last executing test programs: 12m38.760442129s ago: executing program 2 (id=3): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) 12m36.098238747s ago: executing program 2 (id=8): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12m35.021984418s ago: executing program 2 (id=9): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) 12m34.027154167s ago: executing program 2 (id=10): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c}) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x2000, @fd_index=0x8, 0x9167000, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/91, 0x5b}, {0x0}], 0x2, 0x11}) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 12m31.997465561s ago: executing program 4 (id=5): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 12m30.790830477s ago: executing program 4 (id=12): landlock_restrict_self(0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) 12m30.747509638s ago: executing program 2 (id=13): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) 12m29.57971135s ago: executing program 4 (id=14): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) 12m27.826371092s ago: executing program 2 (id=16): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) 12m13.062301136s ago: executing program 32 (id=14): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) 12m11.560492344s ago: executing program 33 (id=16): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) 9m57.181885922s ago: executing program 1 (id=200): fdatasync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(0x0, 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) pause() 9m55.578777412s ago: executing program 1 (id=202): quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) 9m55.223627156s ago: executing program 1 (id=204): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet_nvme_of_msg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b6, 0x13500}, &(0x7f0000000280), &(0x7f0000001880)) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x20002, 0x0) 9m54.556582643s ago: executing program 1 (id=205): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 9m53.745074584s ago: executing program 1 (id=207): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea", 0x19}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0xfffffffffffffe24) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) 9m52.687491046s ago: executing program 1 (id=209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2e}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x2, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 9m37.088437839s ago: executing program 34 (id=209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2e}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x2, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 8.129165561s ago: executing program 0 (id=1076): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/64, 0x40}], 0x7}, 0x5}], 0x1, 0x10040, &(0x7f0000000500)={0x0, 0x989680}) 7.539772712s ago: executing program 0 (id=1080): syz_clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x12}, &(0x7f00000000c0)=""/114, 0x72, &(0x7f0000000140)=""/27, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) prlimit64(r0, 0xa, &(0x7f0000000240)={0x5, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) fallocate(r1, 0x10, 0x7, 0x800) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000000300)={{0x10b, 0xff, 0x5, 0x328, 0x269, 0x80000001, 0x1e5, 0x7}, "f665965ef45b7193166a0c1b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x62c) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000940)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980), 0x400, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x1, 0x4a, &(0x7f00000009c0)=""/74}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000f00)={0x8, 0x0, [{0x80a0000, 0x2, &(0x7f0000000ac0)=""/2}, {0xffff1000, 0x90, &(0x7f0000000b00)=""/144}, {0x1, 0x6e, &(0x7f0000000bc0)=""/110}, {0x40000, 0xdf, &(0x7f0000000c40)=""/223}, {0x40000, 0x4a, &(0x7f0000000d40)=""/74}, {0x200000, 0x65, &(0x7f0000000dc0)=""/101}, {0x0, 0x70, &(0x7f0000000e40)=""/112}, {0xe000, 0x18, &(0x7f0000000ec0)=""/24}]}) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x9) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x8, 0x2) sendto$inet(r3, &(0x7f00000010c0)="1c677a2f021a8707b75679e9aa27cac61bc0958faa7e", 0x16, 0xc0c9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001200)={&(0x7f0000001100)=[0x0, 0x0], &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x2, 0x1, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000001240)={0x1, r6, 0x80000000, 0x3, 0x3, 0xfffffffa, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000001280)={r5, 0x200b, 0x6, 0xfff, 0x0, 0x6, 0x1}) execve(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001400)={[&(0x7f0000001300)='trusted.overlay.redirect\x00', &(0x7f0000001340)='$.&*#%!)\x00', &(0x7f0000001380)='/dev/vhost-vsock\x00', &(0x7f00000013c0)='/dev/vcs\x00']}, &(0x7f00000014c0)={[&(0x7f0000001440)='/dev/virtual_nci\x00', &(0x7f0000001480)='/dev/virtual_nci\x00']}) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000001500)={0x1, @null, @rose={'rose', 0x0}, 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x89, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001600)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) getsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000001700), &(0x7f0000001740)=0x4) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001780)={'wpan3\x00'}) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000017c0)=@ccm_128={{0x303}, "39432da652049afa", "d74c03c55fe18acb0cdd9b3a9d916c35", "32889bab", "72d1f8f826f896e5"}, 0x28) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001840), 0x602, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r10, 0x40045108, &(0x7f0000001880)) 6.485094634s ago: executing program 6 (id=27): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) 5.256269598s ago: executing program 6 (id=1086): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000024000108000000000000002504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.16033114s ago: executing program 0 (id=1087): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, r0, r2, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@deltaction={0x1f4, 0x31, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x340}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffcd}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8000080}, 0x12) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', r3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000600)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000008c0)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x6, 0x3, 0x7, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000940)={0x5, r5, r1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x125000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f00000009c0)) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000a80)={0x0, 0xb74, 0x3, 0x669}, &(0x7f0000000ac0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000b00)={0x0, 0x5}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000b80)={r7, 0x5, 0x0, 0x9, 0x3, 0x0, 0x3, 0x1, {r8, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x8129, 0x6, 0x1, 0x81, 0x2}}, &(0x7f0000000c40)=0xb0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000c80)={0x10001, 0xfffffff8, 0x8000, {0x5, 0xe}, 0x2, 0x10000}) syz_clone3(&(0x7f00000015c0)={0x200000000, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400), {0x21}, &(0x7f0000001440)=""/129, 0x81, &(0x7f0000001500)=""/85, &(0x7f0000001580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) 5.056551408s ago: executing program 6 (id=1090): syz_usb_connect(0x2, 0x592, &(0x7f0000000d40)=ANY=[@ANYBLOB="120100021e6907404705010246e50102030109028005027f09c0080904"], &(0x7f0000000100)={0x0, 0x0, 0x25, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000100)=""/83, 0x53) 4.800279519s ago: executing program 0 (id=1093): mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, 0x0, 0x8, 0x4000000) io_uring_setup(0x937, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) 3.747665409s ago: executing program 7 (id=1098): syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3fd, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 3.671309255s ago: executing program 0 (id=1099): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0xb2, 0xc5, 0x3c, 0x8, 0x7c9, 0x10, 0xa5f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x40, 0x0, 0x0, 0xff, 0xff, 0x0, 0x2c}}]}}]}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000001c0)="6fdcaffa7b970b6e93", 0x9}], 0x2}}], 0x1, 0x20000804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x2e, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c0000002300090425bd70000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x40042, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="dc000000150020002abd7000ffdbdf2511000000d3e776bb78090e57ade7bb1be560ace8fdbb164c93d2971da1fcfc23bf6a337a2465e2607572594697f897938ab5bcf0161ea441844a6436d9cc05d78260e29940edf92dc5fe09fb8a39194302b0a98fe929c5c28c6d8c91fe7e71ed0a6f89653b1484c7564cc4ebca4eb793fa25c9e75080f4e96f9e1b8072deabf78c9e38698437f72d19f587c5e0ccc89611009e2282152d889df82620d35c2cea2c93f7974f267637788a9461a1da0d10e503681e2c364739d2840800b700ac1e00010800e600", @ANYRES32=r4, @ANYBLOB="000005e10986185393d38329f886a81783d4e634720287e32e20c0fd47dfa01054a61be795ceb7c72545d0851eb85bb7a4c597025eee4092d190b6af72d262f4a3bf"], 0xdc}, 0x1, 0x0, 0x0, 0x4004890}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000080)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000000c0)='GPL\x00', 0x9, 0xb3, &(0x7f0000000100)=""/179, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000002c0)=[{0x1, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x0, 0xa}, {0x3, 0x3, 0x1, 0x3}, {0x4, 0x2, 0xf, 0x9}, {0x3, 0x4, 0x4, 0x7}, {0x3, 0x1, 0xd, 0x5}, {0x4, 0x3, 0x9, 0x9}, {0x0, 0x3, 0x8, 0x3}], 0x10, 0x7}, 0x94) 3.40376285s ago: executing program 7 (id=1101): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001c40), &(0x7f0000000180)=0x4) 3.176164062s ago: executing program 7 (id=1104): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 2.93190781s ago: executing program 7 (id=1105): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a", 0x17}], 0x2}, 0x0) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x3, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0xfffffffffffffe24) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) 2.853893271s ago: executing program 6 (id=1106): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4) 1.915611213s ago: executing program 5 (id=1107): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}, 0x1c) r1 = socket$kcm(0x2, 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x100001, 0x39, 0x80000}, 0x20) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000cab000)=0xc) 1.81311289s ago: executing program 7 (id=1108): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x800008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0xdf83ccc0f7438b11, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000080000001b00000008c7badcf8bd787ce07b24e920bfe9c07100000012ae67a2ad845ae1d80715af8cfbdc3c0eda309825b8e2646bd47d3d2867456d50b624e3a2a6d1d6fc287ca0b6919021a9862fe30b7a43f99e654f7dc06f28d34065197c1474d40ff9b71da6ec1d771f9e5370ae3d9e60fe2148473f1a2ae94013a209c166e1dad6a43de6131686d8175df0c2a6fb89d90232f056de8e50c436114350cdecd10224c36178087e63b038177703319b7af6d8ab1ebf"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc4b13b6eaa22235f, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="020602000200000002000000000000004c762cf0bf805533d09f4813dc9344afde408e6261ea6afbdda1706f7d4388c88b8ee798e3a2fe8350022572fb67c325d900535106d37b619e6c73d7e48409de54be332eeaf6b259e0601eadd1d37ee23137f4dc52fc1356b9f39566fac395df5c91516b4f981b22eeb2b03db521f489cde8ac871e31f48a4838efe17400"/153], 0x10}}, 0x0) 1.643996832s ago: executing program 5 (id=1109): mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, 0x0, 0x8, 0x4000000) io_uring_setup(0x937, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) 1.620521769s ago: executing program 7 (id=1110): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000)=0x1b3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) connect$qrtr(r1, &(0x7f0000000080)={0x2a, 0x1, 0x7ffe}, 0xc) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r6, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) 672.783136ms ago: executing program 5 (id=1111): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)="ac08b217a890199ef711665b48ef28f46531b325c201158d45658e98a93893fc624a7be9f7843bd124cbbb0f127c28f901594635c9e028886dc9d6a66d08389af37f0dcbfce90fb4a89d80927e21058bf04679585ebd6ad86dbc4521044f691c156505a7e2c11a9b82cd94c2f26c8be38dd67a7eb8a02d35c7f3f8ee7e7af8fa84470537d512deaa9e2b7e89903693026bc93c3dc1bad6472f7674c73ffdb349b68681aec2c229163b23452dc5d1789ab484941e213d7661f8f5fd51d95be9d46653ff9c51712b1a51da", 0xca}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)="d1bf6ebfa1ba1eb5d18daf5060eecbed474dc036ea0e62cb19f8c38733ae17aaf27341dc587af5bfe4970de5bb97debdda7c5a926ec7fee2cca46a6571bdac8df98a11a097a52f43f4c416b820b307d854b4655823680c6e758194c419f5d9430f2b088d72ff809f533990c1c142f5a7ada814551de8026d46350e8e77084daddd17457aa77db514cc776e8ad04f30e688bf24944cfb222b50963dfa17ed4922dd00d45e4d28684d842659328cdae3516b0e86967be7a849cd80430e232fadb15f9c183a9687b725799bc870dfa32ac654e6e53d3467cffbd2375c8e2a0abaa32e6f403aef407adba61d3171dc987ef9394685f44cce", 0xf6}, {&(0x7f0000000100)="0495d01487", 0x5}, {&(0x7f00000007c0)="4642494d9912c6a9edc938f76c098837e61abe37627ba435f437d9f37aa3dbeb5737297703cd30d89f835109271644d28b7234d5bed74ac5c463a0c6d4f964e050e81776d57ed45dfa493f0e7412af5606915d170ce0b2702d485d1f9dcfbeec86c2458c8f2a706839cd654512adb9959209771350a7919e07195b3cec1248344a83fe5ecf00aafd5fd4059fde64969c060cabac5ba27716e205b4f05fe7d91f1cbc86dec7e41aaf8b68", 0xaa}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f00000002c0)="703d69cc21b4152049f7764d488c06a395d1522cbed584606bba27d511021f02695b557a22d8f300ca0bd9c652b2d7098274", 0x32}], 0x5, &(0x7f0000001c00)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@jumbo]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0xff, 0xa, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x3f, 0x7, [0x2, 0x2, 0xbc8, 0x3, 0x7, 0x6, 0x0, 0xffffffff, 0x0]}}]}}}, @hopopts_2292={{0x1f8, 0x29, 0x36, {0x29, 0x3b, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x40, {0x0, 0xe, 0xab, 0x7ff, [0x9, 0x4, 0x100000000, 0xe48, 0x9, 0x3, 0x100]}}, @jumbo={0xc2, 0x4, 0xe}, @generic={0xb3, 0x74, "4490cc821c4c263a9c63a1524a1a1b12559a6fb2f8483b9ee04b9f0c88ad1884cd55bada8de81963f158517e14d9e04a8c86a45c51b3cf55ee8b7a8534126355083185f8bad0efedb4d1c96d74cc4bb0fd231295719107f569f1492cebbbd127cadc5895e1dad7a0e8f74cbae97f5315f6e77b5e"}, @generic={0xff, 0x54, "77856e1f9fa4b4f54ca4f2d0641d204c47a325992e0df823fcac957dc2d4ba6c550789f14bdaa43b11c62f377a87a69895c07b11b0e1f086019b27fc978de859246234e78f2c6b03b7195393fad5143bcc2e9099"}, @generic={0x2, 0xbf, "4c781200faa668b1dd80617fbfd1c8bcf2c62b4d4bffeff1bb9c4a2ed6e1365156e6c58df6622470235c06691c71994f858355a7720eea7f75c0ba066463671e8d03aa1f51fa8191192b57e464cd5f952cc0fb538c24b57913fccd8b8eb06616bb78f39b14dd0669efd6f8c2c832490e94fd0aa6f77d761db5882d45199886c344d49e217df283c0987d83379ea9970d35893daebd1df189bf6d7e4498d35e77d7b19d42d8d2486624e42bd1cbddd4d3c2f8d49d048b11b570f7e0b4212853"}, @ra={0x5, 0x2, 0x5}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}}}], 0x2b8}}], 0x3, 0x404c444) 576.282142ms ago: executing program 5 (id=1112): syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3fd, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 552.340259ms ago: executing program 5 (id=1113): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x200083, 0x4) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x200000, 0x12) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000180)) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r3, &(0x7f0000002240)) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000002ac0)) accept4$x25(r2, &(0x7f0000003e80)={0x9, @remote}, &(0x7f0000003ec0)=0x12, 0x80800) stat(&(0x7f0000004440)='./file0\x00', &(0x7f0000004480)) 483.019557ms ago: executing program 0 (id=1115): syz_usb_connect(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585"], 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') 402.827158ms ago: executing program 5 (id=1117): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b00000700000011000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100a8f9000000000001000100"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100018f9a03d7fd45e2294a343ed66a234ead61e07060b8729cc877000ed312e3"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_gettime(r2, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000025c0)={0x2, 0x0, [{0x35a, 0x0, 0x5}, {0x1188, 0x0, 0xa7f}]}) socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r4, &(0x7f0000000ec0)=[{&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f0000000bc0)=""/217, 0xd9}, {&(0x7f0000000cc0)=""/212, 0xd4}], 0x3, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000a3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800400018004000280140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x28c, 0x0, 0x6f}]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r8, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x10000}) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x8, 