last executing test programs: 6m13.643502294s ago: executing program 2 (id=23): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x2, 0xd, "087383", 0x3, 0xfc}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc) socket$inet6(0xa, 0x80003, 0x6) r4 = syz_pidfd_open(r2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 6m10.282786205s ago: executing program 2 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010040}, 0x44000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m56.204097996s ago: executing program 2 (id=44): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001800000008000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) 5m41.407864552s ago: executing program 2 (id=61): accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)=""/24, &(0x7f0000000180)=0x18) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000240)=0x101, 0x4) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 5m38.651264002s ago: executing program 2 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x38, 0x119, 0x70bd2c, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048805}, 0xc000) flistxattr(r3, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 5m37.041267564s ago: executing program 2 (id=67): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x20080) 5m21.774082582s ago: executing program 32 (id=67): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x20080) 4m33.720298311s ago: executing program 1 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,por']) r3 = socket(0x10, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f0000000480)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000380)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000003c0)=""/136, 0x88}, 0x12100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') msgctl$MSG_STAT(0x0, 0xb, 0x0) pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000040)=0x1) 4m27.992580939s ago: executing program 1 (id=151): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000000000000000000000000000000000012001000000000000000000000000000000000000000000000a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000300000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000130000004400050000000000000000000000ffffe0000002000000003c0000000200000000000000000000000000000000000000043500000403000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 4m26.795054199s ago: executing program 1 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 4m24.655851564s ago: executing program 1 (id=157): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8801, 0x100, 0x0, 0x7}) 4m23.368358038s ago: executing program 1 (id=161): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffe0001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2001}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r5, 0x2, &(0x7f0000000140)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x4, r6, 0x0, 0x0, 0x2, 0x0, 0x1}]) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_VLAN(r3, 0x0, 0x800) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x15}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x24008080) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) 4m13.554328431s ago: executing program 1 (id=178): syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8881) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000047c0), 0x0}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) lseek(0xffffffffffffffff, 0x8000000002000, 0x4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x29) 3m57.502039364s ago: executing program 33 (id=178): syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8881) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000047c0), 0x0}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) lseek(0xffffffffffffffff, 0x8000000002000, 0x4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x29) 2m47.154381612s ago: executing program 3 (id=301): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) dup(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m42.866099519s ago: executing program 3 (id=306): pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {&(0x7f00000000c0)}, {0x0}, {0x0}, {0x0}], 0x5, 0x7, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) accept(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)}, {&(0x7f0000000c40)="6dd950135126d19aaf", 0x9}], 0x2}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 2m40.672884044s ago: executing program 3 (id=309): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x6000084) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) listen(r1, 0x3) syz_open_dev$usbfs(&(0x7f0000000180), 0x2, 0x40000) accept4(r1, 0x0, 0x0, 0x0) 2m37.724713099s ago: executing program 3 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 2m36.026166171s ago: executing program 3 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto(r3, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2m31.267887153s ago: executing program 3 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000846000/0x4000)=nil) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) 2m30.084162911s ago: executing program 34 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000846000/0x4000)=nil) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) 17.704292639s ago: executing program 4 (id=693): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x3) sendmsg$unix(0xffffffffffffffff, 0x0, 0x88d4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r5, 0x7, 0x1, 0xffff}, &(0x7f0000000080)=0x10) 16.488698056s ago: executing program 4 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x40020000023896) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0x50, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x140, 0x80, 0x1, 0x0, 0xee01}}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_buf(r7, 0x0, 0x4, 0x0, 0x28) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r4, 0xc0106450, 0x0) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) 15.423365405s ago: executing program 4 (id=696): shutdown(0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x2, 0x3}, 0x18, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x80811501, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$FBIOGET_VSCREENINFO(r7, 0x4600, &(0x7f0000000400)) 13.43627252s ago: executing program 7 (id=707): syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8881) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000047c0), 0x0}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) lseek(0xffffffffffffffff, 0x8000000002000, 0x4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x29) 13.26675017s ago: executing program 5 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 11.220481592s ago: executing program 5 (id=712): ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000140)=r0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r3, 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(0xffffffffffffffff, 0x73, &(0x7f0000000040)=0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20008000) 10.425528348s ago: executing program 5 (id=715): syz_open_dev$tty1(0xc, 0x4, 0x1) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2778) 10.352429081s ago: executing program 4 (id=716): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x2, 0x1}) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) prctl$PR_SET_MM_EXE_FILE(0x52, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r1 = semget(0x0, 0x3, 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket(0x1a, 0x4, 0xfffffffd) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x10, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x0, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x20000009, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x0, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 9.842745927s ago: executing program 7 (id=718): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x8, 0x8}}], 0x58}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read$char_usb(r5, 0x0, 0x0) 8.757124021s ago: executing program 6 (id=721): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') lseek(r0, 0x1a, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x30000001000022, 0x2) r2 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8008}, 0x40041) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfdd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r3, &(0x7f0000001c40)={0x2020}, 0x2020) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000740)}, 0x20000800) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000a40)=@mmap={0x7, 0x2, 0x4, 0x40, 0x4, {}, {0x4, 0x2, 0x2, 0xf9, 0xff, 0xd, "45d02811"}, 0x0, 0x1, {}, 0x3}) 7.6924422s ago: executing program 6 (id=723): syz_open_dev$tty1(0xc, 0x4, 0x1) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2778) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) 5.882473035s ago: executing program 7 (id=725): ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r2, 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(0xffffffffffffffff, 0x73, &(0x7f0000000040)=0x4) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20008000) 5.823649097s ago: executing program 5 (id=726): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8081, &(0x7f0000000140)={0xa, 0x4e21, 0xb, @empty, 0x90000000}, 0x1c) write(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000080)=r2, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000800)={{0x3, 0x3, 0xffff, 0x5f4, 0xffffffff, 0x3}, 0x35d, [0x7ff, 0x7, 0x0, 0x2, 0xfffffff9, 0x0, 0x3, 0x9, 0x3, 0x8, 0x7ff, 0x5f, 0x5, 0x457d, 0x4c, 0x5f6e1b05, 0x2, 0x9, 0x3, 0x2, 0x7, 0x1, 0x8, 0xffffffff, 0x40, 0x1, 0x7fff, 0x3, 0xf8e6, 0x678, 0x0, 0x8, 0x1, 0x400000, 0xf, 0x0, 0x7, 0x1, 0x1be, 0x7fff, 0x0, 0x8, 0x0, 0x5, 0x94b5, 0x6, 0xa, 0x1, 0x800, 0x7, 0x8, 0x6, 0xf9e4, 0x0, 0x7, 0x0, 0x8, 0x81, 0x5, 0x3, 0x8, 0x2, 0x8, 0x0, 0x1000, 0x1, 0x101, 0x80000001, 0x101, 0x7, 0x0, 0x51b5, 0x6, 0x9, 0xb, 0x36c5, 0x9, 0x0, 0x52, 0xb, 0x200, 0x60, 0x2, 0x5, 0x800, 0x0, 0xfffffe01, 0x1, 0x8, 0x9, 0x2, 0x401, 0xb0, 0x101, 0x4f, 0x81, 0xfff, 0x7, 0x5, 0x800, 0x7f, 0x6f, 0xffff, 0xa, 0xffffff01, 0x4, 0xb2, 0x1, 0x1, 0x6, 0xb0c, 0x10, 0x5, 0x2, 0xffff, 0x40, 0x0, 0xfffffffa, 0xfff, 0x7d, 0x0, 0x7, 0x5, 0x4, 0x3, 0x7, 0x5, 0x7, 0x9, 0x8000, 0x3, 0x4, 0x10, 0x5, 0x4, 0xc7b82e4, 0x9, 0x80000000, 0x8, 0x8, 0xfe2d, 0x85, 0x0, 0x9, 0xb, 0xb, 0x2, 0xff, 0x2, 0x0, 0x32bd, 0x752, 0xfff, 0x9, 0x4, 0xdb, 0x5, 0xa, 0x54e, 0xac6, 0x9, 0xd8, 0x25, 0x2, 0x6, 0x1, 0xfffffffc, 0x7fff, 0x3, 0x1, 0x7ff, 0x8, 0x7, 0x7, 0x9, 0x6, 0x0, 0x6, 0x0, 0x3, 0x7ff, 0x7f, 0x6491, 0x8, 0x9, 0x3, 0xffff, 0x9, 0x6, 0x0, 0x8, 0x2, 0xc, 0x8, 0x6, 0x7, 0x7ff, 0x9, 0x2, 0xc0000000, 0x401, 0x5, 0x6, 0x9, 0x213, 0x2, 0xfffffff2, 0xffffff87, 0x1, 0x6c2, 0x0, 0x5, 0x4a968a9f, 0x170, 0x4, 0x6, 0x9, 0x293, 0x6, 0x3, 0x0, 0x401, 0x8, 0xde69, 0x4, 0x8, 0x2, 0x3, 0x1, 0x1, 0x3, 0xd2f, 0x7, 0x5ea6, 0xa7d1, 0x7, 0x0, 0x7, 0x3, 0x2, 0x4, 0x316c, 0x0, 0x6, 0x5, 0x14e, 0x10, 0x4, 0xfb8, 0x7, 0x80, 0x5, 0xaf0, 0xf, 0x3, 0x4, 0x3, 0xfffffffc, 0x6, 0x8, 0x52cb, 0x8, 0x8, 0x7, 0x6, 0x4, 0x7, 0x2, 0x0, 0x5, 0x3, 0xb, 0x12, 0x4, 0x9, 0x7, 0x200, 0x5, 0x2, 0x56c2, 0x9, 0x6, 0xf, 0x1000, 0x8, 0xfffffc5d, 0x5, 0xffffffff, 0x6, 0x7, 0x0, 0xd7d, 0xffffffff, 0x9, 0x0, 0x8, 0x1, 0xfffffffa, 0x6, 0x8, 0xb9d, 0x7, 0x400, 0x10001, 0x1, 0x6, 0x5, 0x2, 0x9, 0x39d, 0x8, 0x9, 0x9760, 0x8, 0x36, 0x9, 0x8, 0x1b27, 0x1, 0xcf, 0x3, 0x7, 0xc8, 0x4, 0x5, 0xfffffff4, 0xffff74a4, 0x3, 0x2, 0xe, 0x8, 0x3, 0x3, 0xffffff36, 0x929, 0x8, 0x401, 0x3, 0xeb1, 0x79, 0x0, 0xb9, 0x93, 0x2, 0x0, 0x200, 0x6, 0xe32, 0x6, 0x0, 0x0, 0xfffffffa, 0x8a, 0x1, 0x7, 0x8, 0xb60, 0x9, 0x401, 0x732, 0x2, 0x5, 0x9, 0x9, 0x2, 0x4, 0xad8, 0x8d, 0x2, 0x5, 0x2, 0x2, 0x8, 0x2, 0x3, 0x8, 0x8, 0x3, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4, 0x5f, 0x8, 0xc, 0x2, 0x200, 0x8, 0x4, 0x100, 0x5, 0x3, 0x10a0000, 0x6, 0x7, 0x3, 0x55, 0x5, 0x10001, 0xbea, 0x0, 0x6, 0x800, 0x9, 0xa, 0xab07, 0x4, 0x0, 0x3, 0x7fff, 0x6, 0x9, 0x2, 0x6, 0x3, 0xd, 0x4, 0x7f, 0xffff, 0xa, 0x4, 0x8, 0x9, 0x9, 0x4, 0x8, 0x45, 0x4, 0x81, 0x6, 0x8, 0x7ff, 0x7, 0x99b0, 0xfffffff2, 0xb65, 0x4, 0x9, 0x80, 0x400, 0x8, 0x1, 0xfffffffe, 0x1, 0x10, 0x0, 0x0, 0x0, 0x2, 0x2, 0xb, 0x1, 0x8, 0x65ee, 0x6a, 0x404e, 0x1, 0xe5, 0x1c000000, 0x572, 0x100, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x5, 0x3, 0x1, 0x7, 0x2, 0xd9b, 0x1, 0x4b, 0x517f, 0xfff, 0x3, 0x1, 0xeed, 0x7, 0x7, 0x7b42, 0x7fff, 0x80000001, 0xd8, 0xfffffff7, 0x5d, 0x9, 0x5, 0x1, 0x5, 0x439, 0x9, 0x7, 0x2, 0x5, 0xb, 0xd, 0x35, 0xfffffffe, 0x30de, 0x1, 0x8, 0x5, 0xfffffc01, 0x8100, 0x8, 0x80000001, 0x1, 0x0, 0x0, 0xe1, 0x3ff, 0xe, 0x341c, 0x6, 0x7, 0x9, 0x1, 0x2, 0x8, 0x2, 0x40, 0xf, 0x9, 0x5000, 0x3, 0x84, 0x4, 0xa8, 0x1a, 0x8, 0x7, 0x5, 0xabca, 0x0, 0x5, 0x4, 0x841, 0xfff, 0x800, 0x5, 0x8, 0x9, 0x9f3d, 0x9, 0x9, 0x2, 0xfffffff8, 0xffff, 0x1, 0x80, 0x5, 0x4, 0x7, 0x5, 0xb9, 0x4f5, 0x1ff, 0x3b0f, 0x0, 0xff, 0x7, 0x4, 0x1, 0x5, 0x7, 0x9, 0x3, 0x909, 0x2, 0x1, 0x6, 0x17, 0x7, 0x8, 0x10, 0x4b2b, 0x9, 0x2, 0x10000, 0x4, 0x1, 0x7, 0x9, 0x2, 0x8, 0x0, 0x7, 0x7, 0x6, 0x8, 0x2, 0x8, 0x0, 0x81ae, 0x6, 0x5, 0xfff, 0x7, 0xa56, 0xcb66, 0x4, 0x4, 0x9, 0x6, 0x4, 0xffff, 0x1f9d, 0x401, 0x0, 0xffff, 0x80000000, 0x200, 0x4, 0x6, 0xc, 0x1ff, 0x200, 0x1, 0x7fff, 0x7, 0x796, 0xffffff81, 0x7, 0x7, 0x8, 0x9bc, 0x401, 0x3, 0x5, 0x1000, 0x34, 0x9, 0x101, 0xfffffffa, 0x6, 0x7fffffff, 0x20e9, 0x8, 0x7fff, 0x7, 0x1, 0x5, 0x7d, 0x5, 0x7ff, 0xde, 0x8, 0x45, 0x3, 0x5, 0x5, 0x7fff, 0x1, 0x0, 0x6, 0x9, 0x3, 0x8, 0x3, 0x3e, 0xffff, 0x4, 0x4997, 0x9, 0xa66, 0x7fff, 0x7, 0x4, 0x8, 0x23f, 0x3, 0xffffffff, 0x3, 0x5, 0x3, 0x9, 0x5, 0x8, 0x10000, 0x3, 0x4, 0x8, 0x8, 0x0, 0x1, 0x9, 0x7f, 0xa7, 0x0, 0x7, 0x3ff, 0xffffffff, 0x8, 0x8, 0x7ae, 0x100, 0x800, 0x0, 0x7, 0x2, 0x6, 0xffff, 0x80, 0x100, 0x7fff, 0x1e1, 0x80000, 0x7, 0xafa, 0x6, 0xb, 0xc, 0x77, 0x5, 0x6, 0xffff, 0x8, 0x76e7, 0xfb, 0xa3f, 0x5, 0x2, 0xffffff7f, 0x7, 0x4, 0x400, 0x9, 0x8, 0x4, 0x0, 0x3, 0x72, 0x0, 0x3, 0x1, 0x0, 0xd, 0x6, 0xfffffff8, 0x9, 0x2, 0x2, 0x5d, 0x4, 0x95, 0x9, 0x2, 0x1000, 0xffffff01, 0x10000, 0x2, 0xeb, 0x3c, 0x8, 0x9, 0x4, 0x0, 0x6, 0x6, 0x7, 0x6, 0x200, 0x2, 0xa9, 0x8, 0x0, 0x4, 0xb, 0x8, 0x0, 0x7e0d, 0x7fffffff, 0x2, 0x8, 0xe, 0x6, 0x4bfb, 0x4, 0x7, 0x1, 0x7, 0x400, 0x7, 0x3, 0x7f, 0x4, 0x9, 0x7f, 0x0, 0x40, 0xb, 0x1, 0x4, 0xdecf, 0x1000, 0x0, 0x100, 0x9, 0xb, 0x80000001, 0x6, 0xce7, 0x2, 0x8, 0x7, 0x400, 0x80000001, 0x1, 0x2, 0x2, 0x8, 0x8, 0x6, 0xd, 0x3, 0xfffffff9, 0x0, 0x101, 0x1, 0x0, 0x3, 0x5, 0x4, 0x9f93, 0xffff, 0x7f, 0x5, 0xfffff800, 0x7, 0x9, 0x8, 0x6, 0x800, 0x971, 0x2, 0xfffffff8, 0x0, 0x5, 0x8001, 0x0, 0x7f, 0x792, 0x95, 0x1, 0x4, 0x819, 0xe, 0x8, 0x10, 0x4, 0xdb, 0x35f, 0x0, 0x9, 0x12, 0x5, 0x4, 0xffff, 0x101, 0x6, 0x0, 0xfff, 0x3500, 0x4, 0x1, 0x5, 0x800, 0x10000, 0x8, 0x3, 0x2144, 0x4, 0x9, 0xb7, 0x3000, 0x8, 0x80000001, 0x3, 0x9, 0x5, 0x9, 0x3fbf, 0x395, 0x2, 0x0, 0x61, 0x1000, 0x7, 0x7, 0x2, 0x3, 0x1, 0x6, 0xffffffff, 0x6, 0x4, 0x1, 0x2, 0x5, 0x20, 0x80000001, 0xb23, 0x0, 0x3, 0x1, 0x1000, 0x1, 0x2, 0xd, 0x6, 0xa6, 0xfffffe00, 0x7, 0x9, 0x3, 0x10001, 0x6, 0x9, 0xd42, 0x9, 0xd, 0x2, 0x2, 0x2, 0x7, 0x8, 0x1, 0x282b, 0x3, 0xfffffffd, 0x22, 0x7329c0e, 0x9, 0xffffffb2, 0x2, 0x10, 0x3, 0x3, 0x23703736, 0x7, 0x3, 0x10001, 0x2, 0x8, 0xc, 0x3, 0x5, 0x5, 0x7, 0x4, 0x6, 0x3, 0x6, 0x9, 0x3, 0x5, 0x6, 0x3, 0xdea5, 0x0, 0xffff, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x101, 0x3b4c0, 0x1c00000, 0x5, 0x3, 0x1, 0x8, 0x0, 0x7, 0xffff, 0x7, 0x0, 0x9, 0x1ff, 0x2, 0xae9, 0x32b87784, 0x80, 0xfffff162, 0x3, 0x4, 0x6, 0x40, 0xffff, 0x5, 0x2, 0x5, 0x3, 0x7d, 0x4, 0x5, 0x1, 0x400, 0x4, 0x9, 0x1c000000, 0x5, 0xacca, 0x5, 0xd, 0x9, 0x81, 0x8000, 0x80000001, 0xfffffffb, 0xffff, 0xd509, 0x4, 0x4, 0x4, 0x0, 0xfffffff1, 0x8]}) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x8000, @mcast1, 0x7ff}, {0xa, 0x4e23, 0x8, @empty, 0x401}, 0x1, {[0x9, 0x7ff, 0x5, 0x200, 0x6, 0x6, 0xa0b70e0, 0x80000001]}}, 0x5c) socket$netlink(0x10, 0x3, 0x0) 5.299751213s ago: executing program 4 (id=727): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) execve(0x0, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000380)={0x0, 0x5, 0x200d, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.203108457s ago: executing program 7 (id=729): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x3) sendmsg$unix(r1, 0x0, 0x88d4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r6, 0x7, 0x1, 0xffff}, &(0x7f0000000080)=0x10) 3.793302632s ago: executing program 6 (id=730): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x3) sendmsg$unix(r1, 