last executing test programs: 2m2.621049111s ago: executing program 2 (id=3): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={0x0, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r3, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r2, 0x0, 0x0) 2m1.415221118s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffffc9}], 0x1, 0x4, 0x0) 2m1.065259502s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffffc9}], 0x1, 0x4, 0x0) 1m59.631373897s ago: executing program 4 (id=8): r0 = openat$vcsu(0xffffff9c, 0x0, 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 1m58.13284668s ago: executing program 2 (id=9): r0 = openat$vcsu(0xffffff9c, 0x0, 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 1m42.510085181s ago: executing program 32 (id=8): r0 = openat$vcsu(0xffffff9c, 0x0, 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 1m42.130952651s ago: executing program 33 (id=9): r0 = openat$vcsu(0xffffff9c, 0x0, 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 21.039229308s ago: executing program 3 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d0000000400000004000000a800000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000f6ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/19], 0x50) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x268, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x757}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xbe, 0xfa, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x80, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xa, 0x6, 0x8, 0x40, 0x4}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x42, 0xef, 0xffff, 0x51}]}, 0x9, [{0x0, 0x0}, {0x65, &(0x7f0000000280)=@string={0x65, 0x3, "b6d049582b35ad173a5076c820697b2c53a2f5be48181afe62bfa21b89fc8d56805e579671b681c51ed95bdac4844e22edaa4bc503f17f1b283180632b1d8230a4f423788930deb5d9deaf52333f22cab706df81faad8a20669a442ef45632b5f212ef"}}, {0xa0, &(0x7f0000000300)=@string={0xa0, 0x3, "3dfc63698082df6b766c7b4aed95e9030495ce9d867ccacfbc77117b79696178cf2af27352b81ddd7e4ce94e27cbf32db70bc96718ed6501b582b6b0cd8fd2f85a222bdd11ed27e34ad7201a616ec628842be5f6d4fb34111f5053f91ae7c530bdbf5674f745ed58db69db76b7573644c414772fd08b534c705ee6bb62ee4038e24043a8969a926305fee1f0ba8b488490e4e334599e61bca669f5bbd607"}}, {0x67, &(0x7f00000003c0)=@string={0x67, 0x3, "57d8ca7ee2f1440f6f79260c49d1ff3463984646fbec4af572f78cc5847c1d0e9d1f8606a64135f5c68a891462cc8049f80445ed86290438c3d116dfb980886694021ca1754a87697c4d3266f5d144d2907338ab8763fffdfac5ca2da23e2806455380a3b6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xba}}, {0x91, &(0x7f0000000700)=@string={0x91, 0x3, "78311706c0c59a3de1a7626459d9e6548246aa8e4592920b8a650d70a25aea738dac667ff2e286a34f340798b640fb4933691f4963cc51e50c447fa56509d4b4f7669736bef15980259c97d2ab576d588ca8ba46659ed14147654a5cbdb870fbb07cf7b56ea12eef81e5f01b20b345bb35d26be60f0c32571dbe8fe9c67352df1d36caeb04b00bed3763418b637b5e"}}, {0x15, &(0x7f0000000480)=@string={0x15, 0x3, "4807d7ce4c32c993e7e8ee26466494e9a0101f"}}, {0x83, &(0x7f00000007c0)=@string={0x83, 0x3, "f5e442574693df95b2fa49a045470cf3faef64fe2a59be4513dfc88f62e0439042e1d7241485cd8b650a15e04313f96830de9977ca8d3e350886dcedccbd45d27fe68a7eda78fad0db6cfa6b70badd994d926d12f0530fa7130a134920e87e285eca6b320e388f984de35c094d4976c40284d080413041542d1fc1f5ee4ec22314"}}, {0xd4, &(0x7f0000000880)=@string={0xd4, 0x3, "082123a8de6dfc33bbb803799b36bce5fea3c3a99b593ab8e8fddd802168c772e59ffab808665582fbcf7c10a9be2a00379838b12c3436d22e383cc0749aaf64547cbbbe914c96d3c083e560a018fb23030b196f869b6807fb78059d41a2411825cb7e20598fef5d1daa15193173f2df4f5dca918c67b33066233249a5948f3c206af118e9858bf3d5a67273c7339b550359bcbe431ba07aaba53941ea51491fcbb5d2d86345ad717d63164887185a0a4c58147a6de1608d0bfead1d65c37b0251104be73f5c76325147ee215cd40644f548"}}]}) 18.555684916s ago: executing program 0 (id=77): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 16.633167655s ago: executing program 3 (id=80): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 15.062652794s ago: executing program 1 (id=81): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000180)=0x100000001, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 14.43538683s ago: executing program 0 (id=82): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 14.092979356s ago: executing program 1 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d0000000400000004000000a800000000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/16], 0x50) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x268, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x757}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xbe, 0xfa, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x80, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xa, 0x6, 0x8, 0x40, 0x4}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x42, 0xef, 0xffff, 0x51}]}, 0x9, [{0x0, 0x0}, {0x65, &(0x7f0000000280)=@string={0x65, 0x3, "b6d049582b35ad173a5076c820697b2c53a2f5be48181afe62bfa21b89fc8d56805e579671b681c51ed95bdac4844e22edaa4bc503f17f1b283180632b1d8230a4f423788930deb5d9deaf52333f22cab706df81faad8a20669a442ef45632b5f212ef"}}, {0xa0, &(0x7f0000000300)=@string={0xa0, 0x3, "3dfc63698082df6b766c7b4aed95e9030495ce9d867ccacfbc77117b79696178cf2af27352b81ddd7e4ce94e27cbf32db70bc96718ed6501b582b6b0cd8fd2f85a222bdd11ed27e34ad7201a616ec628842be5f6d4fb34111f5053f91ae7c530bdbf5674f745ed58db69db76b7573644c414772fd08b534c705ee6bb62ee4038e24043a8969a926305fee1f0ba8b488490e4e334599e61bca669f5bbd607"}}, {0x67, &(0x7f00000003c0)=@string={0x67, 0x3, "57d8ca7ee2f1440f6f79260c49d1ff3463984646fbec4af572f78cc5847c1d0e9d1f8606a64135f5c68a891462cc8049f80445ed86290438c3d116dfb980886694021ca1754a87697c4d3266f5d144d2907338ab8763fffdfac5ca2da23e2806455380a3b6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xba}}, {0x91, &(0x7f0000000700)=@string={0x91, 0x3, "78311706c0c59a3de1a7626459d9e6548246aa8e4592920b8a650d70a25aea738dac667ff2e286a34f340798b640fb4933691f4963cc51e50c447fa56509d4b4f7669736bef15980259c97d2ab576d588ca8ba46659ed14147654a5cbdb870fbb07cf7b56ea12eef81e5f01b20b345bb35d26be60f0c32571dbe8fe9c67352df1d36caeb04b00bed3763418b637b5e"}}, {0x15, &(0x7f0000000480)=@string={0x15, 0x3, "4807d7ce4c32c993e7e8ee26466494e9a0101f"}}, {0x83, &(0x7f00000007c0)=@string={0x83, 0x3, "f5e442574693df95b2fa49a045470cf3faef64fe2a59be4513dfc88f62e0439042e1d7241485cd8b650a15e04313f96830de9977ca8d3e350886dcedccbd45d27fe68a7eda78fad0db6cfa6b70badd994d926d12f0530fa7130a134920e87e285eca6b320e388f984de35c094d4976c40284d080413041542d1fc1f5ee4ec22314"}}, {0xd4, &(0x7f0000000880)=@string={0xd4, 