0x1}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003840)={&(0x7f0000002600)="8191e5fe71cc23690b388ae9d71c1e5665353293b1d344a235ee8b4e680dcf5f979d259ea9dc04622d5ba03344d0bc6d6e9b732c0bcd763fe5965b3d3615850cf39749cb5532e7334048e2d4b9195e2988aa1253f3c1ecb5d4c6ed28e0338e5cd1c4a4b5458731048567bce2d2728edbdb4f410c964bb8a018fcd6bd4eb20bf446465707d115dc3c5c8c6afd329f4cd4201ec05e0cf81955be893161e3d1eab146777d0610a82c36b096d1e55f525bfab8940392299ed15c33a29b9de2f89800655f82a8ee5d88892e572a0184842c673b6c7396d723b429dc4bb04deb4f3084577080749b6f6f2df0ca9444a87223cbf114301732ae1eb677f56fd354cfedd83cb9827c45b5107fa22a01b956cf4bfc262a5b1c1028fdee290ad46b839580d04a550c28220a6b6d6df84c6756cccebe11a61cc7bfee5a2e1885041a13f9de70370de9dbdf9633b5ad27c313ef133d45e41ada628da1b9a66b930d48a90a94ca37e143f3f2b119bafcb8ab0c0dd81c871873dec706e85c7d2bfce42cb8aed289920ccfae0f3692c21170070e27cc57ed22c4dc0d099b61af2afebdd56cd5b0e9a7e8fb2d6e27d220d6c6f8e23d6deb185d748a762b2cd378854188ab72bacd4ac5834b7c35d241b7d3d9ad9a666a51d576ebf7d6e178cb95c5c995008c7fcdc0f459bc84c7f0c132062f41ca6580d3280d70ca226a9a1545a2c51c90ca6f5a482a651a8b5ff38df542c42228a081e4a1dacb0bcd1ea812785ec6436e52ff1119d0b4df999bc6293bdf5a3c8ce51882b7f6e027c8c9f1eb850b00dabca756e74d500a74904da5371ac94f4b9b00f059777adca3699edd39b1228767de1dc478bfd6ca194c2eb00bc5dff57de464c860f9ff6a75f5c736534fa88706131add38b4253e1287a30b4a89d8cc3029fd741b41250638db7b857577586dae3d24acd94b846c8f3140f0cea2f70dd377eecbff3893ba3cefee5adca7e7c4efd916ccc9bddc012ad0fd5c3058e041245b1e0095a999078fe2c8ee725ab3aa96fc4d725e971ccdf2c9ebbdb4282230c7c79fd954eddfb5b8c87de0467fbb3890259c50311a9f8a77dbcb96d1c5dc74ab7be3266a13dc2ef8442a304fc097de62052139814a015c73f92aa63241d089c8c7f37f674c85434bb7bd4ff005878fa727dc169dda287755c238381edb4f9f45822eca21d9628121a73e6c5baf0f38239f6aeec89631fd59e91eae5cdbdc2440bdad69c19fe931e729742b9f35cfb461017ae598aa4f0c9397ff33a3c147f5ef5ddfe99b4a5b4105d276fe39630fdce74323dbe5534e0ee11871ae3b229f1c819d5061f1be655ece1dd3f9973a3604557d8183953619d6ae2ea00715d85f92d0fcb13253e230bac930b859d95c55c56edc09f08a28b569b59f185ab084cbbab8bdc8a45f815bf8dbfb654d6ddf26df05349d4fc2fcd6dbe226ef50011c46b41acd9288688e8e2901a2079f0f5607651f1d36b170309628aa2e166ce8239a4479c86f720ff835f8325572f63bf80b66895447c13f5ca641c812a87e82f734c85a0da8b03eaa4bf299bf5d4d7dc1a16b2f10f289124c3e7c0d819bcc619e733161c4214f8fa2613cca77913027bba11f9393bdbf829153c9cb82f09e677f8f0b41461afc9c8f8a76d55c89ebb8aec222b196b3c737ec54cfd25377ad1803b35a78e8347d53602ff17880f6ab605eaa06fa9e62c921c8887eaafccedebe7730b4e9ba45e17c94a08fcb7565f456be5f66a5ebdaeae6792043426c3b03e3b22885ee6b512532af2eee4431258ed209f179f8dc6aa2f0e4edeb2a1bec33f064edf956f4ff9c8856b613cad081cbf7e8e0358d30995c454590b8f9ffff37f8ef982bc03e1ecb5a0a38260a721c88c69bcd3040c63ace0a2bc628c21e13261e5d28d22e292e9caf1f115f0a46f2eefd3d2fc4edf75dd9cade35c2cd65562e135a354de712375d9dee7a36c037b1ea8cf87dd63782fda29990fed536f51dc471f8456ae78612250b08d59e8088d2e1a3ee0e37331e5cb8d7c406df390d94a8c7074e07a5e060d5a0996e767711bfd35c283bd6fae3d6fd13855d88da962f53863d82ebc4a80723690afa6fa81f286d138e2b91b6649fde8bcca13326cba809b59db34fc385d5763541ba2615b86b7567f28f0fc91247367980be1007b6e060b171267317493e5c605642bb08fd15846d26694277d87794d2a22d64416bd797a4577bb1323f63ed3e76ff59e9b259d9944db40708ca2ea9f41074eec623cdcd0c915686ee096b9a4f6524a123276c8006443d2d06cb79f19885faf386fa96f40b44f24a92807fc66858073765d50466851abf556a1dc3a88e34172464d6a49a0e273df69ea6f50c9bcf89312ba8eb59bc7d5fcebe2f475281b24a9eb0280754d8d8b76944dbce9b6322b7a09f965a126968727d18986a7321df167cf712dd2071d05a9c9a1b32669f75c228006cc7560f285d157e826789b5bcd3c5f298be8feca2996dd7d0603b6e16427690afb760b877bf65e5774d0c638a118d7a8c6583781a4c08f7fe8f9a97a8723690fd6241be5b78201279135f24e8d4edb8d6dcd4fc9ddb53fdbcb9f4297331f9daa65f2e5504bd209d0c2a49665fb941c625b63c8bbcd3a37259ef615823feb91febb19fd7fe0b4f6358ab5b7e3c504ebd105b5ce5f33e9421066801474f99c5c407c58eddec79807b2cdcc40bf9110136640dfc551e467f9389e91eb2c65a2297815e6a35dc587dbcd974003861f74c503ecf09b7e44f8df8edcbf671921154e4a3160492089da560a2b5987998e58406f5c46e6c9fb659904ff507619b16d7b4a9fd6a19eea6911f98beccf69e4bf81d1d31394f5492459b91a773928a5a544ec579627efbd9cc8b3488380075f57b8324577e68067f6445464ceda6d100889e3a60c2abb4f146ebcefba320f4314dccbf51e87e41463cc9199d7c6a1e587d0de044ef63272f91b79c9b45c0caa758c582b015cb095381a672835f8b2186cef9319a1e2e1bcc9db5ba9068e11633066fff4c6211fd712299a1b40cb1c1f8594cd395c9834f36b56c999a3ba474b4da309c9f69e5589dacbfde191b3a0b52fab48f3ea14a0a254e4ac232dd2e27b42145654f6bfc8c6246872874c4655c021b73bdbed54ef412565971de647c6c86974e7b98224984523025df681ef181d04b590b5c4a882bf4217754f8833b79c07aad58430b9156e5453715a5599b80d076a10876edb6af235174e3e42825dc280b7d5519523a35651ea859d0eb5ab7169511de37c1e7da8498fcafb96ecdbc4df79a7b5bd29205508c621e349a18e21d31ba93166011db57c5be30a352393ee34b15cc6f3192fc95066118d8095b024137077ce3688d8b6e39f8f37ee6ea9cae005b5fb413387b23c49b44542711544dc403d1400bbd891e839bac01d9f586afb03028a891675ea33372258dc4aed66d8e8190caf56da2793bb9ea28807af44d19206bcbc95d1eae98a839238b002de0d40df604266907dbc69f3384f201b6abc02bce1aa4c98d88345cc27325b315324a9f1409750ec304cd5c02a47417028206b06608b168cfab88aa6073ab49969b57fc0cc379e8e9d4a21fac15ddba92cc21b571122dd2053d1b3f3fda56ba37300daf935aab5ad8dbc5c05df14984403c1c8bd64ca3609d3415e8f2b71b09e39302a098e574c13997702420ea2a3964da3a4febcd66b4a420f35665a436dc939232108f2eed2d6cc9203bea51d97e517dc55c5ffb4b6e0df0b47f45e124b8ea254c3abb2260c82ac20e9297e7741c43a1198455babf4d03c6e79d38296bf74e03bc9074170bb996ef5ad00d6b4d8f552e331031a695ffc1231fad3c4ab4a201c2474abb89fae52abc635238a205a2343350d359591624db2a7568533f35b3f90ff794c1979df3ff43f5cdf7fd189a67f062e63f7eeeceab6fc4ac761dde806afd3795ee0852bc8e1df54add3ea1d2feb7e0bc4b78bf054b305cca93717b3abdad40de74476122e45c968d1da356c240ce7f8847b6a330ad0800a5297be2ca548b9627e720d5cf54beab69e076f294c95e415ae3a476cba67fcf85ca7a86ab0adb7c43c6d88315d7f695d63b8dca12059f0f8729e16923928a72790bd6ab9094e78fa39321e226f2a5ed6339b3aee106e1c0c8968eb56618b6242dc631005739745bad9bb5cc9ba4c88418418a62a9db99198800a6aa084e9c5173a816c74fd18d36aff49933216dfa1c132b22345151021ea7ffcec17608ee58a8a760b459eff937221465179f435fc521692c34bc62aa3f1f3c52fffc9633b61b5abcabee07f671f3b034ec9047e728aed5f698d3cd831da261b866716a26c52f6e683ecfb2d2c4d7c172e1c7e111cf8f4e867231e57ed90ef91810efab18b8580142576cf58b6e9492bcc466357b6403499e92e54d5b3bfd2f9989a57adc690cdc8bbf8930215a4e1d5d8c60a0489f7b9ba73519772b90ed56f4ab8952f235d4b091480143134ea3e1d53c41fe584acf6b555beccdb17266f03781805a078ddf1b54bd9175088258ad0a4feefd89db4517f16b653274c4467a026971bc971feabc7767f63c0da9a8b7eed316d26ed83cc4829519cd96e996aa3f084111217a62f450da1e769e3ddac96097ec381781ef901c7cf7fb087d8cdcd4b21a662afdfe4bd52482c01f3ab437480c95ecf103c386a74b011d3a07a39a4633adb4679465f989999a9614ced82b5c9d902dce78fed2730a730202a61e31d797bcf1567922ce84396c40dd129ba6960c1032a0e6b05519ddbf5c5872ad12808a70d5f927da21281efde285f12905825517c27027474a7e5dbe4111dea6c6dd62d790fc1332ed16e2f3c6b70a0434b71690e5e9805378075489d0c29c95598406e94afffd744b4e20af7763d95986c606d63f06716e550ee986f0b76266fc24d6f56ecc0fa5bf9e9c7540aeb78a1ffe174167516d5a78868a6d954b94d38a201265a044e8e41270132a005d3a7db78d65fae6fe85b316a332e0003766d3687ec6afa25d4447219173b66c56b61941a96f57e3ea433e89ad7fff1bdaa83b5ae1505a323d65acda4df71c8f53eafb3cce67a1a7d17ac0872ddaea9cb4bbcda7edd2a57f8576205e86cdfa6c3a24bb844877da1cb778e34f02419c1680fc4feda593a343e9bb406c0108e4b5ce4b22e1fe11d257fea8fcd1b9fbeb80002752e16bf3bf3d889f95b0894e109005e9a019a8a444e85f8b61b85f48c871a0c6031d45a6c1a89d428196d07349153e562e521dea3b64af024712de336d0bb26009f20f6b81b3a9124ef915971aa84a0680c38984763d0d48aa4df5b714a1d19c0d7ecb876a349d261eecc188cd80e4ef75a9c66210bdeb1454396e5ce0db72c32ab4380ec00274dea108d335a7e9838f14deb76dc4397da35c388cf6a52a309d311bab1a2cee03d5ffb6f1a4bb0dc5835f292df722c90a7a292e7066c5b379e9953a440f78c222336f11624c5188d98f852d3ed90bbd0074073cda7dc803eac6018f3763dd0419b5c3b8738501bb51343497f93b7f9447ad42e8b802251fbc71e66915abc539eb63a1866b5391004ed953af7efc218db6867109bbfc511336241a77b065969b618259e6f2cc88a5843b6d9a2955d9628f4e989b738fcfa187eb69aedd8dc0348c8a236f30db16f3fcdc668b48272ef1dbf05ccd57d3d82b86f1cc5d26601573504035c12fe87eccabd5d1c5945b6c54b4f09f25414a588f1c7a48faafb0ac10bb5f5fa3591ed443b4cc4af1bb0f4ec674e234aff25a255f", &(0x7f0000003880)=""/171, &(0x7f00000036c0)="db90482263fad5023753e2babd2f33ec827d5c5d4e86405e3a07a2990d7f3b939867b2ee8d9a419a6722edf6a023a03ff57748d5491343434c88efacf703f4ee7c6901479598af91ea1eb90308abff8e46c848583f713873a1dc638c8f15e7546dbdfaf38790dfd592780ab7aeb4d0b65397b4abebce6055f046bc1c804081247ba704d6e5f8d6b5688b37f2a962ef8a814d1345d15c278ee209a2d329132dcc99c31ecfba99a358449deda9cd", &(0x7f0000003780)="e5bfdd895bdd6b1c5c171a4fbdd17f0764b69171a0e51b6764de14260a75026a4874feb2f99509f7591e93aff3166c56040a9635866f988a5f96e64acc66e5eb145b1302713ed7c72986a4bebf5a5d3cc2f7d9c3dc49470c027065cbad15bd2beae9d9f26f58b1e9a409f0f03888b79e201fa47b4a0f0e0ddf1ff61843d4e14c50837b0728fbf72276dae517abd93161426a55e9de1c48eb2cd017038baf70b827f90c5d80228f55bc1abceb1fb4c52b", 0xfe, r3}, 0xfffffcd0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) getresuid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$rose(r8, 0x104, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 297.58782ms ago: executing program 3 (id=1118): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a", 0x17}], 0x2}, 0x0) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x3, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0xfffffffffffffe24) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) 292.989661ms ago: executing program 3 (id=1119): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 268.345417ms ago: executing program 3 (id=1120): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 199.919089ms ago: executing program 6 (id=1121): mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, 0x0, 0x8, 0x4000000) io_uring_setup(0x937, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) 199.580448ms ago: executing program 3 (id=1122): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)="ac08b217a890199ef711665b48ef28f46531b325c201158d45658e98a93893fc624a7be9f7843bd124cbbb0f127c28f901594635c9e028886dc9d6a66d08389af37f0dcbfce90fb4a89d80927e21058bf04679585ebd6ad86dbc4521044f691c156505a7e2c11a9b82cd94c2f26c8be38dd67a7eb8a02d35c7f3f8ee7e7af8fa84470537d512deaa9e2b7e89903693026bc93c3dc1bad6472f7674c73ffdb349b68681aec2c229163b23452dc5d1789ab484941e213d7661f8f5fd51d95be9d46653ff9c51712b1a51da", 0xca}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)="d1bf6ebfa1ba1eb5d18daf5060eecbed474dc036ea0e62cb19f8c38733ae17aaf27341dc587af5bfe4970de5bb97debdda7c5a926ec7fee2cca46a6571bdac8df98a11a097a52f43f4c416b820b307d854b4655823680c6e758194c419f5d9430f2b088d72ff809f533990c1c142f5a7ada814551de8026d46350e8e77084daddd17457aa77db514cc776e8ad04f30e688bf24944cfb222b50963dfa17ed4922dd00d45e4d28684d842659328cdae3516b0e86967be7a849cd80430e232fadb15f9c183a9687b725799bc870dfa32ac654e6e53d3467cffbd2375c8e2a0abaa32e6f403aef407adba61d3171dc987ef9394685f44cce", 0xf6}, {&(0x7f0000000100)="0495d01487", 0x5}, {&(0x7f00000007c0)="4642494d9912c6a9edc938f76c098837e61abe37627ba435f437d9f37aa3dbeb5737297703cd30d89f835109271644d28b7234d5bed74ac5c463a0c6d4f964e050e81776d57ed45dfa493f0e7412af5606915d170ce0b2702d485d1f9dcfbeec86c2458c8f2a706839cd654512adb9959209771350a7919e07195b3cec1248344a83fe5ecf00aafd5fd4059fde64969c060cabac5ba27716e205b4f05fe7d91f1cbc86dec7e41aaf8b68", 0xaa}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f00000002c0)="703d69cc21b4152049f7764d488c06a395d1522cbed584606bba27d511021f02695b557a22d8f300ca0bd9c652b2d7098274", 0x32}], 0x5, &(0x7f0000001c00)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@jumbo]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0xff, 0xa, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x3f, 0x7, [0x2, 0x2, 0xbc8, 0x3, 0x7, 0x6, 0x0, 0xffffffff, 0x0]}}]}}}, @hopopts_2292={{0x1f8, 0x29, 0x36, {0x29, 0x3b, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x40, {0x0, 0xe, 0xab, 0x7ff, [0x9, 0x4, 0x100000000, 0xe48, 0x9, 0x3, 0x100]}}, @jumbo={0xc2, 0x4, 0xe}, @generic={0xb3, 0x74, "4490cc821c4c263a9c63a1524a1a1b12559a6fb2f8483b9ee04b9f0c88ad1884cd55bada8de81963f158517e14d9e04a8c86a45c51b3cf55ee8b7a8534126355083185f8bad0efedb4d1c96d74cc4bb0fd231295719107f569f1492cebbbd127cadc5895e1dad7a0e8f74cbae97f5315f6e77b5e"}, @generic={0xff, 0x54, "77856e1f9fa4b4f54ca4f2d0641d204c47a325992e0df823fcac957dc2d4ba6c550789f14bdaa43b11c62f377a87a69895c07b11b0e1f086019b27fc978de859246234e78f2c6b03b7195393fad5143bcc2e9099"}, @generic={0x2, 0xbf, "4c781200faa668b1dd80617fbfd1c8bcf2c62b4d4bffeff1bb9c4a2ed6e1365156e6c58df6622470235c06691c71994f858355a7720eea7f75c0ba066463671e8d03aa1f51fa8191192b57e464cd5f952cc0fb538c24b57913fccd8b8eb06616bb78f39b14dd0669efd6f8c2c832490e94fd0aa6f77d761db5882d45199886c344d49e217df283c0987d83379ea9970d35893daebd1df189bf6d7e4498d35e77d7b19d42d8d2486624e42bd1cbddd4d3c2f8d49d048b11b570f7e0b4212853"}, @ra={0x5, 0x2, 0x5}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}}}], 0x2b8}}], 0x3, 0x404c444) 38.009282ms ago: executing program 3 (id=1123): mkdir(0x0, 0xfffffffffffffffe) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 0s ago: executing program 3 (id=1124): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x3fd, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) kernel console output (not intermixed with test programs): 11] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 492.209347][ T5111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 492.226485][ T5111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 492.229872][ T5111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 492.253335][ T5111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 492.341191][ T5111] Bluetooth: hci0: command tx timeout [ 494.413407][ T5808] Bluetooth: hci0: command tx timeout [ 494.418079][ T5794] Bluetooth: hci6: command tx timeout [ 496.897136][ T5794] Bluetooth: hci6: command tx timeout [ 496.897171][ T5794] Bluetooth: hci0: command tx timeout [ 497.745736][ T8104] hsr_slave_0: entered promiscuous mode [ 497.749417][ T8104] hsr_slave_1: entered promiscuous mode [ 497.768764][ T8104] debugfs: 'hsr0' already exists in 'hsr' [ 497.768790][ T8104] Cannot create hsr debugfs directory [ 498.512698][ T8390] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 499.270715][ T5808] Bluetooth: hci0: command tx timeout [ 499.270751][ T5808] Bluetooth: hci6: command tx timeout [ 501.160452][ T8408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.498'. [ 501.763139][ T5794] Bluetooth: hci6: command tx timeout [ 501.806315][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.806380][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.793952][ T8313] chnl_net:caif_netlink_parms(): no params data found [ 505.828072][ T1172] bridge_slave_1: left allmulticast mode [ 505.828099][ T1172] bridge_slave_1: left promiscuous mode [ 505.829945][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.939567][ T1172] bridge_slave_0: left allmulticast mode [ 506.939594][ T1172] bridge_slave_0: left promiscuous mode [ 506.939830][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.002864][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 508.110430][ T1172] bridge_slave_1: left allmulticast mode [ 508.110458][ T1172] bridge_slave_1: left promiscuous mode [ 508.130875][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.192570][ T1172] bridge_slave_0: left allmulticast mode [ 508.192599][ T1172] bridge_slave_0: left promiscuous mode [ 508.192829][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.264967][ T1172] bridge_slave_1: left allmulticast mode [ 508.264996][ T1172] bridge_slave_1: left promiscuous mode [ 508.265235][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.332441][ T1172] bridge_slave_0: left allmulticast mode [ 508.332460][ T1172] bridge_slave_0: left promiscuous mode [ 508.332607][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.421526][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.521476][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.584536][ T1172] bond0 (unregistering): Released all slaves [ 509.730274][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 510.141364][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.231372][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.312288][ T1172] bond0 (unregistering): Released all slaves [ 510.512712][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.615210][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.672237][ T1172] bond0 (unregistering): Released all slaves [ 514.751385][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.751564][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.751810][ T8313] bridge_slave_0: entered allmulticast mode [ 514.791721][ T8313] bridge_slave_0: entered promiscuous mode [ 515.721415][ T8503] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 517.850751][ T1172] hsr_slave_0: left promiscuous mode [ 517.912974][ T1172] hsr_slave_1: left promiscuous mode [ 517.913894][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.068324][ T5794] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 519.652510][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.789317][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'. [ 519.961170][ T1172] hsr_slave_0: left promiscuous mode [ 520.131553][ T1172] hsr_slave_1: left promiscuous mode [ 520.134443][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.205277][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.625198][ T1172] hsr_slave_0: left promiscuous mode [ 520.678883][ T1172] hsr_slave_1: left promiscuous mode [ 520.689202][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.727279][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.222940][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.239492][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.248477][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 523.249942][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 523.258180][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 523.671300][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 523.691460][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 525.178106][ T8538] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 525.530930][ T5808] Bluetooth: hci3: command tx timeout [ 526.006826][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 526.071315][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 526.481235][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 526.511602][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 526.672681][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.672839][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.673074][ T8313] bridge_slave_1: entered allmulticast mode [ 526.674673][ T8313] bridge_slave_1: entered promiscuous mode [ 526.763843][ T8328] chnl_net:caif_netlink_parms(): no params data found [ 526.871637][ T8313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.929999][ T8313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.191179][ T8313] team0: Port device team_slave_0 added [ 527.269846][ T8313] team0: Port device team_slave_1 added [ 528.059405][ T5808] Bluetooth: hci3: command tx timeout [ 529.999853][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.999960][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.000158][ T8328] bridge_slave_0: entered allmulticast mode [ 530.002773][ T8328] bridge_slave_0: entered promiscuous mode [ 530.013073][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.013086][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.013108][ T8313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.052285][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.052300][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.052323][ T8313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.054455][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.054637][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.054817][ T8328] bridge_slave_1: entered allmulticast mode [ 530.060452][ T8328] bridge_slave_1: entered promiscuous mode [ 530.090693][ T5808] Bluetooth: hci3: command tx timeout [ 532.227458][ T5808] Bluetooth: hci3: command tx timeout [ 532.762082][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.943955][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.993446][ T8313] hsr_slave_0: entered promiscuous mode [ 532.994805][ T8313] hsr_slave_1: entered promiscuous mode [ 532.996553][ T8313] debugfs: 'hsr0' already exists in 'hsr' [ 532.996576][ T8313] Cannot create hsr debugfs directory [ 533.345637][ T8328] team0: Port device team_slave_0 added [ 533.377178][ T8328] team0: Port device team_slave_1 added [ 534.195894][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.195910][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.195932][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.308832][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.308848][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.308870][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.176070][ T8328] hsr_slave_0: entered promiscuous mode [ 535.176895][ T8328] hsr_slave_1: entered promiscuous mode [ 535.178319][ T8328] debugfs: 'hsr0' already exists in 'hsr' [ 535.178333][ T8328] Cannot create hsr debugfs directory [ 535.301961][ T8526] chnl_net:caif_netlink_parms(): no params data found [ 537.887094][ T8644] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 538.865258][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.865435][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.865616][ T8526] bridge_slave_0: entered allmulticast mode [ 538.904298][ T8526] bridge_slave_0: entered promiscuous mode [ 538.979418][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.979530][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.979768][ T8526] bridge_slave_1: entered allmulticast mode [ 538.982494][ T8526] bridge_slave_1: entered promiscuous mode [ 539.081751][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 539.332318][ T8313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 540.373860][ T8313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 540.438103][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.533422][ T8313] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 540.587683][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.638162][ T8313] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 541.257190][ T8526] team0: Port device team_slave_0 added [ 541.272527][ T8526] team0: Port device team_slave_1 added [ 542.597648][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.597663][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.597676][ T8526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.607316][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.607331][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.607354][ T8526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.075712][ T8526] hsr_slave_0: entered promiscuous mode [ 543.077097][ T8526] hsr_slave_1: entered promiscuous mode [ 543.079317][ T8526] debugfs: 'hsr0' already exists in 'hsr' [ 543.079332][ T8526] Cannot create hsr debugfs directory [ 546.841429][ T1172] bridge_slave_1: left allmulticast mode [ 546.841455][ T1172] bridge_slave_1: left promiscuous mode [ 546.841674][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.152363][ T1172] bridge_slave_0: left allmulticast mode [ 547.152391][ T1172] bridge_slave_0: left promiscuous mode [ 547.152640][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.247342][ T1172] bridge_slave_1: left allmulticast mode [ 547.247371][ T1172] bridge_slave_1: left promiscuous mode [ 547.247599][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.279620][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 547.362473][ T1172] bridge_slave_0: left allmulticast mode [ 547.362499][ T1172] bridge_slave_0: left promiscuous mode [ 547.362726][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.502460][ T5808] Bluetooth: Frame is too long (len 16, expected len 4) [ 547.965944][ T1172] bridge_slave_1: left allmulticast mode [ 547.965972][ T1172] bridge_slave_1: left promiscuous mode [ 547.966198][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.033600][ T1172] bridge_slave_0: left allmulticast mode [ 548.033628][ T1172] bridge_slave_0: left promiscuous mode [ 548.033855][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.911631][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.991458][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.052412][ T1172] bond0 (unregistering): Released all slaves [ 549.221370][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.301242][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.362222][ T1172] bond0 (unregistering): Released all slaves [ 549.747878][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.631515][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.861929][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.863822][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.866037][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.867278][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.867977][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.943406][ T1172] bond0 (unregistering): Released all slaves [ 551.606925][ T8328] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 552.009987][ T8328] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 552.910996][ T5794] Bluetooth: hci4: command tx timeout [ 553.000833][ T1172] hsr_slave_0: left promiscuous mode [ 553.041211][ T1172] hsr_slave_1: left promiscuous mode [ 553.042144][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.073326][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.153706][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 553.160256][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 553.170937][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 553.192893][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 553.205453][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.305999][ T1172] hsr_slave_0: left promiscuous mode [ 553.344143][ T1172] hsr_slave_1: left promiscuous mode [ 553.345025][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.382798][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.851193][ T1172] hsr_slave_0: left promiscuous mode [ 554.983242][ T5808] Bluetooth: hci4: command tx timeout [ 554.990899][ T1172] hsr_slave_1: left promiscuous mode [ 555.055899][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.291097][ T5808] Bluetooth: hci0: command tx timeout [ 555.597508][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.836663][ T8774] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 557.726948][ T5808] Bluetooth: hci4: command tx timeout [ 557.727053][ T5794] Bluetooth: hci0: command tx timeout [ 558.043160][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 558.181954][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 559.081357][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 559.929320][ T5111] Bluetooth: hci4: command tx timeout [ 559.929364][ T5794] Bluetooth: hci0: command tx timeout [ 560.202136][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 560.342225][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 560.712092][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 560.732141][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 561.339706][ T8526] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 562.153680][ T5794] Bluetooth: hci0: command tx timeout [ 562.307902][ T8526] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.493897][ T8526] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 563.231326][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.231392][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.351784][ T8526] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 566.394865][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 568.231091][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.231213][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.231437][ T8743] bridge_slave_0: entered allmulticast mode [ 568.233994][ T8743] bridge_slave_0: entered promiscuous mode [ 568.295083][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.295201][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.295398][ T8743] bridge_slave_1: entered allmulticast mode [ 568.297773][ T8743] bridge_slave_1: entered promiscuous mode [ 568.351106][ T8762] chnl_net:caif_netlink_parms(): no params data found [ 571.560440][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.599490][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.752898][ T8743] team0: Port device team_slave_0 added [ 574.021859][ T8743] team0: Port device team_slave_1 added [ 574.212590][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.212701][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.212920][ T8762] bridge_slave_0: entered allmulticast mode [ 574.214354][ T8762] bridge_slave_0: entered promiscuous mode [ 574.219260][ T8526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.361889][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.362009][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.362245][ T8762] bridge_slave_1: entered allmulticast mode [ 574.365067][ T8762] bridge_slave_1: entered promiscuous mode [ 574.450893][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.450909][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.450931][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.518205][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.518216][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.518229][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.521186][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.549683][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.956228][ T8762] team0: Port device team_slave_0 added [ 576.675024][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.678522][ T8762] team0: Port device team_slave_1 added [ 576.714871][ T8743] hsr_slave_0: entered promiscuous mode [ 576.770180][ T8743] hsr_slave_1: entered promiscuous mode [ 577.105515][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.105531][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.105554][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.107826][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.107967][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.892567][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.892583][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.892606][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.715306][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.715533][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.899873][ T8899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.599'. [ 578.912061][ T8762] hsr_slave_0: entered promiscuous mode [ 578.913336][ T8762] hsr_slave_1: entered promiscuous mode [ 578.914213][ T8762] debugfs: 'hsr0' already exists in 'hsr' [ 578.914236][ T8762] Cannot create hsr debugfs directory [ 584.376160][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 584.394439][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 584.395532][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 584.396533][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 584.397183][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.025242][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.605'. [ 585.025300][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.605'. [ 585.149992][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.605'. [ 585.150050][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.605'. [ 585.366646][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.605'. [ 585.366699][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.605'. [ 585.801708][ T70] bridge_slave_1: left allmulticast mode [ 585.801735][ T70] bridge_slave_1: left promiscuous mode [ 585.801970][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.490722][ T5111] Bluetooth: hci3: command tx timeout [ 586.665291][ T70] bridge_slave_0: left allmulticast mode [ 586.665317][ T70] bridge_slave_0: left promiscuous mode [ 586.665558][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.916391][ T70] bridge_slave_1: left allmulticast mode [ 586.916419][ T70] bridge_slave_1: left promiscuous mode [ 586.916637][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.071877][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 587.203937][ T70] bridge_slave_0: left allmulticast mode [ 587.203964][ T70] bridge_slave_0: left promiscuous mode [ 587.204182][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.572090][ T5111] Bluetooth: hci3: command tx timeout [ 589.922151][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.652483][ T5111] Bluetooth: hci3: command tx timeout [ 590.923848][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.943527][ T8975] netlink: 52 bytes leftover after parsing attributes in process `syz.0.613'. [ 590.943565][ T8975] netlink: 52 bytes leftover after parsing attributes in process `syz.0.613'. [ 591.021131][ T70] bond0 (unregistering): Released all slaves [ 592.498785][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.721456][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.730735][ T5111] Bluetooth: hci3: command tx timeout [ 592.763284][ T70] bond0 (unregistering): Released all slaves [ 592.982835][ T8922] chnl_net:caif_netlink_parms(): no params data found [ 595.091039][ T70] hsr_slave_0: left promiscuous mode [ 595.130732][ T70] hsr_slave_1: left promiscuous mode [ 595.131647][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.350422][ T9003] netlink: 52 bytes leftover after parsing attributes in process `syz.0.621'. [ 595.350478][ T9003] netlink: 52 bytes leftover after parsing attributes in process `syz.0.621'. [ 595.381232][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.244621][ T70] hsr_slave_0: left promiscuous mode [ 596.260811][ T70] hsr_slave_1: left promiscuous mode [ 596.261729][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.312119][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.793619][ T70] team0 (unregistering): Port device team_slave_1 removed [ 596.841667][ T70] team0 (unregistering): Port device team_slave_0 removed [ 598.072910][ T70] team0 (unregistering): Port device team_slave_1 removed [ 598.142024][ T70] team0 (unregistering): Port device team_slave_0 removed [ 600.281975][ T8922] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.282088][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.282303][ T8922] bridge_slave_0: entered allmulticast mode [ 600.290823][ T8922] bridge_slave_0: entered promiscuous mode [ 600.318227][ T8922] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.318401][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.318628][ T8922] bridge_slave_1: entered allmulticast mode [ 600.321992][ T8922] bridge_slave_1: entered promiscuous mode [ 600.577403][ T8922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.579956][ T8922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.722066][ T9039] netlink: 52 bytes leftover after parsing attributes in process `syz.0.629'. [ 600.722122][ T9039] netlink: 52 bytes leftover after parsing attributes in process `syz.0.629'. [ 600.796478][ T8922] team0: Port device team_slave_0 added [ 600.824940][ T8922] team0: Port device team_slave_1 added [ 603.321415][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.321431][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.321454][ T8922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.548540][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.548555][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.548579][ T8922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.808794][ T8922] hsr_slave_0: entered promiscuous mode [ 603.829980][ T8922] hsr_slave_1: entered promiscuous mode [ 603.831455][ T8922] debugfs: 'hsr0' already exists in 'hsr' [ 603.831479][ T8922] Cannot create hsr debugfs directory [ 603.873435][ T8743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 603.926826][ T8743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 604.026476][ T8743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 604.208306][ T8743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 605.706274][ T8762] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 605.828726][ T8762] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 605.954604][ T8762] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 606.147169][ T8762] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 609.118064][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.834011][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.092640][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.099417][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.099606][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.119506][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.119732][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.153431][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.179905][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.183144][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.688751][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.688838][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.912410][ T70] bridge_slave_1: left allmulticast mode [ 611.912435][ T70] bridge_slave_1: left promiscuous mode [ 611.912659][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.982188][ T70] bridge_slave_0: left allmulticast mode [ 611.982214][ T70] bridge_slave_0: left promiscuous mode [ 611.982467][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.280455][ T5794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 612.289745][ T5794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 612.291192][ T5794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 612.292702][ T5794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 612.293489][ T5794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.330757][ T5794] Bluetooth: hci5: command tx timeout [ 614.801265][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.897178][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.183552][ T70] bond0 (unregistering): Released all slaves [ 616.213266][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 616.662427][ T5111] Bluetooth: hci5: command tx timeout [ 616.684757][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 616.686828][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 616.689574][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 616.690247][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 618.820698][ T5794] Bluetooth: hci5: command tx timeout [ 618.820765][ T5794] Bluetooth: hci4: command tx timeout [ 620.150172][ T9148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 620.560739][ T70] hsr_slave_0: left promiscuous mode [ 621.245599][ T5794] Bluetooth: hci5: command tx timeout [ 621.246784][ T5111] Bluetooth: hci4: command tx timeout [ 621.623720][ T70] hsr_slave_1: left promiscuous mode [ 621.624623][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.841482][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.292232][ T5111] Bluetooth: hci4: command tx timeout [ 624.674212][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.674278][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.164066][ T9197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.661'. [ 625.396925][ T5111] Bluetooth: hci4: command tx timeout [ 626.011784][ T70] team0 (unregistering): Port device team_slave_1 removed [ 626.052434][ T70] team0 (unregistering): Port device team_slave_0 removed [ 629.919180][ T8922] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 631.135446][ T8922] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 632.146931][ T8922] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 632.199400][ T8922] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 636.495486][ T8922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.507887][ T9126] chnl_net:caif_netlink_parms(): no params data found [ 636.633235][ T9145] chnl_net:caif_netlink_parms(): no params data found [ 640.675357][ T8922] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.780825][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.780955][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.781172][ T9126] bridge_slave_0: entered allmulticast mode [ 642.783604][ T9126] bridge_slave_0: entered promiscuous mode [ 642.850795][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.850905][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.851128][ T9126] bridge_slave_1: entered allmulticast mode [ 642.858159][ T9126] bridge_slave_1: entered promiscuous mode [ 643.462799][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.463001][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.271577][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.271693][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.271914][ T9145] bridge_slave_0: entered allmulticast mode [ 645.274395][ T9145] bridge_slave_0: entered promiscuous mode [ 645.279606][ T9126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.333416][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.333544][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.333751][ T9145] bridge_slave_1: entered allmulticast mode [ 645.336242][ T9145] bridge_slave_1: entered promiscuous mode [ 645.343218][ T9126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.597918][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 646.606850][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 646.607941][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 646.609085][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 646.610030][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.846534][ T9145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.864011][ T9126] team0: Port device team_slave_0 added [ 647.755119][ T9145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.756739][ T9126] team0: Port device team_slave_1 added [ 648.730882][ T5794] Bluetooth: hci0: command tx timeout [ 650.622366][ T9145] team0: Port device team_slave_0 added [ 650.644044][ T9145] team0: Port device team_slave_1 added [ 651.540309][ T5794] Bluetooth: hci0: command tx timeout [ 651.622432][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.622447][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.622469][ T9126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.628773][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.628787][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.628810][ T9126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.117399][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.117416][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.117438][ T9145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.172374][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.172389][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.172414][ T9145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.377848][ T9126] hsr_slave_0: entered promiscuous mode [ 652.379176][ T9126] hsr_slave_1: entered promiscuous mode [ 652.380072][ T9126] debugfs: 'hsr0' already exists in 'hsr' [ 652.380095][ T9126] Cannot create hsr debugfs directory [ 652.527394][ T9145] hsr_slave_0: entered promiscuous mode [ 652.528404][ T9145] hsr_slave_1: entered promiscuous mode [ 652.528903][ T9145] debugfs: 'hsr0' already exists in 'hsr' [ 652.528923][ T9145] Cannot create hsr debugfs directory [ 653.610810][ T5794] Bluetooth: hci0: command tx timeout [ 655.996767][ T5794] Bluetooth: hci0: command tx timeout [ 660.612325][ T9433] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 660.638208][ T9346] chnl_net:caif_netlink_parms(): no params data found [ 661.005013][ T5794] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 663.723122][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.723310][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.723553][ T9346] bridge_slave_0: entered allmulticast mode [ 663.725971][ T9346] bridge_slave_0: entered promiscuous mode [ 663.828856][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.829009][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.829191][ T9346] bridge_slave_1: entered allmulticast mode [ 663.832335][ T9346] bridge_slave_1: entered promiscuous mode [ 663.895028][ T70] bridge_slave_1: left allmulticast mode [ 663.895047][ T70] bridge_slave_1: left promiscuous mode [ 663.895194][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.002736][ T70] bridge_slave_0: left allmulticast mode [ 664.002765][ T70] bridge_slave_0: left promiscuous mode [ 664.002988][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.077114][ T70] bridge_slave_1: left allmulticast mode [ 664.077134][ T70] bridge_slave_1: left promiscuous mode [ 664.077278][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.335491][ T70] bridge_slave_0: left allmulticast mode [ 664.335520][ T70] bridge_slave_0: left promiscuous mode [ 664.335744][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.141640][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.231553][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.402758][ T70] bond0 (unregistering): Released all slaves [ 670.890406][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.031499][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.133408][ T70] bond0 (unregistering): Released all slaves [ 674.202261][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.264180][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.627787][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.644947][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.646193][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.647553][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.649324][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 676.733592][ T5111] Bluetooth: hci3: command tx timeout [ 677.810981][ T9535] 9p: Bad value for 'wfdno' [ 677.850370][ T9346] team0: Port device team_slave_0 added [ 677.922385][ T9346] team0: Port device team_slave_1 added [ 678.128734][ T5794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 678.151268][ T5794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 678.153935][ T5794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 678.155160][ T5794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 678.155846][ T5794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 678.907492][ T5794] Bluetooth: hci3: command tx timeout [ 679.140706][ T70] hsr_slave_0: left promiscuous mode [ 679.223236][ T9550] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 680.126081][ T70] hsr_slave_1: left promiscuous mode [ 680.130842][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.163749][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.250670][ T5794] Bluetooth: hci6: command tx timeout [ 680.820758][ T70] hsr_slave_0: left promiscuous mode [ 680.871678][ T70] hsr_slave_1: left promiscuous mode [ 680.872657][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.971937][ T5794] Bluetooth: hci3: command tx timeout [ 680.995247][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.330775][ T5794] Bluetooth: hci6: command tx timeout [ 682.436805][ T70] team0 (unregistering): Port device team_slave_1 removed [ 682.526182][ T70] team0 (unregistering): Port device team_slave_0 removed [ 683.050772][ T5794] Bluetooth: hci3: command tx timeout [ 683.451389][ T70] team0 (unregistering): Port device team_slave_1 removed [ 683.553212][ T70] team0 (unregistering): Port device team_slave_0 removed [ 684.033148][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.033165][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.033189][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.041440][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.041455][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.041481][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.424841][ T9346] hsr_slave_0: entered promiscuous mode [ 684.426071][ T9346] hsr_slave_1: entered promiscuous mode [ 684.427186][ T5794] Bluetooth: hci6: command tx timeout [ 686.094879][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.094921][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.503043][ T5794] Bluetooth: hci6: command tx timeout [ 692.247349][ T9525] chnl_net:caif_netlink_parms(): no params data found [ 692.539318][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.539510][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.539693][ T9525] bridge_slave_0: entered allmulticast mode [ 692.542946][ T9525] bridge_slave_0: entered promiscuous mode [ 692.547194][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.547381][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.547553][ T9525] bridge_slave_1: entered allmulticast mode [ 692.550003][ T9525] bridge_slave_1: entered promiscuous mode [ 692.642340][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.646155][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.704976][ T9525] team0: Port device team_slave_0 added [ 692.708203][ T9525] team0: Port device team_slave_1 added [ 692.883290][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.883308][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.883333][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.984457][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.984473][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.984497][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.364156][ T9540] chnl_net:caif_netlink_parms(): no params data found [ 698.952473][ T9525] hsr_slave_0: entered promiscuous mode [ 698.956851][ T9525] hsr_slave_1: entered promiscuous mode [ 698.957667][ T9525] debugfs: 'hsr0' already exists in 'hsr' [ 698.957683][ T9525] Cannot create hsr debugfs directory [ 699.342937][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.360744][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.360922][ T9540] bridge_slave_0: entered allmulticast mode [ 699.362321][ T9540] bridge_slave_0: entered promiscuous mode [ 699.511997][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.512138][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.512361][ T9540] bridge_slave_1: entered allmulticast mode [ 699.514933][ T9540] bridge_slave_1: entered promiscuous mode [ 699.932143][ T70] bridge_slave_1: left allmulticast mode [ 699.932171][ T70] bridge_slave_1: left promiscuous mode [ 699.932386][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.982435][ T70] bridge_slave_0: left allmulticast mode [ 699.982472][ T70] bridge_slave_0: left promiscuous mode [ 699.982791][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.075142][ T70] bridge_slave_1: left allmulticast mode [ 700.075171][ T70] bridge_slave_1: left promiscuous mode [ 700.075461][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.132119][ T70] bridge_slave_0: left allmulticast mode [ 700.132138][ T70] bridge_slave_0: left promiscuous mode [ 700.132284][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.223192][ T70] bridge_slave_1: left allmulticast mode [ 700.223210][ T70] bridge_slave_1: left promiscuous mode [ 700.223345][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.830207][ T70] bridge_slave_0: left allmulticast mode [ 701.830226][ T70] bridge_slave_0: left promiscuous mode [ 701.830383][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.028991][ T9672] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 706.786114][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.881300][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.945447][ T70] bond0 (unregistering): Released all slaves [ 707.082075][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.163916][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.222181][ T70] bond0 (unregistering): Released all slaves [ 707.572098][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 707.634692][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 707.641045][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 707.642593][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 708.191904][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 709.576717][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.841477][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.632089][ T5794] Bluetooth: hci4: command tx timeout [ 710.802873][ T70] bond0 (unregistering): Released all