-cfgselector 6-1: bad CDC descriptors [ 1589.042342][T12909] r8152-cfgselector 6-1: USB disconnect, device number 61 [ 1589.893707][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.469971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.928101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.311817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.495871][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1591.560373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.621157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.702297][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1591.768676][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.826992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.948857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.001719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.107146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.205403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.247977][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1593.267176][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1593.284670][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1593.286285][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1593.287255][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1595.357187][ T5815] Bluetooth: hci2: command tx timeout [ 1595.521658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.522666][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.759699][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.917827][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.963921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.204172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.343773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.449425][ T5815] Bluetooth: hci2: command tx timeout [ 1597.809782][ C1] vkms_vblank_simulate: vblank timer overrun [ 1598.729824][ C1] vkms_vblank_simulate: vblank timer overrun [ 1598.826174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.186969][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1600.119855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.136297][ T5815] Bluetooth: hci2: command tx timeout [ 1600.442187][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.575295][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1601.596413][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1601.601093][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1601.603353][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1601.606960][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1602.154735][ T5814] Bluetooth: hci2: command tx timeout [ 1602.404765][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1602.524378][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.864729][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.962236][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.644267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.914471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.819002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.821761][ T5814] Bluetooth: hci3: command tx timeout [ 1605.121662][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.233790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.493490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1606.352516][ C1] vkms_vblank_simulate: vblank timer overrun [ 1606.425719][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1606.448479][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1606.450045][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1606.468518][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1606.469475][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1606.606217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1606.806477][ C1] vkms_vblank_simulate: vblank timer overrun [ 1606.873972][ T5814] Bluetooth: hci3: command tx timeout [ 1607.080915][ C1] vkms_vblank_simulate: vblank timer overrun [ 1607.745379][ C0] vkms_vblank_simulate: vblank timer overrun [ 1607.917472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.044143][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.124755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.254018][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.416980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.554037][ T5814] Bluetooth: hci7: command tx timeout [ 1608.726057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.954127][ T5814] Bluetooth: hci3: command tx timeout [ 1609.092071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.169309][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.414754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.510927][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.271601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.716486][ T5814] Bluetooth: hci7: command tx timeout [ 1610.769013][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.034318][ T5814] Bluetooth: hci3: command tx timeout [ 1611.072197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.096582][ T38] audit: type=1326 audit(1760878955.774:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.096649][ T38] audit: type=1326 audit(1760878955.774:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.103998][ T38] audit: type=1326 audit(1760878955.784:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.104058][ T38] audit: type=1326 audit(1760878955.784:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.104107][ T38] audit: type=1326 audit(1760878955.784:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.104155][ T38] audit: type=1326 audit(1760878955.784:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.104213][ T38] audit: type=1326 audit(1760878955.784:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.107125][ T38] audit: type=1326 audit(1760878955.784:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.107189][ T38] audit: type=1326 audit(1760878955.784:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.107254][ T38] audit: type=1326 audit(1760878955.784:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f87e51aefc9 code=0x7ffc0000 [ 1611.159576][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.294230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.402514][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.548868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.603352][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.687495][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.071194][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.168851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.315562][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.624210][T19822] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1612.624259][T19822] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1612.624293][T19822] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1612.800334][ T5815] Bluetooth: hci7: command tx timeout [ 1612.801224][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.205042][T19785] lo speed is unknown, defaulting to 1000 [ 1613.268487][T19760] lo speed is unknown, defaulting to 1000 [ 1613.328962][T19722] lo speed is unknown, defaulting to 1000 [ 1613.674173][ T5814] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1614.874631][ T5815] Bluetooth: hci7: command tx timeout [ 1619.129749][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 1619.129915][ T38] audit: type=1326 audit(1760878963.814:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.129978][ T38] audit: type=1326 audit(1760878963.814:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.130040][ T38] audit: type=1326 audit(1760878963.814:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.133306][ T38] audit: type=1326 audit(1760878963.814:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.133369][ T38] audit: type=1326 audit(1760878963.814:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.133420][ T38] audit: type=1326 audit(1760878963.814:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.133530][ T38] audit: type=1326 audit(1760878963.814:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.136180][ T38] audit: type=1326 audit(1760878963.814:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.136242][ T38] audit: type=1326 audit(1760878963.824:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.136306][ T38] audit: type=1326 audit(1760878963.824:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19874 comm="syz.5.