0x3, "082123a8de6dfc33bbb803799b36bce5fea3c3a99b593ab8e8fddd802168c772e59ffab808665582fbcf7c10a9be2a00379838b12c3436d22e383cc0749aaf64547cbbbe914c96d3c083e560a018fb23030b196f869b6807fb78059d41a2411825cb7e20598fef5d1daa15193173f2df4f5dca918c67b33066233249a5948f3c206af118e9858bf3d5a67273c7339b550359bcbe431ba07aaba53941ea51491fcbb5d2d86345ad717d63164887185a0a4c58147a6de1608d0bfead1d65c37b0251104be73f5c76325147ee215cd40644f548"}}]}) 10.888711781s ago: executing program 0 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) 10.547015375s ago: executing program 3 (id=85): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r2, 0x0, 0x0) 9.752280936s ago: executing program 1 (id=86): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 9.687276816s ago: executing program 0 (id=87): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d0000000400000004000000a800000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000f6ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/21], 0x50) 7.203043557s ago: executing program 0 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,measure,permit_directio,fowner>', @ANYRESDEC=r2, @ANYBLOB='\x00']) 6.178014926s ago: executing program 3 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffffc9}], 0x1, 0x4, 0x0) 5.969856359s ago: executing program 1 (id=90): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r3, 0x0, 0x0) 1.475147085s ago: executing program 3 (id=91): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000180)=0x100000001, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.474720927s ago: executing program 0 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) 1.120368494s ago: executing program 1 (id=93): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) userfaultfd(0x80001) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 63.787917ms ago: executing program 3 (id=94): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) userfaultfd(0x80001) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 0s ago: executing program 1 (id=95): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x610000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000006c0)={r1, 0x1ff, 0x2, 0x9, 0x0, [], [0x9, 0x0, 0x1, 0x3], [0x9, 0x209, 0x3, 0x5], [0x40, 0xffffffff, 0x8]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES8=r3, @ANYBLOB, @ANYRES16, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 89.242086][ T5782] cgroup: Unknown subsys name 'net' [ 89.493459][ T5782] cgroup: Unknown subsys name 'cpuset' [ 89.588338][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.537443][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.121577][ T864] cfg80211: failed to load regulatory.db [ 95.863949][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.880685][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.886415][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.896055][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.904178][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.910184][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.916220][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.918431][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.927277][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.929786][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.933608][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.946134][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.948760][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.950435][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.966523][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.971095][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.977142][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.977818][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.983887][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.988028][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.988462][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.996712][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.998915][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.003754][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.047860][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.036728][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 97.080647][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 97.154358][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 97.201429][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 97.303245][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 97.489692][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.490464][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.491122][ T5797] bridge_slave_0: entered allmulticast mode [ 97.493138][ T5797] bridge_slave_0: entered promiscuous mode [ 97.561129][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.561277][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.561731][ T5797] bridge_slave_1: entered allmulticast mode [ 97.563547][ T5797] bridge_slave_1: entered promiscuous mode [ 97.566712][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.566804][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.566931][ T5811] bridge_slave_0: entered allmulticast mode [ 97.572773][ T5811] bridge_slave_0: entered promiscuous mode [ 97.666196][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.666311][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.666437][ T5811] bridge_slave_1: entered allmulticast mode [ 97.670584][ T5811] bridge_slave_1: entered promiscuous mode [ 97.711976][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.712110][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.712445][ T5806] bridge_slave_0: entered allmulticast mode [ 97.714845][ T5806] bridge_slave_0: entered promiscuous mode [ 97.768134][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.768261][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.768396][ T5799] bridge_slave_0: entered allmulticast mode [ 97.770196][ T5799] bridge_slave_0: entered promiscuous mode [ 97.811839][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.811988][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.812127][ T5806] bridge_slave_1: entered allmulticast mode [ 97.813954][ T5806] bridge_slave_1: entered promiscuous mode [ 97.830484][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.862104][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.862230][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.862406][ T5799] bridge_slave_1: entered allmulticast mode [ 97.864467][ T5799] bridge_slave_1: entered promiscuous mode [ 97.918436][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.921515][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.018961][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.019130][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.019322][ T5798] bridge_slave_0: entered allmulticast mode [ 98.021452][ T5798] bridge_slave_0: entered promiscuous mode [ 98.084537][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.106629][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.106767][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.106973][ T5798] bridge_slave_1: entered allmulticast mode [ 98.111154][ T5810] Bluetooth: hci2: command tx timeout [ 98.111503][ T5810] Bluetooth: hci0: command tx timeout [ 98.111701][ T5810] Bluetooth: hci4: command tx timeout [ 98.145000][ T5798] bridge_slave_1: entered promiscuous mode [ 98.156760][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.187893][ T5114] Bluetooth: hci1: command tx timeout [ 98.188084][ T5114] Bluetooth: hci3: command tx timeout [ 98.212841][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.237474][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.253801][ T5797] team0: Port device team_slave_0 added [ 98.280464][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.324355][ T5797] team0: Port device team_slave_1 added [ 98.333631][ T5811] team0: Port device team_slave_0 added [ 98.357436][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.394993][ T5811] team0: Port device team_slave_1 added [ 98.418398][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.420500][ T5806] team0: Port device team_slave_0 added [ 98.466520][ T5799] team0: Port device team_slave_0 added [ 98.488768][ T5806] team0: Port device team_slave_1 added [ 98.489921][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.489934][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.489954][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.548861][ T5799] team0: Port device team_slave_1 added [ 98.583317][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.583332][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.583351][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.586527][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.586540][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.586559][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.682798][ T5798] team0: Port device team_slave_0 added [ 98.714079][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.714097][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.714124][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.765375][ T5798] team0: Port device team_slave_1 added [ 98.766187][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.766199][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.766217][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.829069][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.829096][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.829115][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.865837][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.865904][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.866000][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.899321][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.899371][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.899436][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.015625][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.015639][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.015658][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.561550][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.561564][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.561584][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.629599][ T5797] hsr_slave_0: entered promiscuous mode [ 99.630806][ T5797] hsr_slave_1: entered promiscuous mode [ 99.671500][ T5811] hsr_slave_0: entered promiscuous mode [ 99.672499][ T5811] hsr_slave_1: entered promiscuous mode [ 99.673253][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 99.673342][ T5811] Cannot create hsr debugfs directory [ 99.746392][ T5806] hsr_slave_0: entered promiscuous mode [ 99.752487][ T5806] hsr_slave_1: entered promiscuous mode [ 99.755171][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 99.755243][ T5806] Cannot create hsr debugfs directory [ 99.791565][ T5799] hsr_slave_0: entered promiscuous mode [ 99.793070][ T5799] hsr_slave_1: entered promiscuous mode [ 99.793746][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 99.793764][ T5799] Cannot create hsr debugfs directory [ 99.936113][ T5798] hsr_slave_0: entered promiscuous mode [ 99.946175][ T5798] hsr_slave_1: entered promiscuous mode [ 99.946990][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 99.947007][ T5798] Cannot create hsr debugfs directory [ 100.187928][ T5810] Bluetooth: hci4: command tx timeout [ 100.187965][ T5810] Bluetooth: hci0: command tx timeout [ 100.187989][ T5810] Bluetooth: hci2: command tx timeout [ 100.267898][ T5114] Bluetooth: hci3: command tx timeout [ 100.267937][ T5114] Bluetooth: hci1: command tx timeout [ 100.889472][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.937022][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.965711][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.019950][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.146902][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.184933][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.206889][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.257358][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.394879][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.426782][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.465220][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.519767][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.643807][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.691260][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.743027][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.793466][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.935090][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.955640][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.001854][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.037360][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.093363][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.173414][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.220762][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.221631][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.252948][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.268757][ T5810] Bluetooth: hci2: command tx timeout [ 102.268791][ T5810] Bluetooth: hci0: command tx timeout [ 102.268810][ T5810] Bluetooth: hci4: command tx timeout [ 102.319353][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.319673][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.348067][ T5114] Bluetooth: hci1: command tx timeout [ 102.348102][ T5114] Bluetooth: hci3: command tx timeout [ 102.407292][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.476391][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.476540][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.520362][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.520583][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.529519][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.623456][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.649576][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.703879][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.704554][ T4029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.753491][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.753635][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.795557][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.816038][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.853922][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.854144][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.902891][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.907907][ T4029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.994252][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.043621][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.044677][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.101408][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.101675][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.206898][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.380029][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.502377][ T5797] veth0_vlan: entered promiscuous mode [ 103.552845][ T5797] veth1_vlan: entered promiscuous mode [ 103.775351][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.800204][ T5797] veth0_macvtap: entered promiscuous mode [ 103.824314][ T5797] veth1_macvtap: entered promiscuous mode [ 103.973090][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.012210][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.070443][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.089096][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.109876][ T1394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.110084][ T5799] veth0_vlan: entered promiscuous mode [ 104.112870][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.114087][ T1394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.210691][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.217025][ T5799] veth1_vlan: entered promiscuous mode [ 104.347846][ T5810] Bluetooth: hci4: command tx timeout [ 104.347879][ T5114] Bluetooth: hci0: command tx timeout [ 104.347906][ T5114] Bluetooth: hci2: command tx timeout [ 104.429003][ T5810] Bluetooth: hci3: command tx timeout [ 104.429025][ T5803] Bluetooth: hci1: command tx timeout [ 104.526877][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.526900][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.564051][ T5806] veth0_vlan: entered promiscuous mode [ 104.649057][ T5799] veth0_macvtap: entered promiscuous mode [ 104.651742][ T5806] veth1_vlan: entered promiscuous mode [ 104.654681][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.654700][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.655327][ T5811] veth0_vlan: entered promiscuous mode [ 104.707371][ T5799] veth1_macvtap: entered promiscuous mode [ 104.722600][ T5798] veth0_vlan: entered promiscuous mode [ 104.765959][ T5811] veth1_vlan: entered promiscuous mode [ 104.801585][ T5798] veth1_vlan: entered promiscuous mode [ 104.839007][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.902386][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.908338][ T5806] veth0_macvtap: entered promiscuous mode [ 104.983846][ T5806] veth1_macvtap: entered promiscuous mode [ 104.985436][ T1394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.007664][ T1394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.013835][ T1394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.024796][ T1394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.029447][ T5811] veth0_macvtap: entered promiscuous mode [ 105.276074][ T5798] veth0_macvtap: entered promiscuous mode [ 105.284313][ T5811] veth1_macvtap: entered promiscuous mode [ 105.312268][ T5798] veth1_macvtap: entered promiscuous mode [ 106.211351][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.330098][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.376400][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.414964][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.471331][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.475288][ T1206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.506567][ T1206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.528210][ T1206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.591663][ T4029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.591685][ T4029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.593898][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.634640][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.637461][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.662407][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.760105][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.872523][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.103246][ T1206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.132416][ T1394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.132516][ T1394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.132531][ T1394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.136075][ T1394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.199801][ T1394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.463570][ T4029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.463592][ T4029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.775717][ T1394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.775738][ T1394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.931348][ T4029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.931373][ T4029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.111091][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.111114][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.318611][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.318636][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.253628][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.253652][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.648504][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.678539][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.680303][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.683335][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.684359][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.700272][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 132.707841][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 132.724091][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 132.725253][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 132.726084][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.737354][ T5996] Dead loop on virtual device wlan1, fix it urgently! [ 135.050857][ T5810] Bluetooth: hci5: command tx timeout [ 135.227682][ T5810] Bluetooth: hci6: command tx timeout [ 137.067777][ T5810] Bluetooth: hci5: command tx timeout [ 137.317739][ T5810] Bluetooth: hci6: command tx timeout [ 138.365010][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.365106][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.147610][ T5810] Bluetooth: hci5: command tx timeout [ 139.912069][ T5810] Bluetooth: hci6: command tx timeout [ 143.054666][ T5810] Bluetooth: hci5: command tx timeout [ 143.057299][ T5810] Bluetooth: hci6: command tx timeout [ 144.786527][ T3605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.751088][ T3605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.070947][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 152.425756][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 154.748603][ T3605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.844623][ T3605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.621968][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.622154][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.622376][ T5994] bridge_slave_0: entered allmulticast mode [ 160.625353][ T5994] bridge_slave_0: entered promiscuous mode [ 160.659193][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.659326][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.659571][ T5997] bridge_slave_0: entered allmulticast mode [ 160.662848][ T5997] bridge_slave_0: entered promiscuous mode [ 160.700715][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.700851][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.701116][ T5994] bridge_slave_1: entered allmulticast mode [ 160.706023][ T5994] bridge_slave_1: entered promiscuous mode [ 160.746309][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.746459][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.746678][ T5997] bridge_slave_1: entered allmulticast mode [ 160.777920][ T5997] bridge_slave_1: entered promiscuous mode [ 161.015811][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.036158][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.051715][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.056076][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.298269][ T5994] team0: Port device team_slave_0 added [ 164.307166][ T5997] team0: Port device team_slave_0 added [ 164.330973][ T5994] team0: Port device team_slave_1 added [ 164.347293][ T5997] team0: Port device team_slave_1 added [ 164.585810][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.585829][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.585856][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.716175][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.716194][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.716222][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.711816][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.711838][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.711866][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.988682][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.988702][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.988729][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.443683][ T5994] hsr_slave_0: entered promiscuous mode [ 166.444806][ T5994] hsr_slave_1: entered promiscuous mode [ 166.445636][ T5994] debugfs: 'hsr0' already exists in 'hsr' [ 166.445654][ T5994] Cannot create hsr debugfs directory [ 167.264110][ T3605] bridge_slave_1: left allmulticast mode [ 167.264244][ T3605] bridge_slave_1: left promiscuous mode [ 167.266504][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.400227][ T3605] bridge_slave_0: left allmulticast mode [ 167.400261][ T3605] bridge_slave_0: left promiscuous mode [ 167.400523][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.453233][ T3605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.528409][ T3605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.562672][ T3605] bond0 (unregistering): Released all slaves [ 173.701223][ T5997] hsr_slave_0: entered promiscuous mode [ 173.702505][ T5997] hsr_slave_1: entered promiscuous mode [ 173.703247][ T5997] debugfs: 'hsr0' already exists in 'hsr' [ 173.703265][ T5997] Cannot create hsr debugfs directory [ 181.260515][ T6199] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 188.767571][ T3605] hsr_slave_0: left promiscuous mode [ 188.849944][ T3605] hsr_slave_1: left promiscuous mode [ 