slaves [ 710.847788][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.041380][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.037391][ T9540] team0: Port device team_slave_0 added [ 712.165137][ T9540] team0: Port device team_slave_1 added [ 712.652446][ T5794] Bluetooth: hci4: command tx timeout [ 712.743233][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.743494][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.743573][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.031593][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.031610][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.031636][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.781100][ T5794] Bluetooth: hci4: command tx timeout [ 714.921404][ T9540] hsr_slave_0: entered promiscuous mode [ 714.922184][ T9540] hsr_slave_1: entered promiscuous mode [ 714.922695][ T9540] debugfs: 'hsr0' already exists in 'hsr' [ 714.922710][ T9540] Cannot create hsr debugfs directory [ 716.801380][ T70] hsr_slave_0: left promiscuous mode [ 717.084211][ T5794] Bluetooth: hci4: command tx timeout [ 717.110782][ T70] hsr_slave_1: left promiscuous mode [ 717.111398][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.671560][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.956815][ T70] hsr_slave_0: left promiscuous mode [ 718.250377][ T70] hsr_slave_1: left promiscuous mode [ 718.257879][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.802126][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.016376][ T70] hsr_slave_0: left promiscuous mode [ 721.050828][ T70] hsr_slave_1: left promiscuous mode [ 721.051867][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.103812][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.446453][ T9779] 9pnet_virtio: no channels available for device ./bus [ 723.790325][ T70] team0 (unregistering): Port device team_slave_1 removed [ 724.099164][ T70] team0 (unregistering): Port device team_slave_0 removed [ 728.421409][ T70] team0 (unregistering): Port device team_slave_1 removed [ 728.471385][ T70] team0 (unregistering): Port device team_slave_0 removed [ 735.677268][ T9834] netlink: 32 bytes leftover after parsing attributes in process `syz.3.809'. [ 736.491436][ T70] team0 (unregistering): Port device team_slave_1 removed [ 736.563634][ T70] team0 (unregistering): Port device team_slave_0 removed [ 737.329776][ T9693] chnl_net:caif_netlink_parms(): no params data found [ 737.784940][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 737.809869][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.828448][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.829741][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.846657][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.821186][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 738.824267][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.825284][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.826580][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.827568][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.876800][ T9693] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.876916][ T9693] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.877140][ T9693] bridge_slave_0: entered allmulticast mode [ 738.908184][ T9693] bridge_slave_0: entered promiscuous mode [ 739.064659][ T9693] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.064770][ T9693] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.064984][ T9693] bridge_slave_1: entered allmulticast mode [ 739.067063][ T9693] bridge_slave_1: entered promiscuous mode [ 739.783587][ T9693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.797272][ T9693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.930771][ T5794] Bluetooth: hci0: command tx timeout [ 740.031319][ T9693] team0: Port device team_slave_0 added [ 740.056631][ T9693] team0: Port device team_slave_1 added [ 741.166978][ T5794] Bluetooth: hci3: command tx timeout [ 741.256367][ T9693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.256384][ T9693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.256408][ T9693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.319998][ T9693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.320013][ T9693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.320036][ T9693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.010664][ T5794] Bluetooth: hci0: command tx timeout [ 742.789085][ T9693] hsr_slave_0: entered promiscuous mode [ 742.790461][ T9693] hsr_slave_1: entered promiscuous mode [ 742.816958][ T9693] debugfs: 'hsr0' already exists in 'hsr' [ 742.816983][ T9693] Cannot create hsr debugfs directory [ 742.863014][ T9885] 9pnet_virtio: no channels available for device ./bus [ 742.929127][ T9889] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 743.194559][ T9847] chnl_net:caif_netlink_parms(): no params data found [ 743.210876][ T5794] Bluetooth: hci3: command tx timeout [ 743.547164][ T9857] chnl_net:caif_netlink_parms(): no params data found [ 743.923893][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.924078][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.924285][ T9847] bridge_slave_0: entered allmulticast mode [ 743.933672][ T9847] bridge_slave_0: entered promiscuous mode [ 743.973172][ T9901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.020743][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.020861][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.021289][ T9847] bridge_slave_1: entered allmulticast mode [ 744.030700][ T9847] bridge_slave_1: entered promiscuous mode [ 744.100612][ T5794] Bluetooth: hci0: command tx timeout [ 744.396319][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.619087][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.431167][ T5794] Bluetooth: hci3: command tx timeout [ 745.750455][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.758832][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.758991][ T9857] bridge_slave_0: entered allmulticast mode [ 745.760443][ T9857] bridge_slave_0: entered promiscuous mode [ 746.472079][ T5794] Bluetooth: hci0: command tx timeout [ 746.743126][ T9847] team0: Port device team_slave_0 added [ 746.743340][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.744491][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.744679][ T9857] bridge_slave_1: entered allmulticast mode [ 746.747141][ T9857] bridge_slave_1: entered promiscuous mode [ 746.752805][ T9847] team0: Port device team_slave_1 added [ 746.846272][ T9922] 9pnet_virtio: no channels available for device ./bus [ 746.974727][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.977749][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.977763][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.977787][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.993764][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.994718][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.994730][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.994755][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.084417][ T9857] team0: Port device team_slave_0 added [ 747.125506][ T9857] team0: Port device team_slave_1 added [ 747.154618][ T9847] hsr_slave_0: entered promiscuous mode [ 747.160360][ T9847] hsr_slave_1: entered promiscuous mode [ 747.164743][ T9847] debugfs: 'hsr0' already exists in 'hsr' [ 747.164768][ T9847] Cannot create hsr debugfs directory [ 747.309685][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.309701][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.309727][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.342765][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.342804][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.342852][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.607639][ T5794] Bluetooth: hci3: command tx timeout [ 747.617714][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.617777][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.104101][ T9931] 9pnet_virtio: no channels available for device ./bus [ 749.280478][ T9938] 9pnet_virtio: no channels available for device ./bus [ 750.473146][ T9857] hsr_slave_0: entered promiscuous mode [ 750.473954][ T9857] hsr_slave_1: entered promiscuous mode [ 750.474677][ T9857] debugfs: 'hsr0' already exists in 'hsr' [ 750.474692][ T9857] Cannot create hsr debugfs directory [ 751.592527][ T9954] 9pnet_virtio: no channels available for device ./bus [ 751.746155][ T9693] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 751.809289][ T9693] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 752.017837][ T9693] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 752.058259][ T9693] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 756.292304][ T9983] netlink: 32 bytes leftover after parsing attributes in process `syz.3.840'. [ 757.949716][ T9693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.262824][ T9693] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.267673][ T9998] 9pnet_virtio: no channels available for device ./bus [ 758.283158][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.283305][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.379217][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.379349][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.274253][ T70] bridge_slave_1: left allmulticast mode [ 759.274282][ T70] bridge_slave_1: left promiscuous mode [ 759.274562][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.397816][ T70] bridge_slave_0: left allmulticast mode [ 759.397844][ T70] bridge_slave_0: left promiscuous mode [ 759.398092][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.483167][ T70] bridge_slave_1: left allmulticast mode [ 760.483196][ T70] bridge_slave_1: left promiscuous mode [ 760.483420][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.562060][ T70] bridge_slave_0: left allmulticast mode [ 760.562086][ T70] bridge_slave_0: left promiscuous mode [ 760.562309][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.607609][ T70] bridge_slave_1: left allmulticast mode [ 761.607638][ T70] bridge_slave_1: left promiscuous mode [ 761.607857][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.012179][ T70] bridge_slave_0: left allmulticast mode [ 762.012209][ T70] bridge_slave_0: left promiscuous mode [ 762.012433][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.849378][T10037] netlink: 92 bytes leftover after parsing attributes in process `syz.0.851'. [ 765.721948][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.194277][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.647206][ T70] bond0 (unregistering): Released all slaves [ 767.923214][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.991233][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.062541][ T70] bond0 (unregistering): Released all slaves [ 768.311135][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.391199][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.473073][ T70] bond0 (unregistering): Released all slaves [ 769.105682][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.113536][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.115967][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 769.117964][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 769.140766][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 769.875430][ T70] hsr_slave_0: left promiscuous mode [ 769.910621][ T70] hsr_slave_1: left promiscuous mode [ 769.911480][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.951941][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.200695][ T70] hsr_slave_0: left promiscuous mode [ 770.291352][ T70] hsr_slave_1: left promiscuous mode [ 770.292682][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.352556][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.531022][ T70] hsr_slave_0: left promiscuous mode [ 770.556369][ T70] hsr_slave_1: left promiscuous mode [ 770.556960][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.608706][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.302621][ T5794] Bluetooth: hci5: command tx timeout [ 773.056840][ T70] team0 (unregistering): Port device team_slave_1 removed [ 774.061186][ T5111] Bluetooth: hci5: command tx timeout [ 774.279816][ T70] team0 (unregistering): Port device team_slave_0 removed [ 775.901129][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 775.981414][ T70] team0 (unregistering): Port device team_slave_1 removed [ 776.043301][ T70] team0 (unregistering): Port device team_slave_0 removed [ 776.091166][ T5111] Bluetooth: hci5: command tx timeout [ 776.091276][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 776.113914][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.131659][ T5881] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 776.131685][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.131703][ T5881] usb 1-1: Product: syz [ 776.131715][ T5881] usb 1-1: Manufacturer: syz [ 776.131731][ T5881] usb 1-1: SerialNumber: syz [ 776.208488][ T5881] usb 1-1: config 0 descriptor?? [ 776.248792][ T5881] usb 1-1: no audio or video endpoints found [ 776.432010][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.432912][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.470705][ T995] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 776.481783][ T5881] usb 1-1: USB disconnect, device number 2 [ 776.612330][ T70] team0 (unregistering): Port device team_slave_1 removed [ 776.650636][ T995] usb 4-1: Using ep0 maxpacket: 32 [ 776.653798][ T995] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.655919][ T995] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 776.655942][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.655957][ T995] usb 4-1: Product: syz [ 776.655964][ T995] usb 4-1: Manufacturer: syz [ 776.655970][ T995] usb 4-1: SerialNumber: syz [ 776.708093][ T70] team0 (unregistering): Port device team_slave_0 removed [ 776.723940][ T995] usb 4-1: config 0 descriptor?? [ 776.742162][ T995] usb 4-1: bad CDC descriptors [ 776.746444][ T995] usb 4-1: unsupported MDLM descriptors [ 776.945083][ T995] usb 4-1: USB disconnect, device number 2 [ 777.036438][T10144] mmap: syz.0.874 (10144) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 777.585477][T10154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.876'. [ 778.208290][ T5111] Bluetooth: hci5: command tx timeout [ 778.468171][T10091] chnl_net:caif_netlink_parms(): no params data found [ 778.489711][T10161] syz.3.878 (10161): /proc/10159/oom_adj is deprecated, please use /proc/10159/oom_score_adj instead. [ 779.694399][ T9847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 779.810709][ T9847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 779.811845][T10185] FAULT_INJECTION: forcing a failure. [ 779.811845][T10185] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 779.811885][T10185] CPU: 0 UID: 0 PID: 10185 Comm: syz.0.880 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 779.811905][T10185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.811926][T10185] Call Trace: [ 779.811934][T10185] [ 779.811942][T10185] dump_stack_lvl+0xe8/0x150 [ 779.812057][T10185] should_fail_ex+0x46b/0x600 [ 779.812198][T10185] _copy_from_user+0x2d/0xb0 [ 779.812275][T10185] ___sys_sendmsg+0x1c6/0x360 [ 779.812372][T10185] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.812422][T10185] ? __fget_files+0x2a/0x420 [ 779.812503][T10185] ? __fget_files+0x3a6/0x420 [ 779.812533][T10185] __x64_sys_sendmsg+0x1c3/0x2a0 [ 779.812554][T10185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.812580][T10185] ? __pfx_ksys_write+0x10/0x10 [ 779.812643][T10185] do_syscall_64+0x14d/0xf80 [ 779.812721][T10185] ? trace_irq_disable+0x3b/0x150 [ 779.812761][T10185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.812796][T10185] ? clear_bhb_loop+0x40/0x90 [ 779.812817][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.812834][T10185] RIP: 0033:0x7f3da651c799 [ 779.812859][T10185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.812875][T10185] RSP: 002b:00007f3da4776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.812897][T10185] RAX: ffffffffffffffda RBX: 00007f3da6795fa0 RCX: 00007f3da651c799 [ 779.812911][T10185] RDX: 0000000000008410 RSI: 0000200000000000 RDI: 0000000000000003 [ 779.812922][T10185] RBP: 00007f3da4776090 R08: 0000000000000000 R09: 0000000000000000 [ 779.812933][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.812944][T10185] R13: 00007f3da6796038 R14: 00007f3da6795fa0 R15: 00007ffe08b87d18 [ 779.812973][T10185] [ 780.137633][ T9847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 780.320689][ T9847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 780.451912][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.452031][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.452236][T10091] bridge_slave_0: entered allmulticast mode [ 780.454677][T10091] bridge_slave_0: entered promiscuous mode [ 780.500774][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.500887][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.501099][T10091] bridge_slave_1: entered allmulticast mode [ 780.503589][T10091] bridge_slave_1: entered promiscuous mode [ 780.543073][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 780.793275][ T9857] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 780.880299][T10091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.880354][T10212] warning: `syz.3.886' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 781.189917][ T9857] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 781.214431][T10228] FAULT_INJECTION: forcing a failure. [ 781.214431][T10228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.214462][T10228] CPU: 0 UID: 0 PID: 10228 Comm: syz.3.889 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 781.214481][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 781.214491][T10228] Call Trace: [ 781.214498][T10228] [ 781.214505][T10228] dump_stack_lvl+0xe8/0x150 [ 781.214535][T10228] should_fail_ex+0x46b/0x600 [ 781.214562][T10228] _copy_to_user+0x31/0xb0 [ 781.214588][T10228] simple_read_from_buffer+0xe1/0x170 [ 781.214712][T10228] proc_fail_nth_read+0x1be/0x230 [ 781.214785][T10228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.214809][T10228] ? rw_verify_area+0x2ac/0x4e0 [ 781.214832][T10228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.214853][T10228] vfs_read+0x212/0xa80 [ 781.214883][T10228] ? __pfx_vfs_read+0x10/0x10 [ 781.214908][T10228] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.215000][T10228] ? lockdep_hardirqs_on+0x7a/0x110 [ 781.215048][T10228] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 781.215069][T10228] ? mutex_lock_nested+0x152/0x1d0 [ 781.215088][T10228] ? fdget_pos+0x252/0x320 [ 781.215115][T10228] ksys_read+0x156/0x270 [ 781.215139][T10228] ? __pfx_ksys_read+0x10/0x10 [ 781.215172][T10228] do_syscall_64+0x14d/0xf80 [ 781.215187][T10228] ? trace_irq_disable+0x3b/0x150 [ 781.215205][T10228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.215222][T10228] ? clear_bhb_loop+0x40/0x90 [ 781.215244][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.215260][T10228] RIP: 0033:0x7f4cdbfecfce [ 781.215277][T10228] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 781.215292][T10228] RSP: 002b:00007f4cda27dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 781.215310][T10228] RAX: ffffffffffffffda RBX: 00007f4cda27e6c0 RCX: 00007f4cdbfecfce [ 781.215322][T10228] RDX: 000000000000000f RSI: 00007f4cda27e0a0 RDI: 0000000000000004 [ 781.215332][T10228] RBP: 00007f4cda27e090 R08: 0000000000000000 R09: 0000000000000000 [ 781.215342][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.215353][T10228] R13: 00007f4cdc2a6038 R14: 00007f4cdc2a5fa0 R15: 00007ffee8314c28 [ 781.215381][T10228] [ 781.219642][T10091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.497651][ T9857] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 781.950697][ T9857] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 782.273553][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 782.296404][T10091] team0: Port device team_slave_0 added [ 782.298471][T10241] fuse: Bad value for 'fd' [ 782.313148][T10091] team0: Port device team_slave_1 added [ 782.466916][T10091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.466933][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.466957][T10091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.531810][T10091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.531826][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.531851][T10091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.684481][T10091] hsr_slave_0: entered promiscuous mode [ 782.685829][T10091] hsr_slave_1: entered promiscuous mode [ 782.970953][T10252] syz.3.893 uses obsolete (PF_INET,SOCK_PACKET) [ 783.112077][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.197993][T10258] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 783.238680][T10259] block nbd0: NBD_DISCONNECT [ 783.462462][T10263] overlayfs: missing 'lowerdir' [ 783.497076][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.897'. [ 783.497090][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.897'. [ 783.594811][T10256] block nbd0: Disconnected due to user request. [ 783.594832][T10256] block nbd0: shutting down sockets [ 783.754477][T10263] netlink: 132 bytes leftover after parsing attributes in process `syz.3.897'. [ 784.122396][ T9847] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.146877][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.166023][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.166145][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.212345][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.212420][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.470172][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.501133][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.501272][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.739780][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.748669][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.518939][T10279] FAULT_INJECTION: forcing a failure. [ 785.518939][T10279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.518979][T10279] CPU: 1 UID: 0 PID: 10279 Comm: syz.3.902 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 785.518999][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 785.519011][T10279] Call Trace: [ 785.519018][T10279] [ 785.519026][T10279] dump_stack_lvl+0xe8/0x150 [ 785.519056][T10279] should_fail_ex+0x46b/0x600 [ 785.519084][T10279] _copy_from_user+0x2d/0xb0 [ 785.519109][T10279] ___sys_sendmsg+0x1c6/0x360 [ 785.519133][T10279] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.519156][T10279] ? kstrtouint+0x6e/0xe0 [ 785.519199][T10279] ? __fget_files+0x2a/0x420 [ 785.519219][T10279] ? __fget_files+0x3a6/0x420 [ 785.519249][T10279] __sys_sendmmsg+0x282/0x4e0 [ 785.519272][T10279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 785.519299][T10279] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 785.519332][T10279] ? ksys_write+0x248/0x270 [ 785.519357][T10279] ? __pfx_ksys_write+0x10/0x10 [ 785.519386][T10279] __x64_sys_sendmmsg+0xa0/0xc0 [ 785.519406][T10279] do_syscall_64+0x14d/0xf80 [ 785.519422][T10279] ? trace_irq_disable+0x3b/0x150 [ 785.519441][T10279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.519460][T10279] ? clear_bhb_loop+0x40/0x90 [ 785.519480][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.519497][T10279] RIP: 0033:0x7f4cdc02c799 [ 785.519514][T10279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.519529][T10279] RSP: 002b:00007f4cda27e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 785.519547][T10279] RAX: ffffffffffffffda RBX: 00007f4cdc2a5fa0 RCX: 00007f4cdc02c799 [ 785.519560][T10279] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 785.519572][T10279] RBP: 00007f4cda27e090 R08: 0000000000000000 R09: 0000000000000000 [ 785.519582][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.519593][T10279] R13: 00007f4cdc2a6038 R14: 00007f4cdc2a5fa0 R15: 00007ffee8314c28 [ 785.519621][T10279] [ 785.586466][T10281] FAULT_INJECTION: forcing a failure. [ 785.586466][T10281] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 785.586498][T10281] CPU: 1 UID: 0 PID: 10281 Comm: syz.3.903 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 785.586518][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 785.586528][T10281] Call Trace: [ 785.586535][T10281] [ 785.586543][T10281] dump_stack_lvl+0xe8/0x150 [ 785.586572][T10281] should_fail_ex+0x46b/0x600 [ 785.586599][T10281] prepare_alloc_pages+0x22a/0x6b0 [ 785.586720][T10281] __alloc_frozen_pages_noprof+0x12f/0x380 [ 785.586743][T10281] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 785.586766][T10281] ? __pfx_policy_nodemask+0x10/0x10 [ 785.586813][T10281] ? mtree_range_walk+0x6aa/0x840 [ 785.586872][T10281] alloc_pages_mpol+0xd1/0x380 [ 785.586917][T10281] alloc_pages_noprof+0xce/0x1e0 [ 785.586944][T10281] __pud_alloc+0x3a/0x460 [ 785.587030][T10281] handle_mm_fault+0xe36/0x13c0 [ 785.587058][T10281] ? handle_mm_fault+0xe7/0x13c0 [ 785.587084][T10281] ? __pfx_handle_mm_fault+0x10/0x10 [ 785.587125][T10281] ? lock_mm_and_find_vma+0xa7/0x340 [ 785.587146][T10281] do_user_addr_fault+0x75b/0x1340 [ 785.587203][T10281] exc_page_fault+0x6a/0xc0 [ 785.587229][T10281] asm_exc_page_fault+0x26/0x30 [ 785.587246][T10281] RIP: 0010:__put_user_4+0xd/0x20 [ 785.587270][T10281] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 785.587284][T10281] RSP: 0018:ffffc9000499fe50 EFLAGS: 00050206 [ 785.587300][T10281] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 785.587312][T10281] RDX: 0000000000000000 RSI: ffffffff8d7bfaaf RDI: ffffffff8ba67280 [ 785.587323][T10281] RBP: 0000000000000004 R08: ffffffff82124bef R09: ffff8880909eaab0 [ 785.587334][T10281] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: 0000000000000000 [ 785.587346][T10281] R13: 0000200000000000 R14: 000000000000001e R15: 0000000000000002 [ 785.587364][T10281] ? __might_fault+0xaf/0x130 [ 785.587393][T10281] __sys_socketpair+0xb7/0x560 [ 785.587456][T10281] __x64_sys_socketpair+0x9b/0xb0 [ 785.587478][T10281] do_syscall_64+0x14d/0xf80 [ 785.587492][T10281] ? trace_irq_disable+0x3b/0x150 [ 785.587509][T10281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.587524][T10281] ? clear_bhb_loop+0x40/0x90 [ 785.587544][T10281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.587559][T10281] RIP: 0033:0x7f4cdc02c799 [ 785.587576][T10281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.587590][T10281] RSP: 002b:00007f4cda27e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 785.587607][T10281] RAX: ffffffffffffffda RBX: 00007f4cdc2a5fa0 RCX: 00007f4cdc02c799 [ 785.587620][T10281] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 785.587630][T10281] RBP: 00007f4cda27e090 R08: 0000000000000000 R09: 0000000000000000 [ 785.587641][T10281] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.587652][T10281] R13: 00007f4cdc2a6038 R14: 00007f4cdc2a5fa0 R15: 00007ffee8314c28 [ 785.587681][T10281] [ 785.848509][T10288] FAULT_INJECTION: forcing a failure. [ 785.848509][T10288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.848541][T10288] CPU: 1 UID: 0 PID: 10288 Comm: syz.3.906 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 785.848561][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 785.848571][T10288] Call Trace: [ 785.848579][T10288] [ 785.848586][T10288] dump_stack_lvl+0xe8/0x150 [ 785.848616][T10288] should_fail_ex+0x46b/0x600 [ 785.848643][T10288] _copy_from_user+0x2d/0xb0 [ 785.848666][T10288] ___sys_sendmsg+0x1c6/0x360 [ 785.848691][T10288] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.848739][T10288] ? __fget_files+0x2a/0x420 [ 785.848758][T10288] ? __fget_files+0x3a6/0x420 [ 785.848787][T10288] __x64_sys_sendmsg+0x1c3/0x2a0 [ 785.848808][T10288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 785.848833][T10288] ? __pfx_ksys_write+0x10/0x10 [ 785.848866][T10288] do_syscall_64+0x14d/0xf80 [ 785.848883][T10288] ? trace_irq_disable+0x3b/0x150 [ 785.848902][T10288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.848920][T10288] ? clear_bhb_loop+0x40/0x90 [ 785.848941][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.848956][T10288] RIP: 0033:0x7f4cdc02c799 [ 785.848973][T10288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.848987][T10288] RSP: 002b:00007f4cda27e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.849005][T10288] RAX: ffffffffffffffda RBX: 00007f4cdc2a5fa0 RCX: 00007f4cdc02c799 [ 785.849018][T10288] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 785.849029][T10288] RBP: 00007f4cda27e090 R08: 0000000000000000 R09: 0000000000000000 [ 785.849039][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.849049][T10288] R13: 00007f4cdc2a6038 R14: 00007f4cdc2a5fa0 R15: 00007ffee8314c28 [ 785.849077][T10288] [ 786.330778][ T70] bridge_slave_1: left allmulticast mode [ 786.330801][ T70] bridge_slave_1: left promiscuous mode [ 786.330991][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.442089][ T70] bridge_slave_0: left allmulticast mode [ 786.442115][ T70] bridge_slave_0: left promiscuous mode [ 786.442343][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.581357][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.642351][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.682543][ T70] bond0 (unregistering): Released all slaves [ 787.774000][T10320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 788.098514][T10091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 788.195761][T10091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 788.539889][T10091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 788.700617][ T70] hsr_slave_0: left promiscuous mode [ 788.760688][ T70] hsr_slave_1: left promiscuous mode [ 788.761803][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.821414][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.805171][ T5111] Bluetooth: hci2: unexpected event for opcode 0x203d [ 789.911073][ T70] team0 (unregistering): Port device team_slave_1 removed [ 789.951102][ T70] team0 (unregistering): Port device team_slave_0 removed [ 790.050644][ T5983] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 790.123840][T10091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 790.179223][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.197164][T10360] FAULT_INJECTION: forcing a failure. [ 790.197164][T10360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.197194][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.0.927 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 790.197213][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 790.197225][T10360] Call Trace: [ 790.197232][T10360] [ 790.197240][T10360] dump_stack_lvl+0xe8/0x150 [ 790.197269][T10360] should_fail_ex+0x46b/0x600 [ 790.197297][T10360] _copy_from_user+0x2d/0xb0 [ 790.197321][T10360] ___sys_sendmsg+0x1c6/0x360 [ 790.197345][T10360] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.197393][T10360] ? __fget_files+0x2a/0x420 [ 790.197413][T10360] ? __fget_files+0x3a6/0x420 [ 790.197442][T10360] __x64_sys_sendmsg+0x1c3/0x2a0 [ 790.197463][T10360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 790.197487][T10360] ? __pfx_ksys_write+0x10/0x10 [ 790.197516][T10360] do_syscall_64+0x14d/0xf80 [ 790.197528][T10360] ? trace_irq_disable+0x3b/0x150 [ 790.197545][T10360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.197563][T10360] ? clear_bhb_loop+0x40/0x90 [ 790.197592][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.197609][T10360] RIP: 0033:0x7f3da651c799 [ 790.197626][T10360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.197640][T10360] RSP: 002b:00007f3da4776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.197665][T10360] RAX: ffffffffffffffda RBX: 00007f3da6795fa0 RCX: 00007f3da651c799 [ 790.197677][T10360] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 790.197688][T10360] RBP: 00007f3da4776090 R08: 0000000000000000 R09: 0000000000000000 [ 790.197699][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.197707][T10360] R13: 00007f3da6796038 R14: 00007f3da6795fa0 R15: 00007ffe08b87d18 [ 790.197735][T10360] [ 790.216134][ T5983] usb 4-1: config 2 has too many interfaces: 128, using maximum allowed: 32 [ 790.216160][ T5983] usb 4-1: config 2 has an invalid descriptor of length 132, skipping remainder of the config [ 790.216178][ T5983] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 128 [ 790.217359][ T5983] usb 4-1: language id specifier not provided by device, defaulting to English [ 790.223071][ T5983] usb 4-1: New USB device found, idVendor=07d1, idProduct=3a03, bcdDevice=9a.aa [ 790.223097][ T5983] usb 4-1: New USB device strings: Mfr=13, Product=2, SerialNumber=87 [ 790.223114][ T5983] usb 4-1: Product: syz [ 790.223126][ T5983] usb 4-1: Manufacturer: syz [ 790.223139][ T5983] usb 4-1: SerialNumber: syz [ 790.337959][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.785762][ T5983] usb 4-1: USB disconnect, device number 3 [ 790.846277][T10369] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 790.846642][T10369] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 790.882724][T10369] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 790.882962][T10369] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 790.883979][T10369] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 790.884356][T10369] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 790.884982][T10369] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 790.885102][T10369] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 790.885120][T10369] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 790.951571][T10091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.088987][T10091] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.134836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.135042][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.160094][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.182746][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.378575][T10384] FAULT_INJECTION: forcing a failure. [ 791.378575][T10384] name failslab, interval 1, probability 0, space 0, times 1 [ 791.378605][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.0.930 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 791.378624][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 791.378633][T10384] Call Trace: [ 791.378640][T10384] [ 791.378648][T10384] dump_stack_lvl+0xe8/0x150 [ 791.378675][T10384] should_fail_ex+0x46b/0x600 [ 791.378701][T10384] should_failslab+0xa8/0x100 [ 791.378806][T10384] __kmalloc_noprof+0xdf/0x7b0 [ 791.378885][T10384] ? kfree+0x4d/0x6c0 [ 791.378904][T10384] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.378973][T10384] tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.379001][T10384] ? tomoyo_path_number_perm+0x219/0x630 [ 791.379050][T10384] tomoyo_path_number_perm+0x246/0x630 [ 791.379075][T10384] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 