0x0, 0x88d4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r6, 0x7, 0x1, 0xffff}, &(0x7f0000000080)=0x10) 3.323962943s ago: executing program 5 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000140)={0x3, 0xfffffffc, 0x8}) setpgid(r0, 0x0) setpgid(0x0, r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x20000051) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) umount2(0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x8401) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x8000000000000000}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80}}, 0x50) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 2.184295009s ago: executing program 6 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto(r2, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2.174302141s ago: executing program 7 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000140)={0x3, 0xfffffffc, 0x8}) setpgid(r0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x20000051) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x8401) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x8000000000000000}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80}}, 0x50) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 1.883283718s ago: executing program 4 (id=737): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x3) sendmsg$unix(r1, 0x0, 0x88d4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r6, 0x7, 0x1, 0xffff}, &(0x7f0000000080)=0x10) 1.659296394s ago: executing program 7 (id=739): ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r2, 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(0xffffffffffffffff, 0x73, &(0x7f0000000040)=0x4) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20008000) 1.364930252s ago: executing program 0 (id=741): syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8881) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000047c0), 0x0}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) lseek(0xffffffffffffffff, 0x8000000002000, 0x4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000800000000000006000000000000000b0000000000100001fefffffffffffffff9123e43e622382f2dbb95d23b8cf83b2806a65746dd9b83e132e4e2947bf3cd72c3ab0b983c63ef03fc831b6829d2bb7fccd349a1675dcf349b1f20bcc8e5b6a557d4f55390a4978199e304ab60c368a98b429cf207a3f26f7551ba1239e2681115525a04c631798618c3a0b75cdddcabfa57ec4581fa4d363a191481e8fef0372a5d55973bc7abfe42a89349d9ab18320d7db722ac0279b8a7f1c4f9b73269e424aeab692bb75dfd4855b0a36c8aabb784f00ed885dce96b6b996bbcfc8a10a2b6a3acd96747d4729fbaa5c41ec52ee3ffde9a4c1a71ab4f7dbbe6ddb16098790b86ad42803f00000000000000003d239dd99726a8bd1ec59064b7a715a41e4db7fdb4bd138a42acdc5fbef8784913de2c48a6d275f7558ea6ad3f5fea64c9e4c6ead5a93b8a5061eff4218719a63ed22275cfc4074828171f3570a3589d7b4882179f7e0ecb"], 0x29) 1.208028515s ago: executing program 0 (id=742): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xc7e, 0x5, {r0}, {}, 0x7a, 0x3}) setresuid(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x1, @ANYBLOB="030000000000000000", @ANYRES32=0x0, @ANYBLOB="020000000000000002000000000000010000000000000000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) accept(r4, 0x0, 0x0) 1.109157162s ago: executing program 6 (id=743): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x3) sendmsg$unix(r1, 0x0, 0x88d4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r6, 0x7, 0x1, 0xffff}, &(0x7f0000000080)=0x10) 1.031841632s ago: executing program 0 (id=744): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x3) sendmsg$unix(r1, 0x0, 0x88d4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r6, 0x7, 0x1, 0xffff}, &(0x7f0000000080)=0x10) 497.839417ms ago: executing program 0 (id=745): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7f7d, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000002640)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) 242.158387ms ago: executing program 0 (id=746): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100), 0x1) ftruncate(r1, 0x51a9497) r2 = userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200480d5) syslog(0x4, 0x0, 0x0) syslog(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 200.20674ms ago: executing program 5 (id=747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) socket$rds(0x15, 0x5, 0x0) msgrcv(0x0, 0x0, 0x2000, 0x1, 0x5800) socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000580)=[{}], 0x1, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000a804) 52.670712ms ago: executing program 6 (id=748): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xc7e, 0x5, {r0}, {}, 0x7a, 0x3}) setresuid(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x1, @ANYBLOB="0300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000002000000000000010000000000000000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r4, 0x0, 0x0) 0s ago: executing program 0 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000140)={0x3, 0xfffffffc, 0x8}) setpgid(0x0, r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x20000051) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x8401) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x8000000000000000}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80}}, 0x50) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) kernel console output (not intermixed with test programs): atadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.659736][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.700610][ T5794] team0: Port device team_slave_1 added [ 80.701661][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.701673][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.701696][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.786871][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.786888][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.786911][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.789249][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.789261][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.789283][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.812778][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.812793][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.812816][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.814525][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.814538][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.814560][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.838454][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.838468][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.838491][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.890791][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.890805][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.890829][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.940811][ T5793] hsr_slave_0: entered promiscuous mode [ 80.942490][ T5793] hsr_slave_1: entered promiscuous mode [ 81.032294][ T5791] hsr_slave_0: entered promiscuous mode [ 81.033786][ T5791] hsr_slave_1: entered promiscuous mode [ 81.034788][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 81.034892][ T5791] Cannot create hsr debugfs directory [ 81.074293][ T5792] hsr_slave_0: entered promiscuous mode [ 81.076020][ T5792] hsr_slave_1: entered promiscuous mode [ 81.076873][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 81.076894][ T5792] Cannot create hsr debugfs directory [ 81.127377][ T5795] hsr_slave_0: entered promiscuous mode [ 81.128672][ T5795] hsr_slave_1: entered promiscuous mode [ 81.129536][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 81.129557][ T5795] Cannot create hsr debugfs directory [ 81.350889][ T5794] hsr_slave_0: entered promiscuous mode [ 81.351556][ T5794] hsr_slave_1: entered promiscuous mode [ 81.352064][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 81.352078][ T5794] Cannot create hsr debugfs directory [ 81.513577][ T31] cfg80211: failed to load regulatory.db [ 82.070573][ T5793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.096214][ T5793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.131879][ T5793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.178731][ T5793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.267994][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.295607][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.333693][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.380528][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.494911][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.524068][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.545724][ T5111] Bluetooth: hci2: command tx timeout [ 82.545741][ T5807] Bluetooth: hci4: command tx timeout [ 82.555619][ T5807] Bluetooth: hci0: command tx timeout [ 82.555647][ T5807] Bluetooth: hci3: command tx timeout [ 82.555702][ T5111] Bluetooth: hci1: command tx timeout [ 82.588327][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.634408][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.734175][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.761895][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.805285][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.855332][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.958162][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.990997][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.031442][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.078865][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.112808][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.172121][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.214942][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.217352][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.248770][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.250482][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.250621][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.329036][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.364562][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.364682][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.370796][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.401777][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.401901][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.459495][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.482324][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.491750][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.491957][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.516444][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.518083][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.588190][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.594860][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.594981][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.629060][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.660020][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.660153][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.744224][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.793834][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.794761][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.834295][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.834484][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.924262][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.281106][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.442915][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.562880][ T5791] veth0_vlan: entered promiscuous mode [ 84.573170][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.613793][ T5791] veth1_vlan: entered promiscuous mode [ 84.635517][ T5111] Bluetooth: hci3: command tx timeout [ 84.635547][ T5111] Bluetooth: hci4: command tx timeout [ 84.635567][ T5111] Bluetooth: hci1: command tx timeout [ 84.635601][ T5111] Bluetooth: hci0: command tx timeout [ 84.635622][ T5111] Bluetooth: hci2: command tx timeout [ 84.678437][ T5792] veth0_vlan: entered promiscuous mode [ 84.682418][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.718066][ T5792] veth1_vlan: entered promiscuous mode [ 84.767222][ T5791] veth0_macvtap: entered promiscuous mode [ 84.780049][ T5795] veth0_vlan: entered promiscuous mode [ 84.792488][ T5793] veth0_vlan: entered promiscuous mode [ 84.800339][ T5791] veth1_macvtap: entered promiscuous mode [ 84.831426][ T5795] veth1_vlan: entered promiscuous mode [ 84.839251][ T5793] veth1_vlan: entered promiscuous mode [ 84.868952][ T5792] veth0_macvtap: entered promiscuous mode [ 84.873617][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.873862][ T5794] veth0_vlan: entered promiscuous mode [ 84.906371][ T5792] veth1_macvtap: entered promiscuous mode [ 84.910624][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.940937][ T5794] veth1_vlan: entered promiscuous mode [ 84.944300][ T165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.960746][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.969932][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.978930][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.999053][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.010660][ T5795] veth0_macvtap: entered promiscuous mode [ 85.054625][ T5793] veth0_macvtap: entered promiscuous mode [ 85.063037][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.075083][ T5795] veth1_macvtap: entered promiscuous mode [ 85.119986][ T5793] veth1_macvtap: entered promiscuous mode [ 85.127502][ T1464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.142908][ T1464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.154259][ T1464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.190127][ T1464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.259555][ T5794] veth0_macvtap: entered promiscuous mode [ 85.284859][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.307115][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.351861][ T5794] veth1_macvtap: entered promiscuous mode [ 85.365096][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.365118][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.366616][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.396768][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.462589][ T1127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.485202][ T1127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.508050][ T1127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.512853][ T1127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.526238][ T1127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.528355][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.528370][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.539209][ T1127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.544240][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.548146][ T1127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.603150][ T1127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.705009][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.751178][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.751195][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.884815][ T1464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.146936][ T1464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.287710][ T1464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.315482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.643392][ T1464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.688140][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.688158][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.705593][ T5807] Bluetooth: hci2: command tx timeout [ 86.705614][ T5111] Bluetooth: hci0: command tx timeout [ 86.705624][ T5807] Bluetooth: hci1: command tx timeout [ 86.705636][ T5111] Bluetooth: hci4: command tx timeout [ 86.705644][ T5807] Bluetooth: hci3: command tx timeout [ 86.816134][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.816167][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.836655][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.836676][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.079645][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.079663][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.103138][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.326830][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.326849][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.418115][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.418134][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.225556][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.225574][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.940473][ T5975] netlink: 324 bytes leftover after parsing attributes in process `syz.2.16'. [ 97.924735][ T810] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.245437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.429856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 98.620424][ T810] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 98.620461][ T810] usb 2-1: config 0 has no interface number 0 [ 98.621084][ T810] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 98.621113][ T810] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.663986][ T810] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 98.664042][ T810] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 98.664063][ T810] usb 2-1: Manufacturer: syz [ 98.664077][ T810] usb 2-1: SerialNumber: syz [ 99.122711][ T810] usb 2-1: config 0 descriptor?? [ 99.453351][ T5992] netlink: 260 bytes leftover after parsing attributes in process `syz.3.21'. [ 99.955419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.344041][ T5910] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.345060][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 101.506683][ T5910] usb 4-1: device descriptor read/64, error -32 [ 102.666363][ T5910] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 103.187039][ T810] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 103.187600][ T810] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 103.270010][ T810] usb 2-1: USB disconnect, device number 2 [ 103.445440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.455445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.465430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.468484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.475424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.485429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.795903][ T6006] ptrace attach of "./syz-executor exec"[6010] was attempted by "./syz-executor exec"[6006] [ 110.063689][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 114.403408][ T6054] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.283826][ T6057] tipc: Started in network mode [ 115.283846][ T6057] tipc: Node identity 6a0f3194824d, cluster identity 4711 [ 115.284049][ T6057] tipc: Enabled bearer , priority 0 [ 115.304699][ T6057] syzkaller0: entered promiscuous mode [ 115.304712][ T6057] syzkaller0: entered allmulticast mode [ 115.547684][ T6063] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.906778][ T6066] tipc: Resetting bearer [ 116.935635][ T6056] tipc: Resetting bearer [ 117.014843][ T5810] Bluetooth: hci1: unexpected event 0x04 length: 245 > 10 [ 117.014963][ T5810] Bluetooth: hci1: connection err: -111 [ 117.146794][ T6056] tipc: Disabling bearer [ 117.228480][ T6079] Zero length message leads to an empty skb [ 119.155561][ T5918] tipc: Node number set to 3896652180 [ 120.340660][ T37] audit: type=1804 audit(1772588147.617:2): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.41" name="/newroot/7/file1" dev="fuse" ino=1 res=1 errno=0 [ 120.553169][ T6096] kAFS: unable to lookup cell '' [ 126.818190][ T6133] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 126.818231][ T6133] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 126.818250][ T6133] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 128.131208][ T6145] mmap: syz.3.51 (6145) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.466411][ T6159] ======================================================= [ 130.466411][ T6159] WARNING: The mand mount option has been deprecated and [ 130.466411][ T6159] and is ignored by this kernel. Remove the mand [ 130.466411][ T6159] option from the mount to silence this warning. [ 130.466411][ T6159] ======================================================= [ 131.597907][ T6163] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 131.721750][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.751791][ T6163] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 131.920059][ T6161] binder: 6160:6161 ioctl 4018620d 0 returned -22 [ 132.669355][ T6161] binder: 6160:6161 ioctl c0306201 0 returned -14 [ 132.726240][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.726322][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.384613][ T6173] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 135.891613][ T6185] netlink: 'syz.0.63': attribute type 21 has an invalid length. [ 135.892168][ T6185] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.215148][ T37] audit: type=1326 audit(1772588166.097:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.217839][ T37] audit: type=1326 audit(1772588166.107:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.218143][ T37] audit: type=1326 audit(1772588166.107:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.218365][ T37] audit: type=1326 audit(1772588166.107:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.218557][ T37] audit: type=1326 audit(1772588166.107:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.218727][ T37] audit: type=1326 audit(1772588166.117:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.218922][ T37] audit: type=1326 audit(1772588166.117:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.219173][ T37] audit: type=1326 audit(1772588166.117:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.219350][ T37] audit: type=1326 audit(1772588166.117:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 139.219518][ T37] audit: type=1326 audit(1772588166.127:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f57a3adc799 code=0x7ffc0000 [ 140.148862][ T5882] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 140.988606][ T5882] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 140.988639][ T5882] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 140.988666][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.010377][ T5882] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.010407][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.010426][ T5882] usb 3-1: Product: syz [ 141.010440][ T5882] usb 3-1: Manufacturer: syz [ 141.010454][ T5882] usb 3-1: SerialNumber: syz [ 141.029032][ T5882] usb 3-1: config 0 descriptor?? [ 141.053843][ T5882] usb 3-1: selecting invalid altsetting 0 [ 141.461723][ T6215] netlink: 68 bytes leftover after parsing attributes in process `syz.0.70'. [ 144.972554][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 144.972565][ T37] audit: type=1804 audit(1772588172.197:17): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.73" name="/newroot/22/file0" dev="tmpfs" ino=133 res=1 errno=0 [ 144.994655][ T5910] IPVS: starting estimator thread 0... [ 146.164830][ T6230] IPVS: using max 8 ests per chain, 19200 per kthread [ 150.033472][ T6253] warning: `syz.3.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.327574][ T6260] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 152.327592][ T6260] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.153056][ T6266] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 153.163019][ T6260] vhci_hcd vhci_hcd.0: Device attached [ 153.586861][ T6262] vhci_hcd: connection closed [ 153.592862][ T43] vhci_hcd vhci_hcd.3: stop threads [ 153.594187][ T43] vhci_hcd vhci_hcd.3: release socket [ 154.487349][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 156.726053][ T6287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.788044][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.805653][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.814296][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.837788][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.838497][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.651297][ T5810] Bluetooth: hci5: command tx timeout [ 165.665999][ T5810] Bluetooth: hci5: command tx timeout [ 168.190529][ T5810] Bluetooth: hci5: command tx timeout [ 168.280309][ T6320] NFSD: Failed to start, no listeners configured. [ 168.281508][ T6295] chnl_net:caif_netlink_parms(): no params data found [ 169.635458][ T809] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 169.877650][ T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.877703][ T809] usb 4-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 169.877726][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.771303][ T5810] Bluetooth: hci5: command tx timeout [ 171.622949][ T809] usb 4-1: config 0 descriptor?? [ 171.643450][ T809] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 175.229821][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.229951][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.230132][ T6295] bridge_slave_0: entered allmulticast mode [ 175.267247][ T6295] bridge_slave_0: entered promiscuous mode [ 175.273257][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.273448][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.273616][ T6295] bridge_slave_1: entered allmulticast mode [ 175.489739][ T6295] bridge_slave_1: entered promiscuous mode [ 177.145215][ T5910] usb 4-1: USB disconnect, device number 4 [ 177.814339][ T5918] usb 3-1: USB disconnect, device number 2 [ 183.007302][ T6397] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.075376][ T6399] comedi comedi3: reset error (fatal) [ 184.217152][ T5810] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 184.563339][ T6295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.118880][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.203670][ T6295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.250197][ T37] audit: type=1804 audit(1772588215.527:18): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.120" name="/newroot/23/file0" dev="tmpfs" ino=141 res=1 errno=0 [ 188.285533][ T1231] IPVS: starting estimator thread 0... [ 188.455582][ T6436] IPVS: using max 15 ests per chain, 36000 per kthread [ 189.980357][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.094036][ T6295] team0: Port device team_slave_0 added [ 191.114608][ T6295] team0: Port device team_slave_1 added [ 191.419878][ T6459] gfs2: path_lookup on  returned error -2 [ 191.464881][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.705070][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.705085][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.705109][ T6295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.727423][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.727437][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.727455][ T6295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.798881][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.798948][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.036369][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.076044][ T6476] Set syz1 is full, maxelem 6117 reached [ 198.206818][ T6295] hsr_slave_0: entered promiscuous mode [ 198.207518][ T6295] hsr_slave_1: entered promiscuous mode [ 198.207966][ T6295] debugfs: 'hsr0' already exists in 'hsr' [ 198.207979][ T6295] Cannot create hsr debugfs directory [ 198.406260][ T6495] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.767724][ T37] audit: type=1804 audit(1772588226.037:19): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.136" name="/newroot/26/file0" dev="tmpfs" ino=155 res=1 errno=0 [ 198.785758][ T809] IPVS: starting estimator thread 0... [ 198.885605][ T6505] IPVS: using max 9 ests per chain, 21600 per kthread [ 199.541685][ T6295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.670780][ T6295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.897785][ T6295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.106684][ T37] audit: type=1326 audit(1772588227.277:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.107145][ T37] audit: type=1326 audit(1772588227.287:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.107467][ T37] audit: type=1326 audit(1772588227.297:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.107797][ T37] audit: type=1326 audit(1772588227.297:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.110884][ T37] audit: type=1326 audit(1772588227.297:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.111204][ T37] audit: type=1326 audit(1772588227.297:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.111489][ T37] audit: type=1326 audit(1772588227.307:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.111814][ T37] audit: type=1326 audit(1772588227.307:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.112156][ T37] audit: type=1326 audit(1772588227.307:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6513 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 200.947449][ T43] bridge_slave_1: left allmulticast mode [ 200.947559][ T43] bridge_slave_1: left promiscuous mode [ 200.968721][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.809812][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 201.810044][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 201.811017][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 201.811210][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 202.934700][ T43] bridge_slave_0: left allmulticast mode [ 202.934727][ T43] bridge_slave_0: left promiscuous mode [ 202.934948][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.526183][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 203.665834][ T9] usb 4-1: device descriptor read/64, error -71 [ 203.931167][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 204.232649][ T9] usb 4-1: device descriptor read/64, error -71 [ 204.352167][ T9] usb usb4-port1: attempt power cycle [ 205.367331][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 205.386365][ T9] usb 4-1: device descriptor read/8, error -71 [ 206.064630][ T6562] process 'syz.4.148' launched './file0' with NULL argv: empty string added [ 207.532321][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 207.685920][ T9] usb 4-1: device descriptor read/8, error -71 [ 207.797935][ T9] usb usb4-port1: unable to enumerate USB device [ 208.017554][ T1231] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 208.106154][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.376163][ T1231] usb 5-1: no configurations [ 208.376182][ T1231] usb 5-1: can't read configurations, error -22 [ 208.416913][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.458784][ T43] bond0 (unregistering): Released all slaves [ 208.497301][ T6295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.511561][ T1231] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 208.581741][ T43] tipc: Left network mode [ 208.666628][ T1231] usb 5-1: no configurations [ 208.666648][ T1231] usb 5-1: can't read configurations, error -22 [ 208.667011][ T1231] usb usb5-port1: attempt power cycle [ 208.753149][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.141062][ T6588] netlink: 68 bytes leftover after parsing attributes in process `syz.1.151'. [ 209.336010][ T1231] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 209.681077][ T1231] usb 5-1: no configurations [ 209.681097][ T1231] usb 5-1: can't read configurations, error -22 [ 209.825587][ T1231] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 209.850549][ T1231] usb 5-1: no configurations [ 209.850561][ T1231] usb 5-1: can't read configurations, error -22 [ 209.853271][ T1231] usb usb5-port1: unable to enumerate USB device [ 212.041772][ T6295] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.082523][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.082725][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.110735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.110863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.337311][ T6616] sch_tbf: burst 20736 is lower than device lo mtu (65550) ! [ 213.344534][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 213.346477][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 213.525513][ T36] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 213.665695][ T36] usb 5-1: device descriptor read/64, error -71 [ 213.925492][ T36] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 214.065487][ T36] usb 5-1: device descriptor read/64, error -71 [ 214.116857][ T43] hsr_slave_0: left promiscuous mode [ 214.155480][ T43] hsr_slave_1: left promiscuous mode [ 