188.851076][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.851167][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.926420][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.942668][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.945961][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.947009][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.957697][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.975997][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.979274][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.982759][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.002400][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.004407][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.060424][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.060454][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.466403][ T3605] veth1_macvtap: left promiscuous mode [ 189.466682][ T3605] veth0_macvtap: left promiscuous mode [ 189.466987][ T3605] veth1_vlan: left promiscuous mode [ 189.491380][ T3605] veth0_vlan: left promiscuous mode [ 191.373113][ T5810] Bluetooth: hci3: command tx timeout [ 191.373275][ T5810] Bluetooth: hci2: command tx timeout [ 193.387676][ T5809] Bluetooth: hci2: command tx timeout [ 193.387711][ T5809] Bluetooth: hci3: command tx timeout [ 196.147703][ T5809] Bluetooth: hci2: command tx timeout [ 196.147849][ T5810] Bluetooth: hci3: command tx timeout [ 196.491408][ T3605] team0 (unregistering): Port device team_slave_1 removed [ 196.729392][ T3605] team0 (unregistering): Port device team_slave_0 removed [ 198.187834][ T5809] Bluetooth: hci2: command tx timeout [ 198.187887][ T5810] Bluetooth: hci3: command tx timeout [ 200.209927][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.210000][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.046477][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 204.856166][ T6224] chnl_net:caif_netlink_parms(): no params data found [ 205.074878][ T6223] chnl_net:caif_netlink_parms(): no params data found [ 206.725942][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.736783][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.737081][ T6224] bridge_slave_0: entered allmulticast mode [ 206.753785][ T6224] bridge_slave_0: entered promiscuous mode [ 206.777734][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.777954][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.778209][ T6224] bridge_slave_1: entered allmulticast mode [ 206.781003][ T6224] bridge_slave_1: entered promiscuous mode [ 206.971384][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.971620][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.971886][ T6223] bridge_slave_0: entered allmulticast mode [ 206.977059][ T6223] bridge_slave_0: entered promiscuous mode [ 207.022155][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.040779][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.040941][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.041172][ T6223] bridge_slave_1: entered allmulticast mode [ 207.043138][ T6223] bridge_slave_1: entered promiscuous mode [ 207.085278][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.488160][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.492437][ T6224] team0: Port device team_slave_0 added [ 207.526029][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.909859][ T6224] team0: Port device team_slave_1 added [ 208.170693][ T6223] team0: Port device team_slave_0 added [ 208.173680][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.173699][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.173727][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.213661][ T6223] team0: Port device team_slave_1 added [ 208.255060][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.255079][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.255109][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.122049][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.122070][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.122100][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.275207][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.275227][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.275254][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.593896][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 211.585099][ T6224] hsr_slave_0: entered promiscuous mode [ 211.586887][ T6224] hsr_slave_1: entered promiscuous mode [ 211.588892][ T6224] debugfs: 'hsr0' already exists in 'hsr' [ 211.588919][ T6224] Cannot create hsr debugfs directory [ 219.427260][ T3605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.680342][ T6223] hsr_slave_0: entered promiscuous mode [ 219.686096][ T6223] hsr_slave_1: entered promiscuous mode [ 219.687880][ T6223] debugfs: 'hsr0' already exists in 'hsr' [ 219.687909][ T6223] Cannot create hsr debugfs directory [ 222.638726][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 223.072893][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 223.072936][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 223.351260][ T3605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.012420][ T3605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.178456][ T3605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.561701][ T6224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.622396][ T6224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.314222][ T6224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.461609][ T6224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.737587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.747580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.749579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.749632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.749865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.749906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.752501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.752528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.752901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.757537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.915549][ T6456] ================================================================== [ 231.915567][ T6456] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 231.916342][ T6456] Read of size 1 at addr ffff888038689200 by task syz.3.94/6456 [ 231.916362][ T6456] [ 231.916427][ T6456] CPU: 1 UID: 0 