791.379100][T10384] ? __lock_acquire+0x6b5/0x2cf0 [ 791.379160][T10384] ? __fget_files+0x2a/0x420 [ 791.379182][T10384] ? __fget_files+0x2a/0x420 [ 791.379199][T10384] ? __fget_files+0x3a6/0x420 [ 791.379217][T10384] ? __fget_files+0x2a/0x420 [ 791.379239][T10384] security_file_ioctl+0xc3/0x2a0 [ 791.379302][T10384] __se_sys_ioctl+0x47/0x170 [ 791.379377][T10384] do_syscall_64+0x14d/0xf80 [ 791.379392][T10384] ? trace_irq_disable+0x3b/0x150 [ 791.379410][T10384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.379427][T10384] ? clear_bhb_loop+0x40/0x90 [ 791.379447][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.379462][T10384] RIP: 0033:0x7f3da651c799 [ 791.379479][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.379492][T10384] RSP: 002b:00007f3da4776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.379510][T10384] RAX: ffffffffffffffda RBX: 00007f3da6795fa0 RCX: 00007f3da651c799 [ 791.379522][T10384] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000003 [ 791.379532][T10384] RBP: 00007f3da4776090 R08: 0000000000000000 R09: 0000000000000000 [ 791.379542][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.379552][T10384] R13: 00007f3da6796038 R14: 00007f3da6795fa0 R15: 00007ffe08b87d18 [ 791.379579][T10384] [ 791.379592][T10384] ERROR: Out of memory at tomoyo_realpath_from_path. [ 791.400263][ T9847] veth0_vlan: entered promiscuous mode [ 791.502755][ T9847] veth1_vlan: entered promiscuous mode [ 791.707626][ T9857] veth0_vlan: entered promiscuous mode [ 793.181892][ T9847] veth0_macvtap: entered promiscuous mode [ 793.201019][ T9857] veth1_vlan: entered promiscuous mode [ 793.220269][ T9847] veth1_macvtap: entered promiscuous mode [ 793.298050][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.353813][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.393673][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.395489][ T9857] veth0_macvtap: entered promiscuous mode [ 793.400371][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.435523][T10091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.437421][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.467575][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.483214][ T9857] veth1_macvtap: entered promiscuous mode [ 793.510653][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 793.681542][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 793.682577][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.686442][ T5879] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 793.686473][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 793.686497][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 793.686519][ T5879] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.686557][ T5879] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 793.686577][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.847455][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.853028][ T5111] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 793.853211][ T5111] Bluetooth: hci2: Injecting HCI hardware error event [ 793.855022][ T5111] Bluetooth: hci2: hardware error 0x00 [ 793.896228][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.896255][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.947483][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.959461][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.017247][ T5879] usb 4-1: GET_CAPABILITIES returned 78 [ 794.017295][ T5879] usbtmc 4-1:16.0: can't read capabilities [ 794.197877][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.880593][ T7448] usb 4-1: USB disconnect, device number 4 [ 794.999713][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.280293][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.280313][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.670080][T10437] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 796.254851][ T5111] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 796.288996][T10091] veth0_vlan: entered promiscuous mode [ 796.503262][T10439] bridge_slave_0: left allmulticast mode [ 796.503281][T10439] bridge_slave_0: left promiscuous mode [ 796.503407][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.972441][T10442] Driver unsupported XDP return value 0 on prog (id 158) dev N/A, expect packet loss! [ 796.995275][T10444] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 796.995300][T10444] CIFS mount error: No usable UNC path provided in device string! [ 796.995300][T10444] [ 796.995507][T10444] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 797.176701][T10449] QAT: failed to copy from user cfg_data. [ 797.208660][T10439] bridge_slave_1: left allmulticast mode [ 797.208688][T10439] bridge_slave_1: left promiscuous mode [ 797.208906][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.351128][T10439] bond0: (slave bond_slave_0): Releasing backup interface [ 798.480728][T10439] bond0: (slave bond_slave_1): Releasing backup interface [ 798.783949][T10439] team0: Port device team_slave_0 removed [ 799.007681][T10463] QAT: failed to copy from user cfg_data. [ 799.170808][T10439] team0: Port device team_slave_1 removed [ 799.171360][T10439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.171376][T10439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.222374][T10439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.222392][T10439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.273272][T10439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 799.319022][T10091] veth1_vlan: entered promiscuous mode [ 799.449017][T10091] veth0_macvtap: entered promiscuous mode [ 799.481041][T10091] veth1_macvtap: entered promiscuous mode [ 799.539438][T10091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.559876][T10091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.580617][ T6877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.580824][ T6877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.581005][ T6877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.581171][ T6877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.782819][ T5995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.782839][ T5995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.815919][ T5995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.815951][ T5995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.068351][T10475] QAT: failed to copy from user cfg_data. [ 800.545067][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 800.565442][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 800.567607][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 800.575460][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 800.577107][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 803.330236][ T5111] Bluetooth: hci3: command tx timeout [ 803.684956][T10517] FAULT_INJECTION: forcing a failure. [ 803.684956][T10517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.684990][T10517] CPU: 0 UID: 0 PID: 10517 Comm: syz.0.966 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 803.685010][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.685021][T10517] Call Trace: [ 803.685029][T10517] [ 803.685036][T10517] dump_stack_lvl+0xe8/0x150 [ 803.685067][T10517] should_fail_ex+0x46b/0x600 [ 803.685096][T10517] _copy_from_user+0x2d/0xb0 [ 803.685121][T10517] ___sys_sendmsg+0x1c6/0x360 [ 803.685147][T10517] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.685197][T10517] ? __fget_files+0x2a/0x420 [ 803.685219][T10517] ? __fget_files+0x3a6/0x420 [ 803.685249][T10517] __x64_sys_sendmsg+0x1c3/0x2a0 [ 803.685269][T10517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 803.685296][T10517] ? __pfx_ksys_write+0x10/0x10 [ 803.685330][T10517] do_syscall_64+0x14d/0xf80 [ 803.685346][T10517] ? trace_irq_disable+0x3b/0x150 [ 803.685366][T10517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.685384][T10517] ? clear_bhb_loop+0x40/0x90 [ 803.685405][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.685422][T10517] RIP: 0033:0x7f3da651c799 [ 803.685439][T10517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.685453][T10517] RSP: 002b:00007f3da4776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.685471][T10517] RAX: ffffffffffffffda RBX: 00007f3da6795fa0 RCX: 00007f3da651c799 [ 803.685484][T10517] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 803.685495][T10517] RBP: 00007f3da4776090 R08: 0000000000000000 R09: 0000000000000000 [ 803.685507][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.685518][T10517] R13: 00007f3da6796038 R14: 00007f3da6795fa0 R15: 00007ffe08b87d18 [ 803.685546][T10517] [ 804.058369][T10506] wg1 speed is unknown, defaulting to 1000 [ 804.350765][ T808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 805.056960][T10536] FAULT_INJECTION: forcing a failure. [ 805.056960][T10536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.057013][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.7.973 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 805.057036][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 805.057047][T10536] Call Trace: [ 805.057055][T10536] [ 805.057062][T10536] dump_stack_lvl+0xe8/0x150 [ 805.057084][T10536] should_fail_ex+0x46b/0x600 [ 805.057100][T10536] _copy_from_user+0x2d/0xb0 [ 805.057116][T10536] ___sys_recvmsg+0x175/0x590 [ 805.057131][T10536] ? __pfx____sys_recvmsg+0x10/0x10 [ 805.057143][T10536] ? lockdep_hardirqs_on+0x7a/0x110 [ 805.057167][T10536] ? __x64_sys_recvmsg+0x1a8/0x2a0 [ 805.057178][T10536] ? ___sys_recvmsg+0x10/0x590 [ 805.057190][T10536] __x64_sys_recvmsg+0x1c0/0x2a0 [ 805.057201][T10536] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 805.057217][T10536] ? __pfx_ksys_write+0x10/0x10 [ 805.057236][T10536] do_syscall_64+0x14d/0xf80 [ 805.057245][T10536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.057255][T10536] ? clear_bhb_loop+0x40/0x90 [ 805.057267][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.057277][T10536] RIP: 0033:0x7f3c9e91c799 [ 805.057287][T10536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.057296][T10536] RSP: 002b:00007f3c9cb55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 805.057307][T10536] RAX: ffffffffffffffda RBX: 00007f3c9eb96090 RCX: 00007f3c9e91c799 [ 805.057314][T10536] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003 [ 805.057320][T10536] RBP: 00007f3c9cb55090 R08: 0000000000000000 R09: 0000000000000000 [ 805.057326][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.057332][T10536] R13: 00007f3c9eb96128 R14: 00007f3c9eb96090 R15: 00007ffeaa8507b8 [ 805.057347][T10536] [ 805.543390][ T5111] Bluetooth: hci3: command tx timeout [ 805.635142][ T808] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 805.635170][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.635187][ T808] usb 4-1: Product: syz [ 805.635199][ T808] usb 4-1: Manufacturer: syz [ 805.635212][ T808] usb 4-1: SerialNumber: syz [ 805.674314][ T808] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 805.805179][T10417] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 807.514301][ T6877] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.591513][T10506] wg1 speed is unknown, defaulting to 1000 [ 807.650622][ T5111] Bluetooth: hci3: command tx timeout [ 807.688394][T10506] wg1 speed is unknown, defaulting to 1000 [ 807.786736][T10506] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 807.868502][T10506] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 809.540187][ T5879] usb 4-1: USB disconnect, device number 5 [ 809.548108][T10417] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 809.548627][T10417] ath9k_htc: Failed to initialize the device [ 809.562256][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.562317][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.610145][ T5111] Bluetooth: hci3: command tx timeout [ 810.645437][ T5879] usb 4-1: ath9k_htc: USB layer deinitialized [ 811.227069][ T6877] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.341200][T10506] wg1 speed is unknown, defaulting to 1000 [ 811.344617][T10506] wg1 speed is unknown, defaulting to 1000 [ 811.390647][T10506] wg1 speed is unknown, defaulting to 1000 [ 811.433834][T10506] wg1 speed is unknown, defaulting to 1000 [ 811.627082][ T6877] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.683921][T10506] wg1 speed is unknown, defaulting to 1000 [ 811.688571][T10506] wg1 speed is unknown, defaulting to 1000 [ 812.267766][ T6877] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.393271][T10581] FAULT_INJECTION: forcing a failure. [ 814.393271][T10581] name failslab, interval 1, probability 0, space 0, times 0 [ 814.393323][T10581] CPU: 0 UID: 0 PID: 10581 Comm: syz.0.985 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 814.393345][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.393357][T10581] Call Trace: [ 814.393363][T10581] [ 814.393370][T10581] dump_stack_lvl+0xe8/0x150 [ 814.393392][T10581] should_fail_ex+0x46b/0x600 [ 814.393408][T10581] should_failslab+0xa8/0x100 [ 814.393420][T10581] kmem_cache_alloc_noprof+0x87/0x680 [ 814.393436][T10581] ? do_getname+0x2e/0x250 [ 814.393509][T10581] do_getname+0x2e/0x250 [ 814.393519][T10581] ? getname_flags+0x11/0x20 [ 814.393531][T10581] __se_sys_quotactl+0x1f2/0x9e0 [ 814.393595][T10581] ? lockdep_hardirqs_on+0x7a/0x110 [ 814.393611][T10581] ? irqentry_exit+0x59e/0x620 [ 814.393625][T10581] ? trace_irq_disable+0x3b/0x150 [ 814.393639][T10581] ? __pfx___se_sys_quotactl+0x10/0x10 [ 814.393659][T10581] do_syscall_64+0x14d/0xf80 [ 814.393668][T10581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.393678][T10581] ? clear_bhb_loop+0x40/0x90 [ 814.393690][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.393699][T10581] RIP: 0033:0x7f3da651c799 [ 814.393711][T10581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.393719][T10581] RSP: 002b:00007f3da4755028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 814.393730][T10581] RAX: ffffffffffffffda RBX: 00007f3da6796090 RCX: 00007f3da651c799 [ 814.393737][T10581] RDX: 000000000000ee00 RSI: 0000200000000540 RDI: ffffffff80000800 [ 814.393744][T10581] RBP: 00007f3da4755090 R08: 0000000000000000 R09: 0000000000000000 [ 814.393750][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.393756][T10581] R13: 00007f3da6796128 R14: 00007f3da6796090 R15: 00007ffe08b87d18 [ 814.393771][T10581] [ 815.494287][T10481] chnl_net:caif_netlink_parms(): no params data found [ 818.575500][ T6877] bridge_slave_1: left allmulticast mode [ 818.575527][ T6877] bridge_slave_1: left promiscuous mode [ 818.575742][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.600563][T10417] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 819.191566][T10417] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 819.191778][T10417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.401908][T10417] usb 8-1: config 0 descriptor?? [ 819.408195][T10417] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 819.638113][ T6877] bridge_slave_0: left allmulticast mode [ 819.638142][ T6877] bridge_slave_0: left promiscuous mode [ 819.639506][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.821415][T10417] gspca_stv06xx: I2C: Read error writing address: -71 [ 820.866212][T10417] usb 8-1: USB disconnect, device number 2 [ 821.145580][T10640] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 823.829325][ T6877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.911341][ T6877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.959991][ T6877] bond0 (unregistering): Released all slaves [ 824.009781][T10481] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.009900][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.010122][T10481] bridge_slave_0: entered allmulticast mode [ 824.015529][T10481] bridge_slave_0: entered promiscuous mode [ 824.050817][T10481] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.050935][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.051162][T10481] bridge_slave_1: entered allmulticast mode [ 824.053687][T10481] bridge_slave_1: entered promiscuous mode [ 825.138991][T10481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.157494][T10481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.221215][T10417] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 825.370668][T10417] usb 8-1: Using ep0 maxpacket: 8 [ 825.377198][T10417] usb 8-1: config 1 interface 0 has no altsetting 0 [ 825.390430][T10417] usb 8-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 825.390528][T10417] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.390547][T10417] usb 8-1: Product: syz [ 825.390558][T10417] usb 8-1: Manufacturer: syz [ 825.390570][T10417] usb 8-1: SerialNumber: syz [ 825.494357][T10481] team0: Port device team_slave_0 added [ 825.511809][T10481] team0: Port device team_slave_1 added [ 825.713490][T10417] usbhid 8-1:1.0: fixing wrong optional hid class descriptors count [ 825.713513][T10417] usbhid 8-1:1.0: can't add hid device: -22 [ 825.713623][T10417] usbhid 8-1:1.0: probe with driver usbhid failed with error -22 [ 825.753279][T10417] usb 8-1: USB disconnect, device number 3 [ 825.895150][T10481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.895164][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.895186][T10481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.070619][ T6877] hsr_slave_0: left promiscuous mode [ 826.120612][ T6877] hsr_slave_1: left promiscuous mode [ 