214.158043][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.158092][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.186690][ T36] usb usb5-port1: attempt power cycle [ 214.204631][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.204657][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.386101][ T43] veth1_macvtap: left promiscuous mode [ 214.386289][ T43] veth0_macvtap: left promiscuous mode [ 214.387088][ T43] veth1_vlan: left promiscuous mode [ 214.387527][ T43] veth0_vlan: left promiscuous mode [ 214.525612][ T36] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 214.546572][ T36] usb 5-1: device descriptor read/8, error -71 [ 214.815547][ T36] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 214.839595][ T36] usb 5-1: device descriptor read/8, error -71 [ 214.948438][ T36] usb usb5-port1: unable to enumerate USB device [ 214.988997][ T5797] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 215.891322][ T5797] usb 4-1: no configurations [ 215.891341][ T5797] usb 4-1: can't read configurations, error -22 [ 216.055501][ T5797] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 216.131055][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.135246][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.153449][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.167263][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.173302][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.208117][ T5797] usb 4-1: no configurations [ 216.208133][ T5797] usb 4-1: can't read configurations, error -22 [ 216.210288][ T5797] usb usb4-port1: attempt power cycle [ 216.545828][ T5797] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 216.567296][ T5797] usb 4-1: no configurations [ 216.567313][ T5797] usb 4-1: can't read configurations, error -22 [ 216.695570][ T5797] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 216.716986][ T5797] usb 4-1: no configurations [ 216.717003][ T5797] usb 4-1: can't read configurations, error -22 [ 216.717349][ T5797] usb usb4-port1: unable to enumerate USB device [ 218.273981][ T5111] Bluetooth: hci2: command tx timeout [ 220.811116][ T5111] Bluetooth: hci2: command tx timeout [ 220.943879][ T43] team0 (unregistering): Port device team_slave_1 removed [ 221.172700][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 221.172747][ T37] audit: type=1107 audit(1772588248.447:34): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 221.348153][ T43] team0 (unregistering): Port device team_slave_0 removed [ 222.875718][ T5111] Bluetooth: hci2: command tx timeout [ 223.295536][ T5934] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 223.435586][ T5934] usb 5-1: device descriptor read/64, error -71 [ 224.423416][ T6641] chnl_net:caif_netlink_parms(): no params data found [ 224.903773][ T5934] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 224.945625][ T5111] Bluetooth: hci2: command tx timeout [ 225.045479][ T5934] usb 5-1: device descriptor read/64, error -71 [ 225.155898][ T5934] usb usb5-port1: attempt power cycle [ 225.159995][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.160184][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.160344][ T6641] bridge_slave_0: entered allmulticast mode [ 225.162816][ T6641] bridge_slave_0: entered promiscuous mode [ 225.201907][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.202084][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.249198][ T6641] bridge_slave_1: entered allmulticast mode [ 225.277879][ T6641] bridge_slave_1: entered promiscuous mode [ 225.516965][ T1231] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 225.535558][ T5934] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 225.556203][ T5934] usb 5-1: device descriptor read/8, error -71 [ 226.915476][ T5934] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 227.389650][ T5934] usb 5-1: device descriptor read/8, error -71 [ 227.450823][ T1231] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 227.450841][ T1231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.453579][ T1231] usb 2-1: config 0 descriptor?? [ 227.511205][ T5934] usb usb5-port1: unable to enumerate USB device [ 227.609429][ T6641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.611684][ T6641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.005507][ T1231] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 228.786709][ T1231] usb 4-1: no configurations [ 228.786722][ T1231] usb 4-1: can't read configurations, error -22 [ 229.215498][ T1231] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 229.353969][ T6641] team0: Port device team_slave_0 added [ 229.396251][ T1231] usb 4-1: no configurations [ 229.396271][ T1231] usb 4-1: can't read configurations, error -22 [ 229.396681][ T1231] usb usb4-port1: attempt power cycle [ 229.403937][ T6641] team0: Port device team_slave_1 added [ 229.773282][ T1231] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 229.926060][ T1231] usb 4-1: no configurations [ 229.926126][ T1231] usb 4-1: can't read configurations, error -22 [ 230.478302][ T1231] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 230.497276][ T1231] usb 4-1: no configurations [ 230.497293][ T1231] usb 4-1: can't read configurations, error -22 [ 230.497800][ T1231] usb usb4-port1: unable to enumerate USB device [ 230.559015][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.559029][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.559055][ T6641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.614651][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.614661][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.614676][ T6641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.852709][ T6641] hsr_slave_0: entered promiscuous mode [ 232.853411][ T6641] hsr_slave_1: entered promiscuous mode [ 232.853880][ T6641] debugfs: 'hsr0' already exists in 'hsr' [ 232.853893][ T6641] Cannot create hsr debugfs directory [ 235.205999][ T5882] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 236.095466][ T5882] usb 4-1: device descriptor read/64, error -71 [ 236.665493][ T5882] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 236.837454][ T5882] usb 4-1: device descriptor read/64, error -71 [ 236.946452][ T5882] usb usb4-port1: attempt power cycle [ 237.327288][ T5882] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 238.488681][ T5882] usb 4-1: device descriptor read/8, error -71 [ 239.093079][ T36] usb 2-1: USB disconnect, device number 3 [ 241.961469][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.965724][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.966854][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.968191][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.968905][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.526318][ T5808] Bluetooth: hci5: command tx timeout [ 247.035527][ T5808] Bluetooth: hci5: command tx timeout [ 248.875524][ T810] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 249.105781][ T5808] Bluetooth: hci5: command tx timeout [ 251.450152][ T5808] Bluetooth: hci5: command tx timeout [ 251.853694][ T810] usb 5-1: device descriptor read/64, error -71 [ 255.876445][ T810] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 257.714443][ T43] bridge_slave_1: left allmulticast mode [ 257.714461][ T43] bridge_slave_1: left promiscuous mode [ 257.714635][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.827546][ T43] bridge_slave_0: left allmulticast mode [ 257.827565][ T43] bridge_slave_0: left promiscuous mode [ 257.830304][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.465486][ T36] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 259.776287][ T36] usb 4-1: no configurations [ 259.776300][ T36] usb 4-1: can't read configurations, error -22 [ 259.866048][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.905910][ T36] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 259.906669][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.937153][ T43] bond0 (unregistering): Released all slaves [ 260.068430][ T36] usb 4-1: no configurations [ 260.068443][ T36] usb 4-1: can't read configurations, error -22 [ 260.068717][ T36] usb usb4-port1: attempt power cycle [ 260.103684][ T6807] chnl_net:caif_netlink_parms(): no params data found [ 260.164960][ T810] usb 5-1: device descriptor read/64, error -71 [ 260.274192][ T810] usb usb5-port1: attempt power cycle [ 260.335520][ T43] hsr_slave_0: left promiscuous mode [ 260.355497][ T43] hsr_slave_1: left promiscuous mode [ 260.356098][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.405846][ T36] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 260.681567][ T36] usb 4-1: no configurations [ 260.681877][ T36] usb 4-1: can't read configurations, error -22 [ 260.722226][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.870607][ T810] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 260.877649][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.877712][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.886206][ T810] usb 5-1: Using ep0 maxpacket: 8 [ 260.887853][ T810] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 260.916105][ T810] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 260.916131][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.916150][ T810] usb 5-1: Product: syz [ 260.916164][ T810] usb 5-1: Manufacturer: syz [ 260.916177][ T810] usb 5-1: SerialNumber: syz [ 260.926266][ T810] usb 5-1: config 0 descriptor?? [ 260.932562][ T810] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 260.932621][ T810] usb 5-1: setting power ON [ 260.933167][ T810] dvb-usb: bulk message failed: -22 (2/0) [ 260.985554][ T36] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 261.008867][ T36] usb 4-1: no configurations [ 261.008882][ T36] usb 4-1: can't read configurations, error -22 [ 261.009868][ T36] usb usb4-port1: unable to enumerate USB device [ 261.011257][ T810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.013208][ T810] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 261.013258][ T810] usb 5-1: media controller created [ 261.058504][ T810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.114308][ T810] usb 5-1: selecting invalid altsetting 6 [ 261.114323][ T810] usb 5-1: digital interface selection failed (-22) [ 261.114331][ T810] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 261.115089][ T810] usb 5-1: setting power OFF [ 261.115181][ T810] dvb-usb: bulk message failed: -22 (2/0) [ 261.115191][ T810] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 261.115197][ T810] (NULL device *): no alternate interface [ 261.358781][ T6910] dvb-usb: bulk message failed: -22 (3/0) [ 261.359018][ T6910] dvb-usb: bulk message failed: -22 (4/0) [ 261.359174][ T6910] cxusb: i2c read failed [ 261.698450][ T810] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 261.708853][ T810] usb 5-1: USB disconnect, device number 16 [ 261.917022][ T43] team0 (unregistering): Port device team_slave_1 removed [ 261.975874][ T43] team0 (unregistering): Port device team_slave_0 removed [ 262.889939][ T37] audit: type=1326 audit(1772588290.087:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 262.890219][ T37] audit: type=1326 audit(1772588290.097:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 262.890482][ T37] audit: type=1326 audit(1772588290.107:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9b9edcfce code=0x7ffc0000 [ 262.890938][ T37] audit: type=1326 audit(1772588290.117:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 262.891172][ T37] audit: type=1326 audit(1772588290.117:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 262.891424][ T37] audit: type=1326 audit(1772588290.127:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 262.891894][ T37] audit: type=1326 audit(1772588290.137:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 262.892154][ T37] audit: type=1326 audit(1772588290.137:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 262.892449][ T37] audit: type=1326 audit(1772588290.147:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 262.892785][ T37] audit: type=1326 audit(1772588290.157:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b9f1c799 code=0x7ffc0000 [ 264.120167][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.120277][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.120499][ T6807] bridge_slave_0: entered allmulticast mode [ 264.131890][ T6807] bridge_slave_0: entered promiscuous mode [ 264.153507][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.153632][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.153819][ T6807] bridge_slave_1: entered allmulticast mode [ 264.156861][ T6807] bridge_slave_1: entered promiscuous mode [ 264.411669][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.463880][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.718441][ T6807] team0: Port device team_slave_0 added [ 264.728351][ T6807] team0: Port device team_slave_1 added [ 264.828925][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.828942][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.828965][ T6807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.834154][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.834167][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.834191][ T6807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.524380][ T6954] NFSD: Failed to start, no listeners configured. [ 265.568450][ T6807] hsr_slave_0: entered promiscuous mode [ 265.571625][ T6807] hsr_slave_1: entered promiscuous mode [ 265.572891][ T6807] debugfs: 'hsr0' already exists in 'hsr' [ 265.572913][ T6807] Cannot create hsr debugfs directory [ 268.158919][ T6975] Bluetooth: MGMT ver 1.23 [ 269.165476][ T6641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.979898][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.198538][ T6641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.518713][ T6641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.570820][ T6641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.748854][ T6999] kernel profiling enabled (shift: 9) [ 272.611126][ T7000] autofs: Unknown parameter '00000000000000000000' [ 275.568158][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.821465][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.977941][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.982949][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.001843][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.010362][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.011625][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.326300][ T5111] Bluetooth: hci4: command tx timeout [ 280.882942][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.876637][ T5111] Bluetooth: hci4: command tx timeout [ 283.039648][ T6807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.396443][ T6807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.455655][ T6807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.524203][ T6807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.905591][ T5111] Bluetooth: hci4: command tx timeout [ 285.684853][ T43] bridge_slave_1: left allmulticast mode [ 285.684884][ T43] bridge_slave_1: left promiscuous mode [ 285.685113][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.986305][ T5111] Bluetooth: hci4: command tx timeout [ 286.872844][ T43] bridge_slave_0: left allmulticast mode [ 286.872869][ T43] bridge_slave_0: left promiscuous mode [ 287.159806][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.690679][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 293.934280][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.976110][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.029215][ T43] bond0 (unregistering): Released all slaves [ 294.057666][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 294.371971][ T7149] 8021q: adding VLAN 0 to HW filter on device team1 [ 294.457484][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.828650][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 294.962431][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.719013][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 297.720585][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 297.745187][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 297.755582][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 297.861622][ T7200] loop5: detected capacity change from 0 to 7 [ 297.930918][ T6797] Dev loop5: unable to read RDB block 7 [ 297.931355][ T6797] loop5: unable to read partition table [ 298.040152][ T6797] loop5: partition table beyond EOD, truncated [ 298.835627][ T7197] ceph: No mds server is up or the cluster is laggy [ 298.868291][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 298.889841][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.889968][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.905575][ T7200] Dev loop5: unable to read RDB block 7 [ 298.905619][ T7200] loop5: unable to read partition table [ 298.905836][ T7200] loop5: partition table beyond EOD, truncated [ 298.905866][ T7200] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 298.987886][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 298.988071][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 299.765447][ T5799] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 299.854807][ T43] hsr_slave_0: left promiscuous mode [ 300.734306][ T5799] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 300.734336][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.734355][ T5799] usb 1-1: Product: syz [ 300.734369][ T5799] usb 1-1: Manufacturer: syz [ 300.734383][ T5799] usb 1-1: SerialNumber: syz [ 300.792155][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.809181][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.810452][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.811946][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.812663][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.850249][ T5799] usb 1-1: config 0 descriptor?? [ 300.859473][ T43] hsr_slave_1: left promiscuous mode [ 300.860453][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.860476][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.954526][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.954551][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.065962][ T5799] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 301.074261][ T43] veth1_macvtap: left promiscuous mode [ 301.074351][ T43] veth0_macvtap: left promiscuous mode [ 301.074540][ T43] veth1_vlan: left promiscuous mode [ 301.074672][ T43] veth0_vlan: left promiscuous mode [ 302.867628][ T5111] Bluetooth: hci2: command tx timeout [ 303.204409][ T5799] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 303.216736][ T5799] usb 1-1: USB disconnect, device number 2 [ 303.595511][ T5918] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 303.746307][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 303.748172][ T5918] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 303.750735][ T5918] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 303.750761][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.750781][ T5918] usb 5-1: Product: syz [ 303.750795][ T5918] usb 5-1: Manufacturer: syz [ 303.750808][ T5918] usb 5-1: SerialNumber: syz [ 303.776333][ T5918] usb 5-1: config 0 descriptor?? [ 303.831515][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 303.831589][ T5918] usb 5-1: setting power ON [ 303.831607][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 303.892523][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 303.893238][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 303.893291][ T5918] usb 5-1: media controller created [ 303.967094][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.076925][ T5111] Bluetooth: hci2: command tx timeout [ 305.437986][ T7264] dvb-usb: bulk message failed: -22 (3/0) [ 305.438039][ T7264] dvb-usb: bulk message failed: -22 (4/0) [ 305.438077][ T7264] cxusb: i2c read failed [ 305.547414][ T5918] usb 5-1: selecting invalid altsetting 6 [ 305.547437][ T5918] usb 5-1: digital interface selection failed (-22) [ 305.547451][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 305.548222][ T5918] usb 5-1: setting power OFF [ 305.548240][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 305.548254][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 305.548266][ T5918] (NULL device *): no alternate interface [ 305.838725][ T5111] Bluetooth: Wrong link type (-22) [ 305.965702][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 306.142533][ T5918] usb 5-1: USB disconnect, device number 17 [ 306.730707][ T43] team0 (unregistering): Port device team_slave_1 removed [ 306.956107][ T43] team0 (unregistering): Port device team_slave_0 removed [ 307.129001][ T5111] Bluetooth: hci2: command tx timeout [ 309.312835][ T5111] Bluetooth: hci2: command tx timeout [ 309.907714][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.928476][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.722346][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 311.722383][ T37] audit: type=1326 audit(1772588338.957:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 311.722631][ T37] audit: type=1326 audit(1772588338.957:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 311.722883][ T37] audit: type=1326 audit(1772588338.967:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7303 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 312.195720][ T7307] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 312.290452][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.290574][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.290754][ T7036] bridge_slave_0: entered allmulticast mode [ 312.335501][ T7036] bridge_slave_0: entered promiscuous mode [ 312.585772][ T6664] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 312.816060][ T6664] usb 5-1: Using ep0 maxpacket: 8 [ 312.881122][ T6664] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 313.434677][ T6664] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 313.434707][ T6664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.434727][ T6664] usb 5-1: Product: syz [ 313.434740][ T6664] usb 5-1: Manufacturer: syz [ 313.434754][ T6664] usb 5-1: SerialNumber: syz [ 313.492759][ T6664] usb 5-1: config 0 descriptor?? [ 313.496184][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.496296][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.496516][ T7036] bridge_slave_1: entered allmulticast mode [ 313.515637][ T7036] bridge_slave_1: entered promiscuous mode [ 313.538901][ T6664] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 313.538949][ T6664] usb 5-1: setting power ON [ 313.538967][ T6664] dvb-usb: bulk message failed: -22 (2/0) [ 313.566672][ T6664] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.574540][ T6664] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 313.574605][ T6664] usb 5-1: media controller created [ 313.612477][ T6664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.646037][ T6664] usb 5-1: selecting invalid altsetting 6 [ 313.646057][ T6664] usb 5-1: digital interface selection failed (-22) [ 313.646071][ T6664] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 313.646780][ T6664] usb 5-1: setting power OFF [ 313.646797][ T6664] dvb-usb: bulk message failed: -22 (2/0) [ 313.646812][ T6664] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 313.646823][ T6664] (NULL device *): no alternate interface [ 313.938990][ T7326] dvb-usb: bulk message failed: -22 (3/0) [ 313.939807][ T7326] dvb-usb: bulk message failed: -22 (4/0) [ 313.939963][ T7326] cxusb: i2c read failed [ 314.232376][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.778496][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.806037][ T6664] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 315.840566][ T6664] usb 5-1: USB disconnect, device number 18 [ 317.844655][ T7036] team0: Port device team_slave_0 added [ 319.310923][ T7036] team0: Port device team_slave_1 added [ 319.436970][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.436981][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.436994][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.444481][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.444498][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.444523][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.532935][ T43] IPVS: stop unused estimator thread 0... [ 321.839440][ T7036] hsr_slave_0: entered promiscuous mode [ 321.840785][ T7036] hsr_slave_1: entered promiscuous mode [ 321.841642][ T7036] debugfs: 'hsr0' already exists in 'hsr' [ 321.841663][ T7036] Cannot create hsr debugfs directory [ 322.160882][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.160950][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.383038][ T7400] comedi comedi0: Minor 3 could not be opened [ 327.395146][ T7430] Set syz0 is full, maxelem 0 reached [ 327.799243][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.816745][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.818007][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.819164][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.820202][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.965668][ T5111] Bluetooth: hci3: command tx timeout [ 330.235118][ T7457] block nbd0: not configured, cannot reconfigure [ 330.439641][ T7227] chnl_net:caif_netlink_parms(): no params data found [ 330.521574][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 330.715432][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 330.741029][ T5918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.742709][ T5918] usb 1-1: config 64 has an invalid interface number: 69 but max is 0 [ 330.742732][ T5918] usb 1-1: config 64 has no interface number 0 [ 330.742762][ T5918] usb 1-1: config 64 interface 69 has no altsetting 0 [ 330.782299][ T5918] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=17.40 [ 330.782325][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.782344][ T5918] usb 1-1: Product: 櫀ꕥ㲰㰔ꯀԗቀ픛鎏嵫吘綸ḟ뒛開㢂㳆鞬䋑멖䩫젝ꐉꢟ輛ꝯ犜⎽畘袯ㆄ㤟࢐᩵磶伂꿹㐻㓮音굇퍜앏뤹葯㛵大鸺湅뺽隱햄肖ᒃ훹즘蕳몹짴㪩ⱡ鉑샂ﲄ᥁䮗十曧塷艅 [ 330.782366][ T5918] usb 1-1: Manufacturer: 氊 [ 330.782373][ T5918] usb 1-1: SerialNumber: х [ 330.969655][ T1464] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.066426][ T5918] cp210x 1-1:64.69: cp210x converter detected [ 331.066987][ T5918] cp210x 1-1:64.69: failed to get vendor val 0x370b size 1: -71 [ 331.067017][ T5918] cp210x 1-1:64.69: querying part number failed [ 331.104614][ T5918] usb 1-1: cp210x converter now attached to ttyUSB0 [ 331.135724][ T5918] usb 1-1: USB disconnect, device number 3 [ 331.163330][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 331.174153][ T5918] cp210x 1-1:64.69: device disconnected [ 331.992410][ T5808] Bluetooth: hci3: command tx timeout [ 332.500697][ T7473] fuse: Invalid rootmode [ 333.411744][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.411864][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.412063][ T7227] bridge_slave_0: entered allmulticast mode [ 333.414293][ T7227] bridge_slave_0: entered promiscuous mode [ 334.071765][ T5808] Bluetooth: hci3: command tx timeout [ 335.151142][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.151258][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.151478][ T7227] bridge_slave_1: entered allmulticast mode [ 335.154022][ T7227] bridge_slave_1: entered promiscuous mode [ 335.351596][ T5808] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 336.175425][ T5808] Bluetooth: hci3: command tx timeout [ 338.456336][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.460596][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.461792][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.462839][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.464358][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.501005][ T6664] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 338.655370][ T6664] usb 5-1: Using ep0 maxpacket: 32 [ 338.657720][ T6664] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.657772][ T6664] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 338.657795][ T6664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.667478][ T6664] usb 5-1: config 0 descriptor?? [ 338.802193][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.858198][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.546448][ T5808] Bluetooth: hci5: command tx timeout [ 340.644612][ T7227] team0: Port device team_slave_0 added [ 340.730156][ T7227] team0: Port device team_slave_1 added [ 341.125905][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.125921][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.125944][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.225798][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.225813][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.225838][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.379846][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 341.605480][ T9] usb 5-1: USB disconnect, device number 19 [ 341.659390][ T43] bridge_slave_1: left allmulticast mode [ 341.659417][ T43] bridge_slave_1: left promiscuous mode [ 341.659628][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.996934][ T43] bridge_slave_0: left allmulticast mode [ 341.996952][ T43] bridge_slave_0: left promiscuous mode [ 341.997108][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.829718][ T5808] Bluetooth: hci5: command tx timeout [ 342.993287][ T43] bridge_slave_1: left allmulticast mode [ 342.993315][ T43] bridge_slave_1: left promiscuous mode [ 342.993548][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.176918][ T43] bridge_slave_0: left allmulticast mode [ 343.176946][ T43] bridge_slave_0: left promiscuous mode [ 343.177190][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.870054][ T37] audit: type=1326 audit(1772588373.117:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870110][ T37] audit: type=1326 audit(1772588373.117:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870149][ T37] audit: type=1326 audit(1772588373.117:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870186][ T37] audit: type=1326 audit(1772588373.117:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870223][ T37] audit: type=1326 audit(1772588373.117:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870261][ T37] audit: type=1326 audit(1772588373.117:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870307][ T37] audit: type=1326 audit(1772588373.117:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870344][ T37] audit: type=1326 audit(1772588373.117:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870380][ T37] audit: type=1326 audit(1772588373.127:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.870416][ T37] audit: type=1326 audit(1772588373.127:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5e63dac799 code=0x7ffc0000 [ 345.892176][ T5808] Bluetooth: hci5: command tx timeout [ 348.375546][ T5111] Bluetooth: hci5: command tx timeout [ 348.514648][ T7559] loop6: detected capacity change from 0 to 7 [ 348.580662][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.580865][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.658276][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.658367][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.664218][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.664282][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.667948][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.667988][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.670876][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.670925][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.704721][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.704769][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.708186][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.708249][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.710037][ T7559] ldm_validate_partition_table(): Disk read failed. [ 348.712968][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.713028][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.714374][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.714405][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.850263][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.850312][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 348.851138][ T7559] Dev loop6: unable to read RDB block 0 [ 348.858717][ T7559] loop6: unable to read partition table [ 348.861990][ T7559] loop6: partition table beyond EOD, truncated [ 348.862117][ T7559] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 349.047762][ T7564] netlink: 48 bytes leftover after parsing attributes in process `syz.0.351'. [ 350.498003][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.706151][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.766591][ T43] bond0 (unregistering): Released all slaves [ 