PID: 6456 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 231.916467][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 231.916489][ T6456] Call Trace: [ 231.916497][ T6456] [ 231.916512][ T6456] dump_stack_lvl+0xe8/0x150 [ 231.916544][ T6456] print_report+0xba/0x230 [ 231.916570][ T6456] ? rt_spin_lock+0x83/0x400 [ 231.916591][ [ 231.916591][ T6456] kasan_report+0x117/0x150 [ 231.916627][ T6456] ? rt_spin_lock+0x83/0x400 [ 231.916651][ T6456] ? __wake_up_common_lock+0x2f/0x1e0 [ 231.916674][ T6456] __kasan_check_byte+0x2a/0x40 [ 231.916703][ T6456] lock_acquire+0x84/0x330 [ 231.916731][ T6456] rt_spin_lock+0x83/0x400 [ 231.916748][ T6456] ? __wake_up_common_lock+0x2f/0x1e0 [ 231.916767][ T6456] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.916788][ T6456] ? __pfx_rt_spin_lock+0x10/0x10 [ 231.916806][ T6456] ? rt_spin_unlock+0x14f/0x200 [ 231.916826][ T6456] ? rt_spin_unlock+0x160/0x200 [ 231.916848][ T6456] __wake_up_common_lock+0x2f/0x1e0 [ 231.916871][ T6456] snd_pcm_stop+0x428/0x550 [ 231.916897][ T6456] loopback_trigger+0xb82/0x1b60 [ 231.916933][ T6456] snd_pcm_start+0x43d/0x5d0 [ 231.916955][ T6456] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 231.916990][ T6456] ? __pfx_interleaved_copy+0x10/0x10 [ 231.917017][ T6456] ? __pfx_default_write_copy+0x10/0x10 [ 231.917046][ T6456] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.917072][ T6456] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 231.917105][ T6456] ? rt_mutex_slowunlock+0x1cb/0x300 [ 231.917123][ T6456] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.917147][ T6456] ? snd_pcm_oss_write3+0x1a2/0x350 [ 231.917174][ T6456] snd_pcm_oss_write3+0x1bc/0x350 [ 231.917202][ T6456] snd_pcm_plug_write_transfer+0x2d1/0x4d0 [ 231.917223][ T6456] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 231.917242][ T6456] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 231.917265][ T6456] snd_pcm_oss_write2+0x283/0x440 [ 231.917295][ T6456] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 231.917322][ T6456] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.917347][ T6456] ? snd_pcm_oss_write+0x20d/0xbe0 [ 231.917372][ T6456] snd_pcm_oss_write+0x6d1/0xbe0 [ 231.917412][ T6456] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 231.917441][ T6456] vfs_write+0x2a3/0xba0 [ 231.917469][ T6456] ? __pfx_vfs_write+0x10/0x10 [ 231.917492][ T6456] ? __fget_files+0x2a/0x420 [ 231.917510][ T6456] ? __fget_files+0x2a/0x420 [ 231.917525][ T6456] ? __fget_files+0x3a6/0x420 [ 231.917540][ T6456] ? __fget_files+0x2a/0x420 [ 231.917560][ T6456] ksys_write+0x156/0x270 [ 231.917584][ T6456] ? __pfx_ksys_write+0x10/0x10 [ 231.917612][ T6456] do_syscall_64+0xe2/0xf80 [ 231.917637][ T6456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.917659][ T6456] ? trace_irq_disable+0x37/0x100 [ 231.917684][ T6456] ? clear_bhb_loop+0x60/0xb0 [ 231.917705][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.917723][ T6456] RIP: 0033:0x7f02fb3faeb9 [ 231.917753][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.917776][ T6456] RSP: 002b:00007f02f9635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.917803][ T6456] RAX: ffffffffffffffda RBX: 00007f02fb676090 RCX: 00007f02fb3faeb9 [ 231.917818][ T6456] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 231.917830][ T6456] RBP: 00007f02fb468c1f R08: 0000000000000000 R09: 0000000000000000 [ 231.917842][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.917854][ T6456] R13: 00007f02fb676128 R14: 00007f02fb676090 R15: 00007fffceb10158 [ 231.917874][ T6456] [ 231.917881][ T6456] [ 231.917889][ T6456] Allocated by task 6452: [ 231.917899][ T6456] kasan_save_track+0x3e/0x80 [ 231.917922][ T6456] __kasan_kmalloc+0x93/0xb0 [ 231.917945][ T6456] __kmalloc_cache_noprof+0x1f2/0x6b0 [ 231.917970][ T6456] snd_pcm_attach_substream+0x5b7/0xb20 [ 231.917987][ T6456] snd_pcm_open_substream+0xbd/0x2420 [ 231.918011][ T6456] snd_pcm_oss_open+0xfc2/0x1c50 [ 231.918036][ T6456] chrdev_open+0x4d0/0x5f0 [ 231.918060][ T6456] do_dentry_open+0x7d0/0x1270 [ 231.918089][ T6456] vfs_open+0x3b/0x350 [ 231.918104][ T6456] path_openat+0x34c9/0x3e70 [ 231.918126][ T6456] do_filp_open+0x22d/0x490 [ 231.918147][ T6456] do_sys_openat2+0x12f/0x220 [ 231.918162][ T6456] __x64_sys_openat+0x138/0x170 [ 231.918180][ T6456] do_syscall_64+0xe2/0xf80 [ 231.918205][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.918223][ T6456] [ 231.918229][ T6456] Freed by task 6452: [ 231.918239][ T6456] kasan_save_track+0x3e/0x80 [ 231.918263][ T6456] kasan_save_free_info+0x46/0x50 [ 231.918280][ T6456] __kasan_slab_free+0x5c/0x80 [ 231.918302][ T6456] kfree+0x1bb/0x8f0 [ 231.918321][ T6456] snd_pcm_detach_substream+0x1e1/0x290 [ 231.918340][ T6456] snd_pcm_oss_release+0x184/0x250 [ 231.918368][ T6456] __fput+0x45e/0xa80 [ 231.918385][ T6456] task_work_run+0x1d9/0x270 [ 231.918420][ T6456] get_signal+0x11c3/0x1310 [ 231.918436][ T6456] arch_do_signal_or_restart+0xbc/0x830 [ 231.918473][ T6456] exit_to_user_mode_loop+0x86/0x480 [ 231.918495][ T6456] do_syscall_64+0x2b7/0xf80 [ 231.918520][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.918537][ T6456] [ 231.918542][ T6456] The buggy address belongs to the object at ffff888038689000 [ 231.918542][ T6456] which belongs to the cache kmalloc-2k of size 2048 [ 231.918558][ T6456] The buggy address is located 512 bytes inside of [ 231.918558][ T6456] freed 2048-byte region [ffff888038689000, ffff888038689800) [ 231.918580][ T6456] [ 231.918586][ T6456] The buggy address belongs to the physical page: [ 231.918612][ T6456] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38688 [ 231.918635][ T6456] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 231.918654][ T6456] flags: 0x80000000000040(head|node=0|zone=1) [ 231.918676][ T6456] page_type: f5(slab) [ 231.918695][ T6456] raw: 0080000000000040 ffff88813fe27000 ffffea00016f5000 dead000000000002 [ 231.918713][ T6456] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 231.918734][ T6456] head: 0080000000000040 ffff88813fe27000 ffffea00016f5000 dead000000000002 [ 231.918751][ T6456] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 231.918769][ T6456] head: 0080000000000003 ffffea0000e1a201 00000000ffffffff 00000000ffffffff [ 231.918786][ T6456] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 231.918796][ T6456] page dumped because: kasan: bad access detected [ 231.918811][ T6456] page_owner