826.123296][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.123321][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.199956][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.199982][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.302324][ T6877] veth1_macvtap: left promiscuous mode [ 826.302419][ T6877] veth0_macvtap: left promiscuous mode [ 826.302648][ T6877] veth1_vlan: left promiscuous mode [ 826.302806][ T6877] veth0_vlan: left promiscuous mode [ 827.927089][T10699] Bluetooth: MGMT ver 1.23 [ 830.394821][ T6877] team0 (unregistering): Port device team_slave_1 removed [ 830.717228][ T6877] team0 (unregistering): Port device team_slave_0 removed [ 831.523480][T10481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.523497][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.523521][T10481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.524065][T10667] wg1 speed is unknown, defaulting to 1000 [ 831.862804][T10481] hsr_slave_0: entered promiscuous mode [ 831.864047][T10481] hsr_slave_1: entered promiscuous mode [ 831.864941][T10481] debugfs: 'hsr0' already exists in 'hsr' [ 831.864963][T10481] Cannot create hsr debugfs directory [ 835.015674][T10417] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 835.190987][T10417] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 835.191017][T10417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.191033][T10417] usb 4-1: Product: syz [ 835.191045][T10417] usb 4-1: Manufacturer: syz [ 835.191058][T10417] usb 4-1: SerialNumber: syz [ 835.220656][T10417] usb 4-1: config 0 descriptor?? [ 835.258958][T10417] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 837.637226][T10801] capability: warning: `syz.3.1040' uses deprecated v2 capabilities in a way that may be insecure [ 837.922262][ T995] usb 4-1: USB disconnect, device number 6 [ 840.731032][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 840.734856][T10481] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 840.809678][T10481] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 840.866301][T10481] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 840.887284][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 840.889576][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 840.889606][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 840.889626][ T5879] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 840.889646][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 840.889668][ T5879] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 840.889701][ T5879] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 840.889721][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.910618][ T5879] usb 6-1: config 0 descriptor?? [ 840.934047][T10828] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 841.005589][T10481] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 841.436526][T10854] FAULT_INJECTION: forcing a failure. [ 841.436526][T10854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.436579][T10854] CPU: 0 UID: 0 PID: 10854 Comm: syz.3.1046 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 841.436600][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.436611][T10854] Call Trace: [ 841.436618][T10854] [ 841.436626][T10854] dump_stack_lvl+0xe8/0x150 [ 841.436656][T10854] should_fail_ex+0x46b/0x600 [ 841.436683][T10854] _copy_from_user+0x2d/0xb0 [ 841.436707][T10854] do_ipv6_setsockopt+0x264/0x31c0 [ 841.436840][T10854] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 841.436869][T10854] ? trace_sched_exit_tp+0x3a/0x150 [ 841.436890][T10854] ? __pfx___schedule+0x10/0x10 [ 841.436908][T10854] ? __schedule+0x1569/0x5240 [ 841.436933][T10854] ? irqentry_exit+0x59e/0x620 [ 841.436952][T10854] ? lockdep_hardirqs_on+0x7a/0x110 [ 841.436969][T10854] ? irqentry_exit+0x59e/0x620 [ 841.436985][T10854] ? rcu_is_watching+0x15/0xb0 [ 841.437015][T10854] ipv6_setsockopt+0x59/0x170 [ 841.437032][T10854] rawv6_setsockopt+0x276/0x5f0 [ 841.437049][T10854] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 841.437065][T10854] ? sock_common_setsockopt+0x36/0xc0 [ 841.437111][T10854] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 841.437129][T10854] do_sock_setsockopt+0x17c/0x1b0 [ 841.437152][T10854] __x64_sys_setsockopt+0x143/0x1b0 [ 841.437174][T10854] do_syscall_64+0x14d/0xf80 [ 841.437186][T10854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.437199][T10854] ? clear_bhb_loop+0x40/0x90 [ 841.437215][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.437228][T10854] RIP: 0033:0x7f4cdc02c799 [ 841.437241][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.437252][T10854] RSP: 002b:00007f4cda23c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 841.437267][T10854] RAX: ffffffffffffffda RBX: 00007f4cdc2a6180 RCX: 00007f4cdc02c799 [ 841.437276][T10854] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000005 [ 841.437284][T10854] RBP: 00007f4cda23c090 R08: 00000000000000e8 R09: 0000000000000000 [ 841.437292][T10854] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 841.437300][T10854] R13: 00007f4cdc2a6218 R14: 00007f4cdc2a6180 R15: 00007ffee8314c28 [ 841.437321][T10854] [ 842.275516][ T808] usb 6-1: USB disconnect, device number 2 [ 842.278417][ T5111] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 842.722495][T10481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.918646][T10481] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.963441][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.965243][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.021458][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.021807][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.543073][T10367] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 844.705805][T10367] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 844.705832][T10367] usb 4-1: config 0 has no interface number 0 [ 844.708069][T10367] usb 4-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 844.708094][T10367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.708112][T10367] usb 4-1: Product: syz [ 844.708124][T10367] usb 4-1: Manufacturer: syz [ 844.708137][T10367] usb 4-1: SerialNumber: syz [ 844.761928][T10367] usb 4-1: config 0 descriptor?? [ 844.863887][T10481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.163826][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 845.163872][T10878] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1061'. [ 845.366290][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 846.005261][T10367] ax88179_178a 4-1:0.64: probe with driver ax88179_178a failed with error -22 [ 846.071253][T10367] usb 4-1: USB disconnect, device number 7 [ 848.908349][T10481] veth0_vlan: entered promiscuous mode [ 848.929678][T10481] veth1_vlan: entered promiscuous mode [ 849.011165][T10481] veth0_macvtap: entered promiscuous mode [ 849.013629][ T5983] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 849.035252][T10481] veth1_macvtap: entered promiscuous mode [ 849.058339][T10481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.073376][T10481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.105529][ T6877] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.106397][ T6877] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.106610][ T6877] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.107094][ T6877] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.161988][ T5983] usb 6-1: not running at top speed; connect to a high speed hub [ 849.163397][ T5983] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 849.163418][ T5983] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 849.165641][ T5983] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=e5.46 [ 849.165664][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.165682][ T5983] usb 6-1: Product: syz [ 849.165695][ T5983] usb 6-1: Manufacturer: syz [ 849.165708][ T5983] usb 6-1: SerialNumber: syz [ 849.521710][ T5983] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 849.561314][ T5983] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 849.596929][ T6877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.596950][ T6877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.634568][ T5983] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 849.638618][ T5983] usb 6-1: USB disconnect, device number 3 [ 849.721027][ T5879] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 849.828943][ T5995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.828956][ T5995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.887391][ T5879] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 849.887414][ T5879] usb 4-1: config 0 has no interface number 0 [ 849.890099][ T5879] usb 4-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 849.890116][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.890126][ T5879] usb 4-1: Product: syz [ 849.890133][ T5879] usb 4-1: Manufacturer: syz [ 849.890140][ T5879] usb 4-1: SerialNumber: syz [ 849.972945][ T5879] usb 4-1: config 0 descriptor?? [ 850.185860][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 850.185891][T10963] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1082'. [ 850.248240][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 850.319904][ T5879] ax88179_178a 4-1:0.64: probe with driver ax88179_178a failed with error -22 [ 850.423837][ T5879] usb 4-1: USB disconnect, device number 8 [ 850.686469][T10989] netlink: 'syz.6.27': attribute type 1 has an invalid length. [ 852.341820][ T5879] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 852.864132][ T5879] usb 7-1: not running at top speed; connect to a high speed hub [ 852.921010][ T5879] usb 7-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 852.921207][ T5879] usb 7-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 852.978486][ T5879] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=e5.46 [ 852.978516][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.978534][ T5879] usb 7-1: Product: syz [ 852.978548][ T5879] usb 7-1: Manufacturer: syz [ 852.978560][ T5879] usb 7-1: SerialNumber: syz [ 853.359940][ T5879] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 853.386000][ T5879] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 853.428684][ T5879] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 853.455725][ T5879] usb 7-1: USB disconnect, device number 2 [ 853.590622][T10367] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 853.744047][T10367] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 853.744074][T10367] usb 1-1: config 0 has no interface number 0 [ 853.746293][T10367] usb 1-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 853.746318][T10367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.746336][T10367] usb 1-1: Product: syz [ 853.746348][T10367] usb 1-1: Manufacturer: syz [ 853.746360][T10367] usb 1-1: SerialNumber: syz [ 853.755268][T10367] usb 1-1: config 0 descriptor?? [ 853.910669][T10362] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 854.008657][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 854.009393][T11035] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1099'. [ 854.059757][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 854.070259][T10362] usb 4-1: Using ep0 maxpacket: 16 [ 854.081537][T10362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.081775][T10362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.081813][T10362] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.081833][T10362] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 854.081855][T10362] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 854.081874][T10362] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 854.766958][T10362] usb 4-1: string descriptor 0 read error: -71 [ 854.776929][T10362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.776961][T10362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.824266][T10362] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 854.824290][T10362] usb 4-1: no configuration chosen from 1 choice [ 854.858356][T10362] usb 4-1: USB disconnect, device number 9 [ 854.868350][T10367] ax88179_178a 1-1:0.64: probe with driver ax88179_178a failed with error -22 [ 854.901031][T10367] usb 1-1: USB disconnect, device number 3 [ 855.531360][ T5881] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 855.771189][ T5881] usb 8-1: device descriptor read/64, error -71 [ 856.070606][ T5881] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 856.200604][ T5881] usb 8-1: device descriptor read/64, error -71 [ 856.310945][ T5881] usb usb8-port1: attempt power cycle [ 856.650561][ T808] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 856.690554][ T5881] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 856.720648][ T5881] usb 8-1: device descriptor read/8, error -71 [ 856.820827][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.820881][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 856.820902][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the [ 856.820902][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 856.820942][ T808] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 856.820963][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.826529][ T808] usb 1-1: config 0 descriptor?? [ 856.855059][ T808] ================================================================== [ 856.855075][ T808] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 856.855193][ T808] Read of size 8 at addr ffffc90005c49008 by task kworker/1:2/808 [ 856.855208][ T808] [ 856.855228][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 856.855248][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.855260][ T808] Workqueue: usb_hub_wq hub_event [ 856.855362][ T808] Call Trace: [ 856.855369][ T808] [ 856.855377][ T808] dump_stack_lvl+0xe8/0x150 [ 856.855408][ T808] print_report+0xba/0x230 [ 856.855439][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 856.855457][ T808] kasan_report+0x117/0x150 [ 856.855507][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 856.855528][ T808] __list_add_valid_or_report+0x4e/0x130 [ 856.855549][ T808] kcov_remote_stop+0x457/0x680 [ 856.855573][ T808] hub_event+0x49d8/0x4f60 [ 856.855613][ T808] ? __pfx_hub_event+0x10/0x10 [ 856.855634][ T808] ? process_scheduled_works+0xa8d/0x18c0 [ 856.855662][ T808] ? process_scheduled_works+0xa8d/0x18c0 [ 856.855683][ T808] process_scheduled_works+0xb6e/0x18c0 [ 856.855716][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.855739][ T808] ? assign_work+0x3d5/0x5e0 [ 856.855762][ T808] worker_thread+0xa53/0xfc0 [ 856.855794][ T808] kthread+0x388/0x470 [ 856.855810][ T808] ? __pfx_worker_thread+0x10/0x10 [ 856.855831][ T808] ? __pfx_kthread+0x10/0x10 [ 856.855848][ T808] ret_from_fork+0x51e/0xb90 [ 856.855876][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 856.855896][ T808] ? __switch_to+0xc7d/0x1450 [ 856.855930][ T808] ? __pfx_kthread+0x10/0x10 [ 856.855947][ T808] ret_from_fork_asm+0x1a/0x30 [ 856.855970][ T808] [ 856.855976][ T808] [ 856.855981][ T808] The buggy address belongs to a vmalloc virtual mapping [ 856.855996][ T808] Memory state around the buggy address: [ 856.856006][ T808] ffffc90005c48f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 856.856017][ T808] ffffc90005c48f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 856.856027][ T808] >ffffc90005c49000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 856.856036][ T808] ^ [ 856.856045][ T808] ffffc90005c49080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 856.856056][ T808] ffffc90005c49100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 856.856065][ T808] ================================================================== [ 856.860648][ T808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 856.860666][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 856.860687][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.860699][ T808] Workqueue: usb_hub_wq hub_event [ 856.860720][ T808] Call Trace: [ 856.860728][ T808] [ 856.860735][ T808] vpanic+0x56c/0xa60 [ 856.860761][ T808] ? __pfx_vpanic+0x10/0x10 [ 856.860783][ T808] ? __pfx___schedule+0x10/0x10 [ 856.860808][ T808] panic+0xc5/0xd0 [ 856.860829][ T808] ? __pfx_panic+0x10/0x10 [ 856.860851][ T808] ? preempt_schedule_thunk+0x16/0x30 [ 856.860874][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 856.860893][ T808] check_panic_on_warn+0x89/0xb0 [ 856.860912][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 856.860929][ T808] end_report+0x73/0x180 [ 856.860945][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 856.860963][ T808] kasan_report+0x128/0x150 [ 856.860978][ T808] ? __list_add_valid_or_report+0x4e/0x130 [ 856.861009][ T808] __list_add_valid_or_report+0x4e/0x130 [ 856.861029][ T808] kcov_remote_stop+0x457/0x680 [ 856.861051][ T808] hub_event+0x49d8/0x4f60 [ 856.861088][ T808] ? __pfx_hub_event+0x10/0x10 [ 856.861109][ T808] ? process_scheduled_works+0xa8d/0x18c0 [ 856.861131][ T808] ? process_scheduled_works+0xa8d/0x18c0 [ 856.861152][ T808] process_scheduled_works+0xb6e/0x18c0 [ 856.861185][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.861208][ T808] ? assign_work+0x3d5/0x5e0 [ 856.861241][ T808] worker_thread+0xa53/0xfc0 [ 856.861273][ T808] kthread+0x388/0x470 [ 856.861289][ T808] ? __pfx_worker_thread+0x10/0x10 [ 856.861309][ T808] ? __pfx_kthread+0x10/0x10 [ 856.861326][ T808] ret_from_fork+0x51e/0xb90 [ 856.861349][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 856.861369][ T808] ? __switch_to+0xc7d/0x1450 [ 856.861390][ T808] ? __pfx_kthread+0x10/0x10 [ 856.861407][ T808] ret_from_fork_asm+0x1a/0x30 [ 856.861429][ T808] [ 856.861744][ T808] Kernel Offset: disabled