351.289943][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.188142][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.464156][ T43] bond0 (unregistering): Released all slaves [ 352.512696][ T7565] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 352.512721][ T7565] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 352.512758][ T7565] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 352.565444][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 352.565460][ T37] audit: type=1800 audit(1772588379.787:79): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.351" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 352.608831][ T7227] hsr_slave_0: entered promiscuous mode [ 352.609682][ T7227] hsr_slave_1: entered promiscuous mode [ 352.610246][ T7227] debugfs: 'hsr0' already exists in 'hsr' [ 352.610262][ T7227] Cannot create hsr debugfs directory [ 355.295423][ T43] hsr_slave_0: left promiscuous mode [ 355.315647][ T43] hsr_slave_1: left promiscuous mode [ 355.316556][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.366297][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.980586][ T43] hsr_slave_0: left promiscuous mode [ 357.037103][ T43] hsr_slave_1: left promiscuous mode [ 357.038017][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.196378][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.969324][ T7607] Can't find ip_set type bitmap:ip [ 360.147703][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.161457][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.162719][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.164240][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.165008][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.267181][ T43] team0 (unregistering): Port device team_slave_1 removed [ 361.116078][ T43] team0 (unregistering): Port device team_slave_0 removed [ 361.548443][ T43] team0 (unregistering): Port device team_slave_1 removed [ 361.588041][ T43] team0 (unregistering): Port device team_slave_0 removed [ 361.879164][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.879352][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.879521][ T7439] bridge_slave_0: entered allmulticast mode [ 361.882051][ T7439] bridge_slave_0: entered promiscuous mode [ 361.960647][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.960745][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.960916][ T7439] bridge_slave_1: entered allmulticast mode [ 361.963058][ T7439] bridge_slave_1: entered promiscuous mode [ 362.225427][ T5808] Bluetooth: hci4: command tx timeout [ 362.232515][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.301649][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.364058][ T7439] team0: Port device team_slave_0 added [ 363.791688][ T7439] team0: Port device team_slave_1 added [ 364.306356][ T5808] Bluetooth: hci4: command tx timeout [ 364.611782][ T7510] chnl_net:caif_netlink_parms(): no params data found [ 364.650534][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.650550][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.650574][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.676221][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.676237][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.676261][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.141216][ T7439] hsr_slave_0: entered promiscuous mode [ 366.142018][ T7439] hsr_slave_1: entered promiscuous mode [ 366.142576][ T7439] debugfs: 'hsr0' already exists in 'hsr' [ 366.142593][ T7439] Cannot create hsr debugfs directory [ 366.810820][ T5808] Bluetooth: hci4: command tx timeout [ 367.108973][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.109094][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.109338][ T7510] bridge_slave_0: entered allmulticast mode [ 367.112124][ T7510] bridge_slave_0: entered promiscuous mode [ 367.185072][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.185143][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.185368][ T7510] bridge_slave_1: entered allmulticast mode [ 367.194944][ T7510] bridge_slave_1: entered promiscuous mode [ 368.242757][ T7679] syz.4.372 (7679) used greatest stack depth: 17056 bytes left [ 368.366322][ T7510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.416164][ T7510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.762199][ T7691] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 369.108753][ T5808] Bluetooth: hci4: command tx timeout [ 369.716447][ T7510] team0: Port device team_slave_0 added [ 369.989435][ T7510] team0: Port device team_slave_1 added [ 371.024242][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.024257][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.024278][ T7510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.024878][ T7627] chnl_net:caif_netlink_parms(): no params data found [ 371.244163][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.244178][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.244202][ T7510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.486876][ T7510] hsr_slave_0: entered promiscuous mode [ 372.488195][ T7510] hsr_slave_1: entered promiscuous mode [ 372.489177][ T7510] debugfs: 'hsr0' already exists in 'hsr' [ 372.489200][ T7510] Cannot create hsr debugfs directory [ 372.640219][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.640309][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.640488][ T7627] bridge_slave_0: entered allmulticast mode [ 372.642566][ T7627] bridge_slave_0: entered promiscuous mode [ 372.713259][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.713403][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.713612][ T7627] bridge_slave_1: entered allmulticast mode [ 372.739597][ T7627] bridge_slave_1: entered promiscuous mode [ 372.812931][ T7718] kvm: kvm [7717]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 373.077584][ T7439] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 373.132783][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.168595][ T7439] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 373.223327][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.257867][ T7439] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 373.415538][ T7439] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 373.617955][ T7627] team0: Port device team_slave_0 added [ 373.665235][ T7627] team0: Port device team_slave_1 added [ 374.503192][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.503208][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.503230][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.747101][ T7750] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 375.747135][ T7750] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 375.747151][ T7750] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 375.773018][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.773034][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.773058][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.595439][ T37] audit: type=1800 audit(1772588403.027:80): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.382" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 377.186997][ T7761] netlink: 'syz.4.384': attribute type 21 has an invalid length. [ 379.014051][ T43] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.259232][ T7772] overlayfs: failed to resolve './bus': -2 [ 380.879341][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 380.879385][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.879410][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.879424][ T5808] Workqueue: hci1 hci_rx_work [ 380.879613][ T5808] Call Trace: [ 380.879625][ T5808] [ 380.879635][ T5808] dump_stack_lvl+0xe8/0x150 [ 380.879742][ T5808] sysfs_create_dir_ns+0x271/0x2a0 [ 380.879824][ T5808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 380.879916][ T5808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 380.879943][ T5808] ? rt_spin_unlock+0x160/0x200 [ 380.879970][ T5808] kobject_add_internal+0x631/0xd10 [ 380.880038][ T5808] kobject_add+0x163/0x240 [ 380.880076][ T5808] ? __pfx_kobject_add+0x10/0x10 [ 380.880116][ T5808] ? get_device_parent+0x370/0x3a0 [ 380.880210][ T5808] device_add+0x408/0xb80 [ 380.880246][ T5808] hci_conn_add_sysfs+0xd5/0x210 [ 380.880305][ T5808] le_conn_complete_evt+0xf1d/0x1430 [ 380.880399][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 380.880434][ T5808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.880464][ T5808] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.880579][ T5808] ? skb_pull_data+0xfb/0x200 [ 380.880689][ T5808] hci_le_conn_complete_evt+0x187/0x470 [ 380.880730][ T5808] hci_event_packet+0x7af/0x12c0 [ 380.880764][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 380.880796][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 380.880821][ T5808] ? rt_spin_unlock+0x14f/0x200 [ 380.880854][ T5808] ? hci_send_to_monitor+0xe2/0x590 [ 380.880880][ T5808] hci_rx_work+0x3ee/0x1030 [ 380.880915][ T5808] ? process_scheduled_works+0xa25/0x1830 [ 380.880970][ T5808] process_scheduled_works+0xb02/0x1830 [ 380.881028][ T5808] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.881065][ T5808] ? assign_work+0x3d5/0x5e0 [ 380.881099][ T5808] worker_thread+0xa50/0xfc0 [ 380.881158][ T5808] kthread+0x388/0x470 [ 380.881180][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 380.881208][ T5808] ? __pfx_kthread+0x10/0x10 [ 380.881231][ T5808] ret_from_fork+0x51e/0xb90 [ 380.881273][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 380.881301][ T5808] ? __switch_to+0xc7d/0x1450 [ 380.881350][ T5808] ? __pfx_kthread+0x10/0x10 [ 380.881374][ T5808] ret_from_fork_asm+0x1a/0x30 [ 380.881413][ T5808] [ 380.881480][ T5808] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 380.881519][ T5808] Bluetooth: hci1: failed to register connection device [ 382.316646][ T7627] hsr_slave_0: entered promiscuous mode [ 382.318033][ T7627] hsr_slave_1: entered promiscuous mode [ 382.319022][ T7627] debugfs: 'hsr0' already exists in 'hsr' [ 382.319045][ T7627] Cannot create hsr debugfs directory [ 383.696795][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.696865][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.731122][ T43] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.078184][ T43] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.160669][ T7800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.160856][ T7800] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 385.222644][ T7800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.222692][ T7800] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 385.266802][ T7800] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 385.307207][ T7800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.307283][ T7800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 385.357921][ T7800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 385.377559][ T43] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.406547][ T7800] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.406608][ T7800] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 385.458955][ T7800] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 385.480525][ T7510] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 385.507098][ T7800] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.507145][ T7800] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 385.534629][ T7510] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 385.572279][ T7510] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.583389][ T7800] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 385.612314][ T7510] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.965631][ T1231] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 386.115521][ T1231] usb 5-1: Using ep0 maxpacket: 8 [ 386.136386][ T1231] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 386.153951][ T1231] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 386.153978][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.153994][ T1231] usb 5-1: Product: syz [ 386.154007][ T1231] usb 5-1: Manufacturer: syz [ 386.154018][ T1231] usb 5-1: SerialNumber: syz [ 386.231753][ T1231] usb 5-1: config 0 descriptor?? [ 386.279966][ T1231] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 386.280069][ T1231] usb 5-1: setting power ON [ 386.280117][ T1231] dvb-usb: bulk message failed: -22 (2/0) [ 386.308508][ T1231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.309579][ T1231] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 386.309686][ T1231] usb 5-1: media controller created [ 386.356148][ T1231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.407198][ T1231] usb 5-1: selecting invalid altsetting 6 [ 386.407263][ T1231] usb 5-1: digital interface selection failed (-22) [ 386.407279][ T1231] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 386.410300][ T1231] usb 5-1: setting power OFF [ 386.410329][ T1231] dvb-usb: bulk message failed: -22 (2/0) [ 386.410346][ T1231] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 386.410357][ T1231] (NULL device *): no alternate interface [ 386.817719][ T43] bridge_slave_1: left allmulticast mode [ 386.817748][ T43] bridge_slave_1: left promiscuous mode [ 386.817998][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.840306][ T7805] dvb-usb: bulk message failed: -22 (3/0) [ 386.840322][ T7805] dvb-usb: bulk message failed: -22 (4/0) [ 386.840330][ T7805] cxusb: i2c read failed [ 386.917120][ T43] bridge_slave_0: left allmulticast mode [ 386.917147][ T43] bridge_slave_0: left promiscuous mode [ 386.917388][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.949717][ T1231] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 386.954126][ T1231] usb 5-1: USB disconnect, device number 20 [ 387.037597][ T43] bridge_slave_1: left allmulticast mode [ 387.037625][ T43] bridge_slave_1: left promiscuous mode [ 387.037851][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.137002][ T43] bridge_slave_0: left allmulticast mode [ 387.137028][ T43] bridge_slave_0: left promiscuous mode [ 387.137259][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.194473][ T5111] Bluetooth: hci0: command 0x0406 tx timeout [ 387.262040][ T43] bridge_slave_1: left allmulticast mode [ 387.262059][ T43] bridge_slave_1: left promiscuous mode [ 387.262197][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.265391][ T5111] Bluetooth: hci1: command 0x0406 tx timeout [ 387.347943][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout [ 387.349561][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.354712][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.356735][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.374690][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.375890][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.413346][ T43] bridge_slave_0: left allmulticast mode [ 387.413370][ T43] bridge_slave_0: left promiscuous mode [ 387.413582][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.425431][ T5111] Bluetooth: hci5: command 0x0c1a tx timeout [ 387.585540][ T5111] Bluetooth: hci4: command 0x0c1a tx timeout [ 387.695424][ T6664] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 387.846774][ T6664] usb 1-1: Using ep0 maxpacket: 8 [ 387.851625][ T6664] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 387.851677][ T6664] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.851699][ T6664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.202862][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.276128][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.345103][ T43] bond0 (unregistering): Released all slaves [ 388.556721][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.666024][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.783849][ T43] bond0 (unregistering): Released all slaves [ 389.188796][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.265504][ T5111] Bluetooth: hci0: command 0x0406 tx timeout [ 389.266598][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.288523][ T43] bond0 (unregistering): Released all slaves [ 389.334395][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.353888][ T5111] Bluetooth: hci1: command 0x0406 tx timeout [ 389.445012][ T5111] Bluetooth: hci2: command tx timeout [ 389.445009][ T5808] Bluetooth: hci3: command 0x0c1a tx timeout [ 389.505415][ T5111] Bluetooth: hci5: command 0x0c1a tx timeout [ 389.668591][ T5111] Bluetooth: hci4: command 0x0c1a tx timeout [ 