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1619.507655][T19785] chnl_net:caif_netlink_parms(): no params data found [ 1619.719897][ T3523] Bluetooth: hci4: Frame reassembly failed (-84) [ 1619.720587][ T3523] Bluetooth: hci4: Frame reassembly failed (-84) [ 1619.720694][ T3523] Bluetooth: hci4: Frame reassembly failed (-84) [ 1619.721559][T19530] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1619.844130][T19760] chnl_net:caif_netlink_parms(): no params data found [ 1620.620261][T19722] chnl_net:caif_netlink_parms(): no params data found [ 1621.756840][ T5814] Bluetooth: hci4: command 0x1003 tx timeout [ 1621.757402][ T5815] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1621.845446][T12909] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1621.981384][T19785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.981527][T19785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.981821][T19785] bridge_slave_0: entered allmulticast mode [ 1622.013990][T12909] usb 2-1: Using ep0 maxpacket: 8 [ 1622.035263][T19785] bridge_slave_0: entered promiscuous mode [ 1622.145491][T12909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1622.145532][T12909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1622.145559][T12909] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1622.145582][T12909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1622.145627][T12909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1622.145653][T12909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.349857][T12909] usbtmc 2-1:16.0: bulk endpoints not found [ 1623.584666][T19785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.584816][T19785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.585093][T19785] bridge_slave_1: entered allmulticast mode [ 1623.591431][T19785] bridge_slave_1: entered promiscuous mode [ 1624.131892][T19760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.132032][T19760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.133473][T19760] bridge_slave_0: entered allmulticast mode [ 1624.168325][T19760] bridge_slave_0: entered promiscuous mode [ 1624.600683][T19760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.600825][T19760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.601071][T19760] bridge_slave_1: entered allmulticast mode [ 1624.633999][T19760] bridge_slave_1: entered promiscuous mode [ 1625.949601][T19785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.054113][T12923] usb 2-1: USB disconnect, device number 94 [ 1626.402116][T19785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.661193][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.674994][T19928] siw: device registration error -23 [ 1627.009543][T19722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.009699][T19722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.009979][T19722] bridge_slave_0: entered allmulticast mode [ 1627.012671][T19722] bridge_slave_0: entered promiscuous mode [ 1627.153012][T19760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.166353][T19722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.167237][T19722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.167512][T19722] bridge_slave_1: entered allmulticast mode [ 1627.171644][T19722] bridge_slave_1: entered promiscuous mode [ 1627.315834][T19760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.413428][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.466475][T19785] team0: Port device team_slave_0 added [ 1628.721655][T19785] team0: Port device team_slave_1 added [ 1628.829571][T19722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.907147][T19760] team0: Port device team_slave_0 added [ 1628.921645][T19722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.938556][T19760] team0: Port device team_slave_1 added [ 1629.326110][T19785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.326133][T19785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.326164][T19785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.883398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.741862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.006394][T19785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.006409][T19785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.006431][T19785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.320947][T19722] team0: Port device team_slave_0 added [ 1631.323381][T19760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.323398][T19760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.323429][T19760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.557568][T19722] team0: Port device team_slave_1 added [ 1632.604863][T19760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.604877][T19760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.604898][T19760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1634.246043][T19973] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1634.250241][T19722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1634.250258][T19722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1634.250286][T19722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.920614][T19722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.920633][T19722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1635.920665][T19722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.990589][T19785] hsr_slave_0: entered promiscuous mode [ 1635.995308][T19785] hsr_slave_1: entered promiscuous mode [ 1636.157453][T19760] hsr_slave_0: entered promiscuous mode [ 1636.160142][T19760] hsr_slave_1: entered promiscuous mode [ 1636.161833][T19760] debugfs: 'hsr0' already exists in 'hsr' [ 1636.161854][T19760] Cannot create hsr debugfs directory [ 1636.171575][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1639.002743][T19722] hsr_slave_0: entered promiscuous mode [ 1639.024313][T19722] hsr_slave_1: entered promiscuous mode [ 1639.025100][T19722] debugfs: 'hsr0' already exists in 'hsr' [ 1639.025119][T19722] Cannot create hsr debugfs directory [ 1639.662837][T20001] fuse: Bad value for 'fd' [ 1640.842409][T20016] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4074'. [ 1642.154310][T20023] input: syz1 as /devices/virtual/input/input32 [ 1642.385904][ T58] bridge_slave_1: left allmulticast mode [ 1642.385935][ T58] bridge_slave_1: left promiscuous mode [ 1642.386167][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.445712][ T58] bridge_slave_0: left allmulticast mode [ 1642.445736][ T58] bridge_slave_0: left promiscuous mode [ 1642.445933][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.520814][ T58] bridge_slave_1: left allmulticast mode [ 1642.520840][ T58] bridge_slave_1: left promiscuous mode [ 1642.521245][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.586775][ T58] bridge_slave_0: left allmulticast mode [ 1642.586799][ T58] bridge_slave_0: left promiscuous mode [ 1642.586983][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.680569][ T58] bridge_slave_1: left allmulticast mode [ 1642.680601][ T58] bridge_slave_1: left promiscuous mode [ 1642.681376][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.737702][ T58] bridge_slave_0: left allmulticast mode [ 1642.737725][ T58] bridge_slave_0: left promiscuous mode [ 1642.737896][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.962411][T20027] fuse: Bad value for 'fd' [ 1644.226037][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1644.894904][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1644.962036][T20037] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1644.977638][ T58] bond0 (unregistering): Released all slaves [ 1645.498199][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.615939][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.682527][ T58] bond0 (unregistering): Released all slaves [ 1652.074481][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.120841][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.157316][ T58] bond0 (unregistering): Released all slaves [ 1654.231400][ T58] hsr_slave_0: left promiscuous mode [ 1654.375756][ T58] hsr_slave_1: left promiscuous mode [ 1654.378090][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1654.472188][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1654.754164][ T58] hsr_slave_0: left promiscuous mode [ 1654.774061][ T58] hsr_slave_1: left promiscuous mode [ 1654.774882][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1654.817420][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1654.919311][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1654.941985][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1654.943332][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1655.049345][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1655.050340][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1655.085186][ T58] hsr_slave_0: left promiscuous mode [ 1655.156152][ T58] hsr_slave_1: left promiscuous mode [ 1655.157284][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.195530][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.510630][ T5814] Bluetooth: hci1: command tx timeout [ 1658.004718][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1658.194814][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1658.845040][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1658.869497][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1658.878897][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1658.886051][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1658.887472][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1659.514348][ T5814] Bluetooth: hci1: command tx timeout [ 1659.755985][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1660.954184][ T5814] Bluetooth: hci2: command tx timeout [ 1661.066295][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1661.594628][ T5814] Bluetooth: hci1: command tx timeout [ 1662.522651][ T3523] Bluetooth: hci4: Frame reassembly failed (-84) [ 1663.034730][ T5815] Bluetooth: hci2: command tx timeout [ 1663.541451][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1663.674282][ T5815] Bluetooth: hci1: command tx timeout [ 1663.675264][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1663.983465][T19317] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1664.000406][T19317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1664.012934][T19317] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1664.049165][T19317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1664.051620][T19317] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1664.554358][ T5815] Bluetooth: hci4: command 0x1003 tx timeout [ 1664.554788][ T5814] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1665.130382][ T5814] Bluetooth: hci2: command tx timeout [ 1666.074504][ T5814] Bluetooth: hci6: command tx timeout [ 1666.591576][T20120] lo speed is unknown, defaulting to 1000 [ 1667.177146][T20102] lo speed is unknown, defaulting to 1000 [ 1667.246135][ T5814] Bluetooth: hci2: command tx timeout [ 1667.246528][T20078] lo speed is unknown, defaulting to 1000 [ 1668.158430][ T5814] Bluetooth: hci6: command tx timeout [ 1668.632866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1668.779200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1669.101435][ C0] vkms_vblank_simulate: vblank timer overrun [ 1669.156226][ C0] vkms_vblank_simulate: vblank timer overrun [ 1669.372589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1669.621402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1670.061467][ C0] vkms_vblank_simulate: vblank timer overrun [ 1670.186020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1670.254590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1670.264103][ T5814] Bluetooth: hci6: command tx timeout [ 1670.293838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1670.812117][ C0] vkms_vblank_simulate: vblank timer overrun [ 1671.011600][ C0] vkms_vblank_simulate: vblank timer overrun [ 1671.330690][ C0] vkms_vblank_simulate: vblank timer overrun [ 1671.462456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1671.668040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.082311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.237317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.323873][ T5814] Bluetooth: hci6: command tx timeout [ 1672.337434][T20120] chnl_net:caif_netlink_parms(): no params data found [ 1672.571508][T20102] chnl_net:caif_netlink_parms(): no params data found [ 1672.761907][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.919292][ C0] vkms_vblank_simulate: vblank timer overrun [ 1673.424812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1673.503965][ C0] vkms_vblank_simulate: vblank timer overrun [ 1673.581487][ C0] vkms_vblank_simulate: vblank timer overrun [ 1673.614547][T20078] chnl_net:caif_netlink_parms(): no params data found [ 1674.610395][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.687237][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.762426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1675.098432][T20120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.098619][T20120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.098848][T20120] bridge_slave_0: entered allmulticast mode [ 1675.101798][T20120] bridge_slave_0: entered promiscuous mode [ 1675.305640][T20120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.305780][T20120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.306019][T20120] bridge_slave_1: entered allmulticast mode [ 1675.309016][T20120] bridge_slave_1: entered promiscuous mode [ 1675.347872][T20102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.348016][T20102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.348296][T20102] bridge_slave_0: entered allmulticast mode [ 1675.383943][T20102] bridge_slave_0: entered promiscuous mode [ 1675.694260][T20102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.694497][T20102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.694769][T20102] bridge_slave_1: entered allmulticast mode [ 1675.728096][T20102] bridge_slave_1: entered promiscuous mode [ 1676.109750][T20120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.112895][T20078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.113041][T20078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.113254][T20078] bridge_slave_0: entered allmulticast mode [ 1676.120235][T20078] bridge_slave_0: entered promiscuous mode [ 1676.253981][T17363] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1676.320936][T20120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.321359][T20078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.321583][T20078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.321796][T20078] bridge_slave_1: entered allmulticast mode [ 1676.327078][T20078] bridge_slave_1: entered promiscuous mode [ 1676.344286][T20102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.406831][T17363] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1676.409193][T17363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1676.409253][T17363] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.409283][T17363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1676.411827][T17363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1676.411885][T17363] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.411921][T17363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1676.434472][T17363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1676.434535][T17363] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.434566][T17363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1676.436901][T17363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1676.436959][T17363] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.436988][T17363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1676.438318][T17363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1676.438382][T17363] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.438412][T17363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1676.443923][T17363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1676.443983][T17363] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.444015][T17363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1676.483869][T17363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1676.483924][T17363] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.483947][T17363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1676.524130][T17363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1676.524195][T17363] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.524224][T17363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1676.659211][T17363] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1676.659245][T17363] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1676.659267][T17363] usb 2-1: Product: syz [ 1676.659283][T17363] usb 2-1: Manufacturer: syz [ 1676.659298][T17363] usb 2-1: SerialNumber: syz [ 1676.703251][T17363] usb 2-1: config 0 descriptor?? [ 1676.789827][T17363] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1676.924744][T12909] usb 2-1: USB disconnect, device number 95 [ 1676.961869][T12909] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1677.004812][T20102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.359362][T20120] team0: Port device team_slave_0 added [ 1677.441426][T20078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.876383][T20120] team0: Port device team_slave_1 added [ 1678.920112][T20078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.966047][T20102] team0: Port device team_slave_0 added [ 1679.292198][T20102] team0: Port device team_slave_1 added [ 1679.418193][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 1679.418213][ T38] audit: type=1107 audit(1760879024.084:1249): pid=20316 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1680.236165][T20120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.236180][T20120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.236200][T20120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.971979][T20342] input: syz1 as /devices/virtual/input/input33 [ 1681.647274][T20078] team0: Port device team_slave_0 added [ 1682.054186][T20120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.054206][T20120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.054236][T20120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.057607][T20078] team0: Port device team_slave_1 added [ 1682.397008][T20102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.397027][T20102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.397057][T20102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.528929][T20102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.528949][T20102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.528978][T20102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.640349][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1682.644354][T19906] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1682.675035][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1682.676559][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1682.678922][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1682.680299][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1682.829255][T19906] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1682.829289][T19906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.829329][T19906] usb 6-1: Product: syz [ 1682.829353][T19906] usb 6-1: Manufacturer: syz [ 1682.829370][T19906] usb 6-1: SerialNumber: syz [ 1682.876660][T19906] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1682.876687][T19906] r8152-cfgselector 6-1: config 0 descriptor?? [ 1682.921163][T20078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.921238][T20078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.921268][T20078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.104522][T19906] r8152-cfgselector 6-1: Unknown version 0x0020 [ 1683.105040][T19906] r8152-cfgselector 6-1: bad CDC descriptors [ 1683.212585][T20078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.212604][T20078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.212633][T20078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1683.324872][T12932] r8152-cfgselector 6-1: USB