tracks the page as allocated [ 231.918823][ T6456] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 69, tgid 69 (kworker/u8:4), ts 102373279294, free_ts 102279359916 [ 231.918859][ T6456] post_alloc_hook+0x228/0x280 [ 231.918888][ T6456] get_page_from_freelist+0x28bb/0x2950 [ 231.918907][ T6456] __alloc_frozen_pages_noprof+0x18d/0x380 [ 231.918924][ T6456] alloc_pages_mpol+0xd1/0x380 [ 231.918953][ T6456] allocate_slab+0x86/0x3a0 [ 231.918974][ T6456] ___slab_alloc+0xaf8/0x13d0 [ 231.918993][ T6456] __slab_alloc+0xc5/0x1f0 [ 231.919010][ T6456] __kmalloc_node_track_caller_noprof+0x2b6/0x7f0 [ 231.919038][ T6456] kmalloc_reserve+0x136/0x290 [ 231.919067][ T6456] pskb_expand_head+0x19d/0x1300 [ 231.919089][ T6456] netlink_trim+0x1b3/0x2c0 [ 231.919110][ T6456] netlink_broadcast_filtered+0xd6/0x1010 [ 231.919134][ T6456] nlmsg_notify+0xf0/0x1a0 [ 231.919159][ T6456] netif_state_change+0x297/0x3a0 [ 231.919185][ T6456] linkwatch_do_dev+0x117/0x170 [ 231.919205][ T6456] __linkwatch_run_queue+0x575/0x7f0 [ 231.919227][ T6456] page last free pid 5784 tgid 5784 stack trace: [ 231.919239][ T6456] __free_frozen_pages+0xfd0/0x1160 [ 231.919269][ T6456] __put_partials+0x149/0x170 [ 231.919289][ T6456] __slab_free+0x2af/0x330 [ 231.919316][ T6456] qlist_free_all+0x97/0x100 [ 231.919344][ T6456] kasan_quarantine_reduce+0x148/0x160 [ 231.919369][ T6456] __kasan_slab_alloc+0x22/0x80 [ 231.919407][ T6456] __kmalloc_cache_noprof+0x188/0x6b0 [ 231.919437][ T6456] nsim_fib_event+0xf3c/0xa410 [ 231.919465][ T6456] nsim_fib_event_work+0x26e/0x3e0 [ 231.919492][ T6456] process_scheduled_works+0xaec/0x17a0 [ 231.919526][ T6456] worker_thread+0xda6/0x1360 [ 231.919544][ T6456] kthread+0x726/0x8b0 [ 231.919567][ T6456] ret_from_fork+0x51b/0xa40 [ 231.919586][ T6456] ret_from_fork_asm+0x1a/0x30 [ 231.919618][ T6456] [ 231.919623][ T6456] Memory state around the buggy address: [ 231.919635][ T6456] ffff888038689100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.919650][ T6456] ffff888038689180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.919664][ T6456] >ffff888038689200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.919674][ T6456] ^ [ 231.919685][ T6456] ffff888038689280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.919698][ T6456] ffff888038689300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.919708][ T6456] ================================================================== [ 231.988858][ T6456] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 231.988883][ T6456] CPU: 1 UID: 0 PID: 6456 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 231.988902][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 231.988912][ T6456] Call Trace: [ 231.988918][ T6456] [ 231.988924][ T6456] vpanic+0x1e0/0x670 [ 231.988952][ T6456] panic+0xc5/0xd0 [ 231.988975][ T6456] ? __pfx_panic+0x10/0x10 [ 231.988998][ T6456] ? preempt_schedule_thunk+0x16/0x30 [ 231.989016][ T6456] ? preempt_schedule_thunk+0x16/0x30 [ 231.989033][ T6456] ? rt_spin_lock+0x83/0x400 [ 231.989049][ T6456] check_panic_on_warn+0x89/0xb0 [ 231.989072][ T6456] ? rt_spin_lock+0x83/0x400 [ 231.989087][ T6456] end_report+0x6f/0x140 [ 231.989110][ T6456] kasan_report+0x128/0x150 [ 231.989134][ T6456] ? rt_spin_lock+0x83/0x400 [ 231.989152][ T6456] ? __wake_up_common_lock+0x2f/0x1e0 [ 231.989169][ T6456] __kasan_check_byte+0x2a/0x40 [ 231.989208][ T6456] lock_acquire+0x84/0x330 [ 231.989230][ T6456] rt_spin_lock+0x83/0x400 [ 231.989245][ T6456] ? __wake_up_common_lock+0x2f/0x1e0 [ 231.989261][ T6456] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.989278][ T6456] ? __pfx_rt_spin_lock+0x10/0x10 [ 231.989293][ T6456] ? rt_spin_unlock+0x14f/0x200 [ 231.989310][ T6456] ? rt_spin_unlock+0x160/0x200 [ 231.989327][ T6456] __wake_up_common_lock+0x2f/0x1e0 [ 231.989346][ T6456] snd_pcm_stop+0x428/0x550 [ 231.989367][ T6456] loopback_trigger+0xb82/0x1b60 [ 231.989403][ T6456] snd_pcm_start+0x43d/0x5d0 [ 231.989424][ T6456] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 231.989454][ T6456] ? __pfx_interleaved_copy+0x10/0x10 [ 231.989479][ T6456] ? __pfx_default_write_copy+0x10/0x10 [ 231.989506][ T6456] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.989529][ T6456] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 231.989554][ T6456] ? rt_mutex_slowunlock+0x1cb/0x300 [ 231.989570][ T6456] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.989588][ T6456] ? snd_pcm_oss_write3+0x1a2/0x350 [ 231.989612][ T6456] snd_pcm_oss_write3+0x1bc/0x350 [ 231.989637][ T6456] snd_pcm_plug_write_transfer+0x2d1/0x4d0 [ 231.989656][ T6456] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 231.989673][ T6456] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 231.989693][ T6456] snd_pcm_oss_write2+0x283/0x440 [ 231.989718][ T6456] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 231.989741][ T6456] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.989763][ T6456] ? snd_pcm_oss_write+0x20d/0xbe0 [ 231.989787][ T6456] snd_pcm_oss_write+0x6d1/0xbe0 [ 231.989813][ T6456] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 231.989837][ T6456] vfs_write+0x2a3/0xba0 [ 231.989859][ T6456] ? __pfx_vfs_write+0x10/0x10 [ 231.989878][ T6456] ? __fget_files+0x2a/0x420 [ 231.989893][ T6456] ? __fget_files+0x2a/0x420 [ 231.989905][ T6456] ? __fget_files+0x3a6/0x420 [ 231.989918][ T6456] ? __fget_files+0x2a/0x420 [ 231.989934][ T6456] ksys_write+0x156/0x270 [ 231.989954][ T6456] ? __pfx_ksys_write+0x10/0x10 [ 231.989978][ T6456] do_syscall_64+0xe2/0xf80 [ 231.990000][ T6456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.990015][ T6456] ? trace_irq_disable+0x37/0x100 [ 231.990037][ T6456] ? clear_bhb_loop+0x60/0xb0 [ 231.990055][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.990071][ T6456] RIP: 0033:0x7f02fb3faeb9 [ 231.990084][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.990098][ T6456] RSP: 002b:00007f02f9635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.990114][ T6456] RAX: ffffffffffffffda RBX: 00007f02fb676090 RCX: 00007f02fb3faeb9 [ 231.990126][ T6456] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 231.990137][ T6456] RBP: 00007f02fb468c1f R08: 0000000000000000 R09: 0000000000000000 [ 231.990146][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.990156][ T6456] R13: 00007f02fb676128 R14: 00007f02fb676090 R15: 00007fffceb10158 [ 231.990174][ T6456] [ 231.990806][ T6456] Kernel Offset: disabled