390.519917][ T5882] usb 1-1: USB disconnect, device number 4 [ 391.425405][ T5111] Bluetooth: hci1: command 0x0406 tx timeout [ 391.515458][ T5111] Bluetooth: hci2: command tx timeout [ 391.585541][ T5111] Bluetooth: hci5: command 0x0c1a tx timeout [ 391.618309][ T7510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.745565][ T5111] Bluetooth: hci4: command 0x0c1a tx timeout [ 391.788238][ T43] hsr_slave_0: left promiscuous mode [ 391.827128][ T43] hsr_slave_1: left promiscuous mode [ 391.827707][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.878450][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.126237][ T43] hsr_slave_0: left promiscuous mode [ 392.155809][ T43] hsr_slave_1: left promiscuous mode [ 392.156365][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.210656][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.406234][ T43] hsr_slave_0: left promiscuous mode [ 392.447034][ T43] hsr_slave_1: left promiscuous mode [ 392.448115][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.448138][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.496668][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.496693][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.609527][ T43] veth1_macvtap: left promiscuous mode [ 392.609628][ T43] veth0_macvtap: left promiscuous mode [ 392.609894][ T43] veth1_vlan: left promiscuous mode [ 392.610125][ T43] veth0_vlan: left promiscuous mode [ 393.236040][ T43] team0 (unregistering): Port device team_slave_1 removed [ 393.276282][ T43] team0 (unregistering): Port device team_slave_0 removed [ 393.585463][ T5111] Bluetooth: hci2: command tx timeout [ 393.826879][ T43] team0 (unregistering): Port device team_slave_1 removed [ 393.866049][ T43] team0 (unregistering): Port device team_slave_0 removed [ 394.627265][ T43] team0 (unregistering): Port device team_slave_1 removed [ 394.690178][ T43] team0 (unregistering): Port device team_slave_0 removed [ 395.308776][ T7510] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.315152][ T7627] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 395.375431][ T7627] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 395.436880][ T7627] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 395.485790][ T7833] chnl_net:caif_netlink_parms(): no params data found [ 395.510290][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.510503][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.511273][ T7627] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 395.676762][ T5111] Bluetooth: hci2: command tx timeout [ 395.694786][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.694858][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.833136][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.833318][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.833474][ T7833] bridge_slave_0: entered allmulticast mode [ 395.835672][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 395.864756][ T7833] bridge_slave_0: entered promiscuous mode [ 395.898167][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.898281][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.898447][ T7833] bridge_slave_1: entered allmulticast mode [ 395.900990][ T7833] bridge_slave_1: entered promiscuous mode [ 395.989197][ T7833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.040165][ T7833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.041091][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 396.041118][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.041138][ T9] usb 5-1: Product: syz [ 396.041152][ T9] usb 5-1: Manufacturer: syz [ 396.041167][ T9] usb 5-1: SerialNumber: syz [ 396.216067][ T7833] team0: Port device team_slave_0 added [ 396.243217][ T7833] team0: Port device team_slave_1 added [ 396.488262][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.488278][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.488292][ T7833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.541770][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.541784][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.541806][ T7833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.743726][ T7833] hsr_slave_0: entered promiscuous mode [ 396.744952][ T7833] hsr_slave_1: entered promiscuous mode [ 396.756548][ T7833] debugfs: 'hsr0' already exists in 'hsr' [ 396.756570][ T7833] Cannot create hsr debugfs directory [ 396.756613][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 396.756678][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 396.758054][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 396.814751][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 397.197586][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.393878][ T7627] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.495022][ T7510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.497171][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.502439][ T7113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.533687][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.533896][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.649569][ T5799] usb 5-1: USB disconnect, device number 21 [ 399.187764][ T43] bridge_slave_1: left allmulticast mode [ 399.187815][ T43] bridge_slave_1: left promiscuous mode [ 399.190606][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.167959][ T43] bridge_slave_0: left allmulticast mode [ 400.167985][ T43] bridge_slave_0: left promiscuous mode [ 400.168229][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.295957][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.299376][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.300888][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.301882][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.302537][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.056383][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.135887][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.216647][ T43] bond0 (unregistering): Released all slaves [ 402.235454][ T5800] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 402.385758][ T5808] Bluetooth: hci3: command tx timeout [ 402.395474][ T5800] usb 5-1: Using ep0 maxpacket: 8 [ 402.398160][ T5800] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 402.400309][ T5800] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 402.400334][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.400352][ T5800] usb 5-1: Product: syz [ 402.400366][ T5800] usb 5-1: Manufacturer: syz [ 402.400386][ T5800] usb 5-1: SerialNumber: syz [ 402.415640][ T5800] usb 5-1: config 0 descriptor?? [ 402.430831][ T5800] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 402.430876][ T5800] usb 5-1: setting power ON [ 402.430893][ T5800] dvb-usb: bulk message failed: -22 (2/0) [ 402.444189][ T5800] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.444889][ T5800] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 402.444948][ T5800] usb 5-1: media controller created [ 402.461719][ T5800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.479025][ T5800] usb 5-1: selecting invalid altsetting 6 [ 402.479044][ T5800] usb 5-1: digital interface selection failed (-22) [ 402.479058][ T5800] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 402.479836][ T5800] usb 5-1: setting power OFF [ 402.479855][ T5800] dvb-usb: bulk message failed: -22 (2/0) [ 402.479870][ T5800] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 402.479881][ T5800] (NULL device *): no alternate interface [ 402.523002][ T5800] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 402.736392][ T5918] usb 5-1: USB disconnect, device number 22 [ 402.835402][ T43] hsr_slave_0: left promiscuous mode [ 402.856460][ T43] hsr_slave_1: left promiscuous mode [ 402.856995][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.908096][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.236526][ T43] team0 (unregistering): Port device team_slave_1 removed [ 403.256808][ T43] team0 (unregistering): Port device team_slave_0 removed [ 403.818923][ T5808] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 404.475355][ T5808] Bluetooth: hci3: command tx timeout [ 404.508305][ T7627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.534628][ T5808] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 405.735409][ T7833] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.857650][ T7833] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.929088][ T7833] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.979469][ T7833] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 406.065394][ T5918] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 406.215391][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 406.217587][ T5918] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 406.220184][ T5918] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 406.220210][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.220229][ T5918] usb 5-1: Product: syz [ 406.220243][ T5918] usb 5-1: Manufacturer: syz [ 406.220257][ T5918] usb 5-1: SerialNumber: syz [ 406.235885][ T5918] usb 5-1: config 0 descriptor?? [ 406.240882][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 406.240928][ T5918] usb 5-1: setting power ON [ 406.240944][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 406.261591][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.266592][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 406.266644][ T5918] usb 5-1: media controller created [ 406.304584][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.363870][ T5918] usb 5-1: selecting invalid altsetting 6 [ 406.363894][ T5918] usb 5-1: digital interface selection failed (-22) [ 406.363908][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 406.364708][ T5918] usb 5-1: setting power OFF [ 406.364729][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 406.364746][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 406.364758][ T5918] (NULL device *): no alternate interface [ 406.490141][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 406.535982][ T7627] veth0_vlan: entered promiscuous mode [ 406.545458][ T5808] Bluetooth: hci3: command tx timeout [ 406.627253][ T9] usb 5-1: USB disconnect, device number 23 [ 406.650651][ T8154] chnl_net:caif_netlink_parms(): no params data found [ 406.710902][ T7627] veth1_vlan: entered promiscuous mode [ 407.128280][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.128399][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.128538][ T8154] bridge_slave_0: entered allmulticast mode [ 407.130036][ T8154] bridge_slave_0: entered promiscuous mode [ 407.134128][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.134212][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.134321][ T8154] bridge_slave_1: entered allmulticast mode [ 407.184014][ T8154] bridge_slave_1: entered promiscuous mode [ 407.253141][ T8154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.388303][ T8154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.488672][ T8154] team0: Port device team_slave_0 added [ 407.492862][ T8154] team0: Port device team_slave_1 added [ 407.640657][ T7627] veth0_macvtap: entered promiscuous mode [ 407.663041][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.663051][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.663065][ T8154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.673822][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.676789][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.676802][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.676825][ T8154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.677901][ T7627] veth1_macvtap: entered promiscuous mode [ 407.878845][ T8154] hsr_slave_0: entered promiscuous mode [ 407.879584][ T8154] hsr_slave_1: entered promiscuous mode [ 407.880101][ T8154] debugfs: 'hsr0' already exists in 'hsr' [ 407.880117][ T8154] Cannot create hsr debugfs directory [ 408.124509][ T7833] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.147071][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.269056][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.269250][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.272742][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.339475][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.339690][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.348447][ T6566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.350692][ T6566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.352537][ T165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.353868][ T165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.625416][ T5808] Bluetooth: hci3: command tx timeout [ 408.926439][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.926458][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.011964][ T43] bridge_slave_1: left allmulticast mode [ 409.011984][ T43] bridge_slave_1: left promiscuous mode [ 409.012197][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.086975][ T43] bridge_slave_0: left allmulticast mode [ 409.087000][ T43] bridge_slave_0: left promiscuous mode [ 409.087232][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.626042][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.685919][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.729098][ T43] bond0 (unregistering): Released all slaves [ 409.904119][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.904139][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.075470][ T43] hsr_slave_0: left promiscuous mode [ 410.106871][ T43] hsr_slave_1: left promiscuous mode [ 410.107890][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.146786][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.576360][ T43] team0 (unregistering): Port device team_slave_1 removed [ 410.615988][ T43] team0 (unregistering): Port device team_slave_0 removed [ 410.898323][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.399280][ T8154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.646446][ T6664] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 414.949736][ T8154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 415.035793][ T6664] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 415.035823][ T6664] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.063781][ T6664] usb 7-1: config 0 descriptor?? [ 415.133514][ T8154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 415.211531][ T8154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 415.297073][ T9] usb 7-1: USB disconnect, device number 2 [ 416.155431][ T7833] veth0_vlan: entered promiscuous mode [ 416.365024][ T7833] veth1_vlan: entered promiscuous mode [ 416.504554][ T7833] veth0_macvtap: entered promiscuous mode [ 416.530709][ T7833] veth1_macvtap: entered promiscuous mode [ 417.534574][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.549545][ T8154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.555084][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.200529][ T1019] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.223216][ T1019] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.344216][ T1019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.369269][ T1019] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.400531][ T8154] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.732010][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.732138][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.797573][ T5882] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 418.825775][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.826670][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.952000][ T5882] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 418.952032][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.972424][ T5882] usb 7-1: config 0 descriptor?? [ 419.235672][ T5882] usb 7-1: USB disconnect, device number 3 [ 419.276310][ T7113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.276331][ T7113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.423032][ T7113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.423053][ T7113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.152207][ T8154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.655590][ T5800] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 422.807991][ T5800] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.808048][ T5800] usb 7-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 