disconnect, device number 62 [ 1683.622484][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.683238][T20120] hsr_slave_0: entered promiscuous mode [ 1683.685374][T20120] hsr_slave_1: entered promiscuous mode [ 1683.686495][T20120] debugfs: 'hsr0' already exists in 'hsr' [ 1683.686523][T20120] Cannot create hsr debugfs directory [ 1683.805463][T20102] hsr_slave_0: entered promiscuous mode [ 1683.806938][T20102] hsr_slave_1: entered promiscuous mode [ 1683.807808][T20102] debugfs: 'hsr0' already exists in 'hsr' [ 1683.807829][T20102] Cannot create hsr debugfs directory [ 1684.353598][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.714571][ T5815] Bluetooth: hci0: command tx timeout [ 1686.141494][T20078] hsr_slave_0: entered promiscuous mode [ 1686.154513][T20078] hsr_slave_1: entered promiscuous mode [ 1686.155660][T20078] debugfs: 'hsr0' already exists in 'hsr' [ 1686.155687][T20078] Cannot create hsr debugfs directory [ 1686.794352][ T5815] Bluetooth: hci0: command tx timeout [ 1686.849122][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.276178][T20355] lo speed is unknown, defaulting to 1000 [ 1688.650230][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1688.895170][ T5815] Bluetooth: hci0: command tx timeout [ 1688.937772][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.961456][ T5815] Bluetooth: hci0: command tx timeout [ 1691.074239][T17363] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1691.224067][T17363] usb 6-1: Using ep0 maxpacket: 8 [ 1691.243300][T17363] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1691.243337][T17363] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1691.243365][T17363] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1691.243388][T17363] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1691.243433][T17363] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1691.243457][T17363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.438649][T17363] usbtmc 6-1:16.0: bulk endpoints not found [ 1693.454341][T20355] chnl_net:caif_netlink_parms(): no params data found [ 1693.593299][ T58] bridge_slave_1: left allmulticast mode [ 1693.593330][ T58] bridge_slave_1: left promiscuous mode [ 1693.593594][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.698632][ T58] bridge_slave_0: left allmulticast mode [ 1693.698666][ T58] bridge_slave_0: left promiscuous mode [ 1693.698953][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.755359][T17363] usb 6-1: USB disconnect, device number 63 [ 1693.812334][ T58] bridge_slave_1: left allmulticast mode [ 1693.812365][ T58] bridge_slave_1: left promiscuous mode [ 1693.812612][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.975859][ T58] bridge_slave_0: left allmulticast mode [ 1693.975883][ T58] bridge_slave_0: left promiscuous mode [ 1693.976101][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.260926][ T58] bridge_slave_1: left allmulticast mode [ 1694.260957][ T58] bridge_slave_1: left promiscuous mode [ 1694.261236][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.396653][ T58] bridge_slave_0: left allmulticast mode [ 1694.396677][ T58] bridge_slave_0: left promiscuous mode [ 1694.396858][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.560260][ T58] bridge_slave_1: left allmulticast mode [ 1694.560292][ T58] bridge_slave_1: left promiscuous mode [ 1694.560555][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.665503][ T58] bridge_slave_0: left allmulticast mode [ 1694.665527][ T58] bridge_slave_0: left promiscuous mode [ 1694.665719][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.132988][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1699.325495][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1699.384749][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1699.408046][ T58] bond0 (unregistering): Released all slaves [ 1699.634897][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1699.716384][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1699.777532][ T58] bond0 (unregistering): Released all slaves [ 1700.004648][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.087133][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.146380][ T58] bond0 (unregistering): Released all slaves [ 1700.375596][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.454739][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.547042][ T58] bond0 (unregistering): Released all slaves [ 1702.057726][T12909] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1702.214561][T12909] usb 6-1: Using ep0 maxpacket: 8 [ 1702.221722][T12909] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1702.221747][T12909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1702.221765][T12909] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1702.221780][T12909] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1702.221810][T12909] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1702.221827][T12909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.327872][T12909] usbtmc 6-1:16.0: bulk endpoints not found [ 1703.094141][T20355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.094238][T20355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.094462][T20355] bridge_slave_0: entered allmulticast mode [ 1703.104524][T20355] bridge_slave_0: entered promiscuous mode [ 1703.177178][T20355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.177321][T20355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.177605][T20355] bridge_slave_1: entered allmulticast mode [ 1703.181530][T20355] bridge_slave_1: entered promiscuous mode [ 1704.028737][T20355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.031806][T20355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.377521][T20355] team0: Port device team_slave_0 added [ 1704.484658][T12909] usb 6-1: USB disconnect, device number 64 [ 1704.534080][ T58] hsr_slave_0: left promiscuous mode [ 1704.574482][ T58] hsr_slave_1: left promiscuous mode [ 1704.575552][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1704.575580][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.624765][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1704.624788][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.034262][ T58] hsr_slave_0: left promiscuous mode [ 1705.107744][ T58] hsr_slave_1: left promiscuous mode [ 1705.109223][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.132057][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.354369][ T58] hsr_slave_0: left promiscuous mode [ 1705.395232][ T58] hsr_slave_1: left promiscuous mode [ 1705.396343][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.446585][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.694882][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4161'. [ 1706.064081][ T58] hsr_slave_0: left promiscuous mode [ 1706.104095][ T58] hsr_slave_1: left promiscuous mode [ 1706.104917][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.134681][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.257334][ T58] veth1_macvtap: left promiscuous mode [ 1706.257413][ T58] veth0_macvtap: left promiscuous mode [ 1706.257593][ T58] veth1_vlan: left promiscuous mode [ 1706.257728][ T58] veth0_vlan: left promiscuous mode [ 1708.814916][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1709.084613][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1712.384795][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1712.544995][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1713.764937][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1713.886185][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1714.678563][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1714.752193][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1714.754467][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1714.756507][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1714.757499][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1715.154600][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1715.326619][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1715.913040][T20355] team0: Port device team_slave_1 added [ 1716.308909][ T10] lo speed is unknown, defaulting to 1000 [ 1716.308943][ T10] infiniband syz2: ib_query_port failed (-19) [ 1716.826610][ T5815] Bluetooth: hci3: command tx timeout [ 1717.531714][T20355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.531731][T20355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.531753][T20355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.562374][T20355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.562398][T20355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.562434][T20355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.961694][T20120] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1718.012046][T20355] hsr_slave_0: entered promiscuous mode [ 1718.013408][T20355] hsr_slave_1: entered promiscuous mode [ 1718.063047][T20120] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1718.122901][T20120] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1718.220028][T20120] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1718.895217][ T5815] Bluetooth: hci3: command tx timeout [ 1720.244244][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1720.487098][T19317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1720.510280][T19317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1720.560808][T19317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1720.563103][T19317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1720.965619][T19317] Bluetooth: hci3: command tx timeout [ 1722.695378][T20571] chnl_net:caif_netlink_parms(): no params data found [ 1722.804273][T19317] Bluetooth: hci4: command tx timeout [ 1723.091500][T19317] Bluetooth: hci3: command tx timeout [ 1724.873955][T19317] Bluetooth: hci4: command tx timeout [ 1725.036374][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1725.040578][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1725.045979][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1725.047482][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1725.090621][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1725.722159][T20571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.722316][T20571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.722537][T20571] bridge_slave_0: entered allmulticast mode [ 1725.725817][T20571] bridge_slave_0: entered promiscuous mode [ 1725.765531][T20571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.765730][T20571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.765994][T20571] bridge_slave_1: entered allmulticast mode [ 1725.773540][T20571] bridge_slave_1: entered promiscuous mode [ 1726.235984][T20571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.337905][T20571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.645158][ T58] IPVS: stop unused estimator thread 0... [ 1726.730197][T20571] team0: Port device team_slave_0 added [ 1726.905825][T20571] team0: Port device team_slave_1 added [ 1726.954217][T19317] Bluetooth: hci4: command tx timeout [ 1727.189151][T20571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.189172][T20571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.189200][T20571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.194352][T19317] Bluetooth: hci1: command tx timeout [ 1727.258771][T20571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.258790][T20571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.258821][T20571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.305151][T20355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1727.395340][T20355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1727.558844][T20355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1727.898169][T20355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1729.034168][T19317] Bluetooth: hci4: command tx timeout [ 1729.274446][T19317] Bluetooth: hci1: command tx timeout [ 1729.307507][T20571] hsr_slave_0: entered promiscuous mode [ 1729.308992][T20571] hsr_slave_1: entered promiscuous mode [ 1729.310010][T20571] debugfs: 'hsr0' already exists in 'hsr' [ 1729.310036][T20571] Cannot create hsr debugfs directory [ 1729.715939][T20608] chnl_net:caif_netlink_parms(): no params data found [ 1730.830485][T20641] chnl_net:caif_netlink_parms(): no params data found [ 1731.247158][T20608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.247398][T20608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.247620][T20608] bridge_slave_0: entered allmulticast mode [ 1731.249904][T20608] bridge_slave_0: entered promiscuous mode [ 1731.348620][T20608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.348873][T20608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.349069][T20608] bridge_slave_1: entered allmulticast mode [ 1731.351219][T20608] bridge_slave_1: entered promiscuous mode [ 1731.355113][T19317] Bluetooth: hci1: command tx timeout [ 1731.882403][T20608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.085656][T20608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.579920][T20641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.580056][T20641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.580259][T20641] bridge_slave_0: entered allmulticast mode [ 1732.607869][T20641] bridge_slave_0: entered promiscuous mode [ 1732.747286][T20641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.747510][T20641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.747754][T20641] bridge_slave_1: entered allmulticast mode [ 1732.751239][T20641] bridge_slave_1: entered promiscuous mode [ 1732.875740][T20608] team0: Port device team_slave_0 added [ 1733.024795][T20608] team0: Port device team_slave_1 added [ 1733.381889][T20641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.434195][T19317] Bluetooth: hci1: command tx timeout [ 1733.491006][T20641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.575351][T20608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.575367][T20608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.575390][T20608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.762678][T20608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.762698][T20608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.762729][T20608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.907760][T20641] team0: Port device team_slave_0 added [ 1733.923108][T20641] team0: Port device team_slave_1 added [ 1734.402409][T20641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.402428][T20641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.402457][T20641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.423578][T20608] hsr_slave_0: entered promiscuous mode [ 1734.426935][T20608] hsr_slave_1: entered promiscuous mode [ 1734.428143][T20608] debugfs: 'hsr0' already exists in 'hsr' [ 1734.428177][T20608] Cannot create hsr debugfs directory [ 1734.562293][T20641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1734.562308][T20641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.562328][T20641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.521758][T20641] hsr_slave_0: entered promiscuous mode [ 1735.522857][T20641] hsr_slave_1: entered promiscuous mode [ 1735.523647][T20641] debugfs: 'hsr0' already exists in 'hsr' [ 1735.523670][T20641] Cannot create hsr debugfs directory [ 1735.570976][T20571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1735.617536][T20571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1735.678096][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.761849][T20571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1735.811635][T20355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.828074][T20571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1736.511677][T20355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.642158][T19530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.646924][T19530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.655627][ T58] bridge_slave_1: left allmulticast mode [ 1736.655665][ T58] bridge_slave_1: left promiscuous mode [ 1736.655927][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.998116][ T58] bridge_slave_0: left allmulticast mode [ 1736.998252][ T58] bridge_slave_0: left promiscuous mode [ 1737.000565][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.880286][ T58] bridge_slave_1: left allmulticast mode [ 1737.880318][ T58] bridge_slave_1: left promiscuous mode [ 1737.880562][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.155360][ T58] bridge_slave_0: left allmulticast mode [ 1738.155385][ T58] bridge_slave_0: left promiscuous mode [ 1738.155576][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.328895][ T58] bridge_slave_1: left allmulticast mode [ 1738.328928][ T58] bridge_slave_1: left promiscuous mode [ 1738.329204][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.397109][ T58] bridge_slave_0: left allmulticast mode [ 1738.397139][ T58] bridge_slave_0: left promiscuous mode [ 1738.397320][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.244739][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.354489][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.417328][ T58] bond0 (unregistering): Released all slaves [ 1739.547113][T20751] evm: overlay not supported [ 1739.873195][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.945176][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.015105][ T58] bond0 (unregistering): Released all slaves [ 1740.476837][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1740.575946][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.669254][ T58] bond0 (unregistering): Released all slaves [ 1741.007226][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.007830][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.847873][ T58] hsr_slave_0: left promiscuous mode [ 1741.884230][ T58] hsr_slave_1: left promiscuous mode [ 1741.885286][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.928532][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.114658][ T58] hsr_slave_0: left promiscuous mode [ 1742.154640][ T58] hsr_slave_1: left promiscuous mode [ 1742.155682][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.195184][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.130365][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1743.135888][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1743.139896][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1743.141949][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1743.142848][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1743.654108][ T58] hsr_slave_0: left promiscuous mode [ 1744.133558][ T38] audit: type=1326 audit(1760879088.684:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.170854][ T38] audit: type=1326 audit(1760879088.694:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.171478][ T38] audit: type=1326 audit(1760879088.694:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.171941][ T38] audit: type=1326 audit(1760879088.714:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.172568][ T38] audit: type=1326 audit(1760879088.714:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.173008][ T38] audit: type=1326 audit(1760879088.724:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.173495][ T38] audit: type=1326 audit(1760879088.744:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.496662][ T38] audit: type=1326 audit(1760879088.744:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.497047][ T38] audit: type=1326 audit(1760879088.754:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.497407][ T38] audit: type=1326 audit(1760879088.764:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.5.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d6adefc9 code=0x7ffc0000 [ 1744.617120][ T58] hsr_slave_1: left promiscuous mode [ 1744.632010][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1744.686497][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.194133][ T5815] Bluetooth: hci2: command tx timeout [ 1745.395463][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1745.554776][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1746.905136][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1747.054855][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1747.274296][ T5815] Bluetooth: hci2: command tx timeout [ 1748.214752][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1748.366385][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1749.000054][T20775] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1749.000111][T20775] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1749.000134][T20775] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1749.354131][ T5815] Bluetooth: hci2: command tx timeout [ 1749.692172][T20571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.586385][T20784] team0: Port device team_slave_0 removed [ 1750.917028][T20571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1751.179382][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.179626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1751.202151][T16521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.202302][T16521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.309021][T20770] chnl_net:caif_netlink_parms(): no params data found [ 1751.434166][ T5815] Bluetooth: hci2: command tx timeout [ 1752.022165][T20770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.022383][T20770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.022620][T20770] bridge_slave_0: entered allmulticast mode [ 1752.028444][T20770] bridge_slave_0: entered promiscuous mode [ 1752.133241][T20770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.133336][T20770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.133484][T20770] bridge_slave_1: entered allmulticast mode [ 1752.138874][T20770] bridge_slave_1: entered promiscuous mode [ 1752.501279][T20770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1752.563372][T20770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.029109][T20770] team0: Port device team_slave_0 added [ 1754.144139][T20608] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1754.257180][T20770] team0: Port device team_slave_1 added [ 1754.535885][T20608] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1755.925623][T20608] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1756.451310][T20608] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1756.468541][T20770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.468560][T20770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.468589][T20770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.481647][T20770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.481671][T20770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.481706][T20770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.027780][T20571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.079921][T20770] hsr_slave_0: entered promiscuous mode [ 1757.081774][T20770] hsr_slave_1: entered promiscuous mode [ 1757.082958][T20770] debugfs: 'hsr0' already exists in 'hsr' [ 1757.082984][T20770] Cannot create hsr debugfs directory [ 1757.225166][T20641] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1757.405798][T20641] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1757.566289][T20641] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1757.913684][T20641] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1759.474097][T20571] veth0_vlan: entered promiscuous mode [ 1759.636740][T20571] veth1_vlan: entered promiscuous mode [ 1759.788571][ T58] bridge_slave_1: left allmulticast mode [ 1759.788602][ T58] bridge_slave_1: left promiscuous mode [ 1759.788873][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.875064][ T58] bridge_slave_0: left allmulticast mode [ 1759.875089][ T58] bridge_slave_0: left promiscuous mode [ 1759.875287][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.684063][ T5815] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1762.067281][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.508153][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.550806][ T58] bond0 (unregistering): Released all slaves [ 1762.603651][T20608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.849546][T20608] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.883325][T19584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.883648][T19584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.909214][T20571] veth0_macvtap: entered promiscuous mode [ 1762.923568][T19584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.925258][T19584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.975941][T20571] veth1_macvtap: entered promiscuous mode [ 1763.046517][T20641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.184136][ T58] hsr_slave_0: left promiscuous mode [ 1763.224019][ T58] hsr_slave_1: left promiscuous mode [ 1763.224928][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1763.257203][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1764.245855][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1764.526766][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1767.109448][T20571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1767.271788][T20641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.275424][T20571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1767.382314][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.391560][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.399328][T16521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.400444][T16521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.438912][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.456911][T16521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.457067][T16521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1767.510563][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.484091][T19584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.484115][T19584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.630511][T20770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1769.632054][T20770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1769.749891][T20770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1769.988983][T19584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.989004][T19584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.991931][T20770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1770.119298][T20608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1770.578975][T20770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1771.904979][T20770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1771.939032][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.939148][T17151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1772.003309][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.014140][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1772.172534][T20641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1772.667242][T20608] veth0_vlan: entered promiscuous mode [ 1772.711966][T20608] veth1_vlan: entered promiscuous mode [ 1772.938865][T20608] veth0_macvtap: entered promiscuous mode [ 1772.978401][T20608] veth1_macvtap: entered promiscuous mode [ 1773.115530][T20608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1773.158960][T20608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.235679][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.255884][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.265226][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.293711][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.691706][T20770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.853677][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.853700][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.043901][T12932] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1774.068967][T16521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.069057][T16521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.550665][T20641] veth0_vlan: entered promiscuous mode [ 1774.597229][T12932] usb 6-1: Using ep0 maxpacket: 16 [ 1775.122866][T20952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4231'. [ 1775.925801][T20641] veth1_vlan: entered promiscuous mode [ 1776.283184][T20770] veth0_vlan: entered promiscuous mode [ 1776.367364][T20770] veth1_vlan: entered promiscuous mode [ 1776.502632][T20641] veth0_macvtap: entered promiscuous mode [ 1776.592582][T20641] veth1_macvtap: entered promiscuous mode [ 1776.736967][T20770] veth0_macvtap: entered promiscuous mode [ 1776.773703][T20770] veth1_macvtap: entered promiscuous mode [ 1776.827999][T20641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1776.902253][T20641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1776.976430][T17151] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.981397][ T3523] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.985868][ T3523] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.988961][ T3523] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.104230][T20770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.287908][T12932] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1777.289110][T12932] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1777.289152][T12932] usb 6-1: can't read configurations, error -71 [ 1777.391337][T20770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.560236][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.641637][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.692301][ T3523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.721584][ T3523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.912356][T16519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.912379][T16519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.188784][T16521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.188809][T16521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.400473][T16519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.400497][T16519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.599994][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.600018][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.575822][T19317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1786.792245][T19317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1786.826349][T19317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1787.235877][T19317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1787.237961][T19317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1787.573971][T17363] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1787.758569][T20585] bond0: (slave syz_tun): Releasing backup interface [ 1788.268650][T17363] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.268680][T17363] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1788.268730][T17363] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1788.268755][T17363] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.363883][T19317] Bluetooth: hci0: command tx timeout [ 1791.433993][T19317] Bluetooth: hci0: command tx timeout [ 1793.452609][T17363] usb 10-1: can't set config #27, error -110 [ 1793.633188][T19317] Bluetooth: hci0: command tx timeout [ 1794.772556][T19659] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.214039][ T5815] Bluetooth: hci0: command tx timeout [ 1797.248278][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.832111][T19659] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.041339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.184319][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.314678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.395553][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.586891][T20632] usb 10-1: USB disconnect, device number 2 [ 1798.622781][T21083] delete_channel: no stack [ 1799.224642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1800.176434][ C0] vkms_vblank_simulate: vblank timer overrun [ 1800.532936][ C0] vkms_vblank_simulate: vblank timer overrun [ 1801.677908][ C0] vkms_vblank_simulate: vblank timer overrun [ 1801.692444][T19659] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.933017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1802.135501][ C0] vkms_vblank_simulate: vblank timer overrun [ 1802.254187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1802.319222][ C0] vkms_vblank_simulate: vblank timer overrun [ 1802.601178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1803.402700][T19659] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.784190][T17363] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1803.996629][T17363] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.996658][T17363] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1803.998909][T17363] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1803.998941][T17363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1803.998964][T17363] usb 5-1: SerialNumber: syz [ 1804.543497][T17363] usb 5-1: 0:2 : does not exist [ 1804.543631][T17363] usb 5-1: unit 255 not found! [ 1804.663563][T21087] chnl_net:caif_netlink_parms(): no params data found [ 1804.770364][T17363] usb 5-1: USB disconnect, device number 108 [ 1805.871538][T21231] lo speed is unknown, defaulting to 1000 [ 1805.876186][T21231] lo speed is unknown, defaulting to 1000 [ 1806.233137][T21231] lo speed is unknown, defaulting to 1000 [ 1806.599686][T20941] udevd[20941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1806.947329][T21231] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1807.424809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1807.563057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1807.779599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1807.972362][T21231] lo speed is unknown, defaulting to 1000 [ 1808.001161][T21231] lo speed is unknown, defaulting to 1000 [ 1808.075779][T21231] lo speed is unknown, defaulting to 1000 [ 1808.177511][T21231] lo speed is unknown, defaulting to 1000 [ 1808.463791][T21231] lo speed is unknown, defaulting to 1000 [ 1808.817689][T21231] lo speed is unknown, defaulting to 1000 [ 1808.840499][T19659] bridge_slave_1: left allmulticast mode [ 1808.840529][T19659] bridge_slave_1: left promiscuous mode [ 1808.840829][T19659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.020503][T19659] bridge_slave_0: left allmulticast mode [ 1809.020535][T19659] bridge_slave_0: left promiscuous mode [ 1809.020833][T19659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.821072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1810.264905][T19659] bond_slave_0: left promiscuous mode [ 1810.268964][T19659] bond_slave_1: left promiscuous mode [ 1810.972082][T21302] input: syz1 as /devices/virtual/input/input34 [ 1813.516899][T21330] netlink: 'syz.8.4318': attribute type 2 has an invalid length. [ 1813.516933][T21330] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4318'. [ 1814.629225][T19659] bond3 (unregistering): (slave macvlan0): Releasing backup interface [ 1814.775831][T19659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1814.835903][T19659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1814.859233][T19659] bond0 (unregistering): Released all slaves [ 1814.899615][T19659] bond1 (unregistering): Released all slaves [ 1814.937634][T19659] bond2 (unregistering): Released all slaves [ 1814.969923][T19659] bond3 (unregistering): Released all slaves [ 1815.020149][T19659] bond4 (unregistering): Released all slaves [ 1815.051895][T19659] bond5 (unregistering): Released all slaves [ 1816.270634][T19659] bond6 (unregistering): (slave vlan1): Releasing active interface [ 1816.297282][T19659] veth1: left promiscuous mode [ 1816.299175][T19659] bond6 (unregistering): Released all slaves [ 1817.274903][T19659] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1817.297477][T19659] bond7 (unregistering): Released all slaves [ 1817.334466][T21087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.334572][T21087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.334790][T21087] bridge_slave_0: entered allmulticast mode [ 1817.337031][T21087] bridge_slave_0: entered promiscuous mode [ 1817.380699][T21231] lo speed is unknown, defaulting to 1000 [ 1817.816698][T21337] ptrace attach of "./syz-executor exec"[21338] was attempted by "./syz-executor exec"[21337] [ 1817.841688][T21314] team0: Port device team_slave_0 removed [ 1818.120880][T21087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.121064][T21087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.121342][T21087] bridge_slave_1: entered allmulticast mode [ 1818.130887][T21087] bridge_slave_1: entered promiscuous mode [ 1818.300853][T19659] tipc: Left network mode [ 1818.317109][T21332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1818.318550][T21332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1818.434451][T21332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1818.680197][T21332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1818.710138][T21332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1818.850099][T21332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1819.433327][T21332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1819.433518][T21332] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1819.585010][T21332] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1819.795608][T21332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1819.795668][T21332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1820.302641][T21332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1820.698104][T19317] Bluetooth: hci3: command 0x0c1a tx timeout [ 1821.563223][T19317] Bluetooth: hci4: command 0x0c1a tx timeout [ 1821.563559][T19317] Bluetooth: hci1: command 0x0c1a tx timeout [ 1821.656238][ T5815] ================================================================== [ 1821.656331][ T5815] BUG: KASAN: slab-use-after-free in l2cap_recv_acldata+0x78/0x1210 [ 1821.656468][ T5815] Read of size 8 at addr ffff88803ae3d198 by task kworker/u9:7/5815 [ 1821.656488][ T5815] [ 1821.656516][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1821.656543][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1821.656560][ T5815] Workqueue: hci2 hci_rx_work [ 1821.656629][ T5815] Call Trace: [ 1821.656643][ T5815] [ 1821.656654][ T5815] dump_stack_lvl+0x189/0x250 [ 1821.656711][ T5815] ? __kasan_check_byte+0x12/0x40 [ 1821.656773][ T5815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1821.656802][ T5815] ? lock_release+0x4b/0x3e0 [ 1821.656831][ T5815] ? __virt_addr_valid+0x4a5/0x5c0 [ 1821.656869][ T5815] print_report+0xca/0x240 [ 1821.656903][ T5815] ? l2cap_recv_acldata+0x78/0x1210 [ 1821.656937][ T5815] kasan_report+0x118/0x150 [ 1821.656963][ T5815] ? l2cap_recv_acldata+0x78/0x1210 [ 1821.657002][ T5815] l2cap_recv_acldata+0x78/0x1210 [ 1821.657041][ T5815] hci_rx_work+0x5bb/0xe80 [ 1821.657075][ T5815] ? process_scheduled_works+0x9ef/0x17b0 [ 1821.657120][ T5815] process_scheduled_works+0xae1/0x17b0 [ 1821.657175][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 1821.657222][ T5815] worker_thread+0x8a0/0xda0 [ 1821.657245][ T5815] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1821.657351][ T5815] ? __kthread_parkme+0x7b/0x200 [ 1821.657380][ T5815] kthread+0x711/0x8a0 [ 1821.657409][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 1821.657431][ T5815] ? __pfx_kthread+0x10/0x10 [ 1821.657455][ T5815] ? rt_spin_unlock+0x150/0x200 [ 1821.657489][ T5815] ? rt_spin_unlock+0x161/0x200 [ 1821.657518][ T5815] ? __pfx_kthread+0x10/0x10 [ 1821.657545][ T5815] ret_from_fork+0x4bc/0x870 [ 1821.657597][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.657638][ T5815] ? __switch_to_asm+0x39/0x70 [ 1821.657668][ T5815] ? __switch_to_asm+0x33/0x70 [ 1821.657697][ T5815] ? __pfx_kthread+0x10/0x10 [ 1821.657723][ T5815] ret_from_fork_asm+0x1a/0x30 [ 1821.657764][ T5815] [ 1821.657773][ T5815] [ 1821.657785][ T5815] Allocated by task 5815: [ 1821.657797][ T5815] kasan_save_track+0x3e/0x80 [ 1821.657816][ T5815] __kasan_kmalloc+0x93/0xb0 [ 1821.657835][ T5815] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 1821.657858][ T5815] __hci_conn_add+0x2b9/0x1b20 [ 1821.657889][ T5815] le_conn_complete_evt+0x6d0/0x1500 [ 1821.657970][ T5815] hci_le_conn_complete_evt+0x187/0x450 [ 1821.658000][ T5815] hci_event_packet+0x78f/0x1200 [ 1821.658028][ T5815] hci_rx_work+0x46a/0xe80 [ 1821.658054][ T5815] process_scheduled_works+0xae1/0x17b0 [ 1821.658088][ T5815] worker_thread+0x8a0/0xda0 [ 1821.658106][ T5815] kthread+0x711/0x8a0 [ 1821.658128][ T5815] ret_from_fork+0x4bc/0x870 [ 1821.658160][ T5815] ret_from_fork_asm+0x1a/0x30 [ 1821.658190][ T5815] [ 1821.658196][ T5815] Freed by task 21332: [ 1821.658211][ T5815] kasan_save_track+0x3e/0x80 [ 1821.658229][ T5815] __kasan_save_free_info+0x46/0x50 [ 1821.658257][ T5815] __kasan_slab_free+0x5c/0x80 [ 1821.658277][ T5815] kfree+0x197/0x950 [ 1821.658307][ T5815] device_release+0x9c/0x1c0 [ 1821.658387][ T5815] kobject_put+0x22b/0x480 [ 1821.658452][ T5815] hci_disconnect_all_sync+0x1bd/0x350 [ 1821.658495][ T5815] hci_suspend_sync+0x3fc/0xc60 [ 1821.658515][ T5815] hci_suspend_dev+0x28d/0x4d0 [ 1821.658544][ T5815] hci_suspend_notifier+0xf2/0x290 [ 1821.658572][ T5815] notifier_call_chain+0x1b6/0x3e0 [ 1821.658601][ T5815] blocking_notifier_call_chain_robust+0x85/0x100 [ 1821.658624][ T5815] pm_notifier_call_chain_robust+0x2c/0x60 [ 1821.658647][ T5815] snapshot_open+0x1a2/0x280 [ 1821.658669][ T5815] misc_open+0x2de/0x350 [ 1821.658725][ T5815] chrdev_open+0x4cf/0x5e0 [ 1821.658753][ T5815] do_dentry_open+0x9b1/0x1350 [ 1821.658780][ T5815] vfs_open+0x3b/0x350 [ 1821.658804][ T5815] path_openat+0x2ef1/0x3840 [ 1821.658834][ T5815] do_filp_open+0x1fa/0x410 [ 1821.658864][ T5815] do_sys_openat2+0x121/0x1c0 [ 1821.658891][ T5815] __x64_sys_openat+0x138/0x170 [ 1821.658919][ T5815] do_syscall_64+0xfa/0xfa0 [ 1821.658961][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.658998][ T5815] [ 1821.659005][ T5815] The buggy address belongs to the object at ffff88803ae3c000 [ 1821.659005][ T5815] which belongs to the cache kmalloc-8k of size 8192 [ 1821.659025][ T5815] The buggy address is located 4504 bytes inside of [ 1821.659025][ T5815] freed 8192-byte region [ffff88803ae3c000, ffff88803ae3e000) [ 1821.659050][ T5815] [ 1821.659056][ T5815] The buggy address belongs to the physical page: [ 1821.659074][ T5815] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ae38 [ 1821.659095][ T5815] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1821.659113][ T5815] flags: 0x80000000000040(head|node=0|zone=1) [ 1821.659137][ T5815] page_type: f5(slab) [ 1821.659157][ T5815] raw: 0080000000000040 ffff88813ff27280 ffffea0001876600 dead000000000002 [ 1821.659176][ T5815] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1821.659198][ T5815] head: 0080000000000040 ffff88813ff27280 ffffea0001876600 dead000000000002 [ 1821.659217][ T5815] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1821.659237][ T5815] head: 0080000000000003 ffffea0000eb8e01 00000000ffffffff 00000000ffffffff [ 1821.659256][ T5815] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1821.659268][ T5815] page dumped because: kasan: bad access detected [ 1821.659279][ T5815] page_owner tracks the page as allocated [ 1821.659288][ T5815] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5620, tgid 5620 (dhcpcd-run-hook), ts 72903299903, free_ts 72810702292 [ 1821.659327][ T5815] post_alloc_hook+0x240/0x2a0 [ 1821.659364][ T5815] get_page_from_freelist+0x28c0/0x2960 [ 1821.659390][ T5815] __alloc_frozen_pages_noprof+0x181/0x370 [ 1821.659416][ T5815] alloc_pages_mpol+0xd1/0x380 [ 1821.659438][ T5815] allocate_slab+0x96/0x3a0 [ 1821.659466][ T5815] ___slab_alloc+0xb12/0x13f0 [ 1821.659492][ T5815] __slab_alloc+0xc6/0x1f0 [ 1821.659516][ T5815] __kmalloc_cache_noprof+0xec/0x6c0 [ 1821.659537][ T5815] tomoyo_init_log+0x1120/0x1f70 [ 1821.659599][ T5815] tomoyo_supervisor+0x340/0x1480 [ 1821.659632][ T5815] tomoyo_env_perm+0x149/0x1e0 [ 1821.659654][ T5815] tomoyo_find_next_domain+0x15d1/0x1aa0 [ 1821.659678][ T5815] tomoyo_bprm_check_security+0x11d/0x180 [ 1821.659713][ T5815] security_bprm_check+0x89/0x270 [ 1821.659745][ T5815] bprm_execve+0x8ee/0x1450 [ 1821.659776][ T5815] do_execveat_common+0x510/0x6a0 [ 1821.659809][ T5815] page last free pid 5615 tgid 5615 stack trace: [ 1821.659821][ T5815] __free_frozen_pages+0xfb6/0x1140 [ 1821.659842][ T5815] __put_partials+0x149/0x170 [ 1821.659868][ T5815] __slab_free+0x29e/0x370 [ 1821.659896][ T5815] qlist_free_all+0x97/0x140 [ 1821.659927][ T5815] kasan_quarantine_reduce+0x148/0x160 [ 1821.659960][ T5815] __kasan_slab_alloc+0x22/0x80 [ 1821.659979][ T5815] kmem_cache_alloc_noprof+0x181/0x6b0 [ 1821.660012][ T5815] getname_flags+0xb8/0x540 [ 1821.660035][ T5815] do_sys_openat2+0xbc/0x1c0 [ 1821.660060][ T5815] __x64_sys_openat+0x138/0x170 [ 1821.660086][ T5815] do_syscall_64+0xfa/0xfa0 [ 1821.660104][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.660125][ T5815] [ 1821.660131][ T5815] Memory state around the buggy address: [ 1821.660144][ T5815] ffff88803ae3d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1821.660160][ T5815] ffff88803ae3d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1821.660176][ T5815] >ffff88803ae3d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1821.660188][ T5815] ^ [ 1821.660200][ T5815] ffff88803ae3d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1821.660216][ T5815] ffff88803ae3d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1821.660229][ T5815] ================================================================== [ 1821.660393][ T5815] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1821.660413][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1821.660439][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1821.660456][ T5815] Workqueue: hci2 hci_rx_work [ 1821.660486][ T5815] Call Trace: [ 1821.660496][ T5815] [ 1821.660507][ T5815] dump_stack_lvl+0x99/0x250 [ 1821.660536][ T5815] ? __asan_memcpy+0x40/0x70 [ 1821.660569][ T5815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1821.660606][ T5815] ? __pfx__printk+0x10/0x10 [ 1821.660642][ T5815] vpanic+0x237/0x6d0 [ 1821.660678][ T5815] ? __pfx_vpanic+0x10/0x10 [ 1821.660700][ T5815] ? preempt_schedule+0xae/0xc0 [ 1821.660766][ T5815] ? __pfx_preempt_schedule+0x10/0x10 [ 1821.660806][ T5815] panic+0xb9/0xc0 [ 1821.660827][ T5815] ? __pfx_panic+0x10/0x10 [ 1821.660851][ T5815] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1821.660893][ T5815] ? l2cap_recv_acldata+0x78/0x1210 [ 1821.660929][ T5815] check_panic_on_warn+0x89/0xb0 [ 1821.660958][ T5815] ? l2cap_recv_acldata+0x78/0x1210 [ 1821.660991][ T5815] end_report+0x78/0x160 [ 1821.661015][ T5815] kasan_report+0x129/0x150 [ 1821.661041][ T5815] ? l2cap_recv_acldata+0x78/0x1210 [ 1821.661081][ T5815] l2cap_recv_acldata+0x78/0x1210 [ 1821.661121][ T5815] hci_rx_work+0x5bb/0xe80 [ 1821.661154][ T5815] ? process_scheduled_works+0x9ef/0x17b0 [ 1821.661192][ T5815] process_scheduled_works+0xae1/0x17b0 [ 1821.661245][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 1821.661290][ T5815] worker_thread+0x8a0/0xda0 [ 1821.661313][ T5815] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1821.661357][ T5815] ? __kthread_parkme+0x7b/0x200 [ 1821.661385][ T5815] kthread+0x711/0x8a0 [ 1821.661413][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 1821.661434][ T5815] ? __pfx_kthread+0x10/0x10 [ 1821.661458][ T5815] ? rt_spin_unlock+0x150/0x200 [ 1821.661492][ T5815] ? rt_spin_unlock+0x161/0x200 [ 1821.661520][ T5815] ? __pfx_kthread+0x10/0x10 [ 1821.661547][ T5815] ret_from_fork+0x4bc/0x870 [ 1821.661590][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.661629][ T5815] ? __switch_to_asm+0x39/0x70 [ 1821.661658][ T5815] ? __switch_to_asm+0x33/0x70 [ 1821.661688][ T5815] ? __pfx_kthread+0x10/0x10 [ 1821.661715][ T5815] ret_from_fork_asm+0x1a/0x30 [ 1821.661755][ T5815] [ 1821.662111][ T5815] Kernel Offset: disabled