422.808071][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.813608][ T5800] usb 7-1: config 0 descriptor?? [ 423.003840][ T5800] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 427.881754][ T8470] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 427.945500][ T5799] usb 7-1: USB disconnect, device number 4 [ 428.005475][ T8154] veth0_vlan: entered promiscuous mode [ 428.066831][ T8154] veth1_vlan: entered promiscuous mode [ 428.250318][ T8154] veth0_macvtap: entered promiscuous mode [ 428.258514][ T8154] veth1_macvtap: entered promiscuous mode [ 428.314074][ T8154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.340869][ T8154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.407876][ T170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.416826][ T170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.427820][ T170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.428283][ T170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.889643][ T6666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.889662][ T6666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.810441][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.810462][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.377933][ T5944] IPVS: starting estimator thread 0... [ 433.475466][ T8551] IPVS: using max 9 ests per chain, 21600 per kthread [ 437.523081][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.618'. [ 439.050129][ T8656] syz.5.626 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 441.241043][ T8681] capability: warning: `syz.4.633' uses 32-bit capabilities (legacy support in use) [ 445.037379][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.037422][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.235437][ T36] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 449.325424][ T5799] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 449.871211][ T5799] usb 5-1: Using ep0 maxpacket: 8 [ 450.301190][ T5799] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 450.321693][ T5799] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 450.321768][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.321789][ T5799] usb 5-1: Product: syz [ 450.321803][ T5799] usb 5-1: Manufacturer: syz [ 450.321817][ T5799] usb 5-1: SerialNumber: syz [ 450.356001][ T36] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 450.356030][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.423263][ T5799] usb 5-1: config 0 descriptor?? [ 450.446916][ T5799] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 450.446966][ T5799] usb 5-1: setting power ON [ 450.446984][ T5799] dvb-usb: bulk message failed: -22 (2/0) [ 450.451532][ T36] usb 8-1: config 0 descriptor?? [ 450.454661][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 450.492130][ T5799] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 450.492197][ T5799] usb 5-1: media controller created [ 450.530871][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.563734][ T5799] usb 5-1: selecting invalid altsetting 6 [ 450.563756][ T5799] usb 5-1: digital interface selection failed (-22) [ 450.563771][ T5799] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 450.564908][ T5799] usb 5-1: setting power OFF [ 450.564926][ T5799] dvb-usb: bulk message failed: -22 (2/0) [ 450.564941][ T5799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 450.564953][ T5799] (NULL device *): no alternate interface [ 450.653566][ T5799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 451.389876][ T1231] usb 5-1: USB disconnect, device number 24 [ 451.506382][ T5799] usb 8-1: USB disconnect, device number 2 [ 456.535523][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 456.717786][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 456.717805][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.727823][ T9] usb 6-1: config 0 descriptor?? [ 457.453635][ T9] usb 6-1: USB disconnect, device number 2 [ 458.335491][ T810] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 458.507954][ T810] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.508006][ T810] usb 6-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 458.508031][ T810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.513445][ T810] usb 6-1: config 0 descriptor?? [ 458.994304][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994346][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994374][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994401][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994428][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994455][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994481][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994508][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994534][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 458.994570][ T810] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 459.103170][ T810] lg-g15 0003:046D:C22E.0001: hidraw0: USB HID v7f.7d Device [HID 046d:c22e] on usb-dummy_hcd.5-1/input0 [ 459.265097][ T810] usb 6-1: USB disconnect, device number 3 [ 461.263230][ T8913] fido_id[8913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 461.845502][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 462.020161][ T5934] usb 6-1: config 0 has no interfaces? [ 462.022877][ T5934] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.022904][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.022923][ T5934] usb 6-1: Product: syz [ 462.022937][ T5934] usb 6-1: Manufacturer: syz [ 462.022951][ T5934] usb 6-1: SerialNumber: syz [ 462.085741][ T5934] usb 6-1: config 0 descriptor?? [ 462.736336][ T9] usb 6-1: USB disconnect, device number 4 [ 464.105452][ T5934] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 465.192627][ T5934] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 465.192656][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.197513][ T5934] usb 8-1: config 0 descriptor?? [ 465.435206][ T6664] usb 8-1: USB disconnect, device number 3 [ 465.525671][ T36] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 466.038619][ T36] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 466.038649][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.075402][ T36] usb 7-1: config 0 descriptor?? [ 467.179207][ T5934] usb 7-1: USB disconnect, device number 5 [ 467.437621][ T9006] input: syz1 as /devices/virtual/input/input6 [ 468.037904][ T5799] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 469.736233][ T5799] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 469.736252][ T5799] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 469.736263][ T5799] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 469.736292][ T5799] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 469.736306][ T5799] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 469.817745][ T5799] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 469.817773][ T5799] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 469.817789][ T5799] usb 8-1: Product: syz [ 469.817801][ T5799] usb 8-1: Manufacturer: syz [ 470.702350][ T5799] cdc_wdm 8-1:1.0: skipping garbage [ 470.702369][ T5799] cdc_wdm 8-1:1.0: skipping garbage [ 471.258619][ T5799] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 471.258769][ T5799] cdc_wdm 8-1:1.0: Unknown control protocol [ 471.312730][ T5799] usb 8-1: USB disconnect, device number 4 [ 477.755893][ T5808] ================================================================== [ 477.755962][ T5808] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x86a/0x1390 [ 477.756060][ T5808] Read of size 8 at addr ffff88805bdbb500 by task kworker/u9:5/5808 [ 477.756080][ T5808] [ 477.756128][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 477.756158][ T5808] Tainted: [L]=SOFTLOCKUP [ 477.756166][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.756180][ T5808] Workqueue: hci4 hci_rx_work [ 477.756212][ T5808] Call Trace: [ 477.756220][ T5808] [ 477.756229][ T5808] dump_stack_lvl+0xe8/0x150 [ 477.756264][ T5808] print_report+0xba/0x230 [ 477.756304][ T5808] ? l2cap_connect_cfm+0x86a/0x1390 [ 477.756324][ T5808] kasan_report+0x117/0x150 [ 477.756422][ T5808] ? l2cap_connect_cfm+0x86a/0x1390 [ 477.756447][ T5808] l2cap_connect_cfm+0x86a/0x1390 [ 477.756472][ T5808] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 477.756492][ T5808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 477.756523][ T5808] ? lockdep_hardirqs_on+0x7a/0x110 [ 477.756551][ T5808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 477.756579][ T5808] ? mutex_lock_nested+0x152/0x1d0 [ 477.756600][ T5808] ? hci_connect_cfm+0x2c/0x140 [ 477.756630][ T5808] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 477.756651][ T5808] hci_connect_cfm+0x95/0x140 [ 477.756682][ T5808] le_conn_complete_evt+0xf65/0x1430 [ 477.756719][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.756750][ T5808] ? irqentry_exit+0x59e/0x620 [ 477.756777][ T5808] ? rcu_is_watching+0x15/0xb0 [ 477.756808][ T5808] ? skb_pull_data+0xfb/0x200 [ 477.756844][ T5808] hci_le_conn_complete_evt+0x187/0x470 [ 477.756878][ T5808] hci_event_packet+0x7af/0x12c0 [ 477.756908][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.756937][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 477.756962][ T5808] ? preempt_schedule_common+0x82/0xd0 [ 477.756995][ T5808] ? preempt_schedule_thunk+0x16/0x30 [ 477.757021][ T5808] ? hci_send_to_monitor+0xe2/0x590 [ 477.757043][ T5808] hci_rx_work+0x3ee/0x1030 [ 477.757075][ T5808] ? preempt_schedule_thunk+0x16/0x30 [ 477.757099][ T5808] ? process_scheduled_works+0xa25/0x1830 [ 477.757129][ T5808] process_scheduled_works+0xb02/0x1830 [ 477.757169][ T5808] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.757200][ T5808] ? assign_work+0x3d5/0x5e0 [ 477.757228][ T5808] worker_thread+0xa50/0xfc0 [ 477.757268][ T5808] kthread+0x388/0x470 [ 477.757289][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 477.757315][ T5808] ? __pfx_kthread+0x10/0x10 [ 477.757336][ T5808] ret_from_fork+0x51e/0xb90 [ 477.757367][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 477.757394][ T5808] ? __switch_to+0xc7d/0x1450 [ 477.757420][ T5808] ? __pfx_kthread+0x10/0x10 [ 477.757441][ T5808] ret_from_fork_asm+0x1a/0x30 [ 477.757467][ T5808] [ 477.757475][ T5808] [ 477.757479][ T5808] Allocated by task 5808: [ 477.757524][ T5808] kasan_save_track+0x3e/0x80 [ 477.757551][ T5808] __kasan_kmalloc+0x93/0xb0 [ 477.757578][ T5808] __kmalloc_cache_noprof+0x3a6/0x690 [ 477.757654][ T5808] l2cap_chan_create+0x51/0x7a0 [ 477.757676][ T5808] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 477.757699][ T5808] l2cap_connect_cfm+0x368/0x1390 [ 477.757717][ T5808] hci_connect_cfm+0x95/0x140 [ 477.757743][ T5808] le_conn_complete_evt+0xf65/0x1430 [ 477.757774][ T5808] hci_le_conn_complete_evt+0x187/0x470 [ 477.757801][ T5808] hci_event_packet+0x7af/0x12c0 [ 477.757823][ T5808] hci_rx_work+0x3ee/0x1030 [ 477.757847][ T5808] process_scheduled_works+0xb02/0x1830 [ 477.757872][ T5808] worker_thread+0xa50/0xfc0 [ 477.757898][ T5808] kthread+0x388/0x470 [ 477.757915][ T5808] ret_from_fork+0x51e/0xb90 [ 477.757941][ T5808] ret_from_fork_asm+0x1a/0x30 [ 477.757958][ T5808] [ 477.757962][ T5808] Freed by task 9118: [ 477.757972][ T5808] kasan_save_track+0x3e/0x80 [ 477.758003][ T5808] kasan_save_free_info+0x46/0x50 [ 477.758066][ T5808] __kasan_slab_free+0x5c/0x80 [ 477.758093][ T5808] kfree+0x1c1/0x6c0 [ 477.758118][ T5808] l2cap_sock_cleanup_listen+0xf0/0x440 [ 477.758140][ T5808] l2cap_sock_release+0x6e/0x270 [ 477.758158][ T5808] sock_close+0xc3/0x240 [ 477.758175][ T5808] __fput+0x461/0xa90 [ 477.758245][ T5808] task_work_run+0x1d9/0x270 [ 477.758266][ T5808] get_signal+0x11c3/0x1310 [ 477.758296][ T5808] arch_do_signal_or_restart+0xbc/0x830 [ 477.758326][ T5808] exit_to_user_mode_loop+0x86/0x480 [ 477.758374][ T5808] do_syscall_64+0x32d/0xf80 [ 477.758427][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.758465][ T5808] [ 477.758470][ T5808] The buggy address belongs to the object at ffff88805bdbb000 [ 477.758470][ T5808] which belongs to the cache kmalloc-2k of size 2048 [ 477.758488][ T5808] The buggy address is located 1280 bytes inside of [ 477.758488][ T5808] freed 2048-byte region [ffff88805bdbb000, ffff88805bdbb800) [ 477.758511][ T5808] [ 477.758516][ T5808] The buggy address belongs to the physical page: [ 477.758531][ T5808] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bdb8 [ 477.758551][ T5808] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 477.758568][ T5808] flags: 0x80000000000040(head|node=0|zone=1) [ 477.758590][ T5808] page_type: f5(slab) [ 477.758614][ T5808] raw: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122 [ 477.758632][ T5808] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 477.758652][ T5808] head: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122 [ 477.758670][ T5808] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 477.758689][ T5808] head: 0080000000000003 ffffea00016f6e01 00000000ffffffff 00000000ffffffff [ 477.758707][ T5808] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 477.758718][ T5808] page dumped because: kasan: bad access detected [ 477.758735][ T5808] page_owner tracks the page as allocated [ 477.758742][ T5808] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5795, tgid 5795 (syz-executor), ts 79641551144, free_ts 0 [ 477.758779][ T5808] post_alloc_hook+0x231/0x280 [ 477.758855][ T5808] get_page_from_freelist+0x28bb/0x2950 [ 477.758874][ T5808] __alloc_frozen_pages_noprof+0x18d/0x380 [ 477.758894][ T5808] allocate_slab+0x77/0x660 [ 477.758915][ T5808] refill_objects+0x334/0x3c0 [ 477.758935][ T5808] __pcs_replace_empty_main+0x328/0x5f0 [ 477.758958][ T5808] __kmalloc_cache_noprof+0x44e/0x690 [ 477.758993][ T5808] rtnl_newlink+0x136/0x1be0 [ 477.759090][ T5808] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 477.759110][ T5808] netlink_rcv_skb+0x232/0x4b0 [ 477.759167][ T5808] netlink_unicast+0x831/0x9f0 [ 477.759221][ T5808] netlink_sendmsg+0x813/0xb40 [ 477.759241][ T5808] __sys_sendto+0x72a/0x7d0 [ 477.759290][ T5808] __x64_sys_sendto+0xde/0x100 [ 477.759314][ T5808] do_syscall_64+0x14d/0xf80 [ 477.759341][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.759360][ T5808] page_owner free stack trace missing [ 477.759368][ T5808] [ 477.759372][ T5808] Memory state around the buggy address: [ 477.759451][ T5808] ffff88805bdbb400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.759466][ T5808] ffff88805bdbb480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.759479][ T5808] >ffff88805bdbb500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.759489][ T5808] ^ [ 477.759500][ T5808] ffff88805bdbb580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.759513][ T5808] ffff88805bdbb600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.759524][ T5808] ================================================================== [ 477.759647][ T5808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 477.759666][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 477.759696][ T5808] Tainted: [L]=SOFTLOCKUP [ 477.759704][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.759718][ T5808] Workqueue: hci4 hci_rx_work [ 477.759745][ T5808] Call Trace: [ 477.759754][ T5808] [ 477.759763][ T5808] vpanic+0x56c/0xa60 [ 477.759797][ T5808] ? __pfx_vpanic+0x10/0x10 [ 477.759832][ T5808] panic+0xc5/0xd0 [ 477.759861][ T5808] ? __pfx_panic+0x10/0x10 [ 477.759892][ T5808] ? preempt_schedule_thunk+0x16/0x30 [ 477.759917][ T5808] ? l2cap_connect_cfm+0x86a/0x1390 [ 477.759938][ T5808] ? preempt_schedule_thunk+0x16/0x30 [ 477.759962][ T5808] ? l2cap_connect_cfm+0x86a/0x1390 [ 477.759990][ T5808] check_panic_on_warn+0x89/0xb0 [ 477.760015][ T5808] ? l2cap_connect_cfm+0x86a/0x1390 [ 477.760034][ T5808] end_report+0x73/0x180 [ 477.760065][ T5808] ? l2cap_connect_cfm+0x86a/0x1390 [ 477.760085][ T5808] kasan_report+0x128/0x150 [ 477.760117][ T5808] ? l2cap_connect_cfm+0x86a/0x1390 [ 477.760140][ T5808] l2cap_connect_cfm+0x86a/0x1390 [ 477.760164][ T5808] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 477.760185][ T5808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 477.760213][ T5808] ? lockdep_hardirqs_on+0x7a/0x110 [ 477.760240][ T5808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 477.760268][ T5808] ? mutex_lock_nested+0x152/0x1d0 [ 477.760288][ T5808] ? hci_connect_cfm+0x2c/0x140 [ 477.760317][ T5808] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 477.760339][ T5808] hci_connect_cfm+0x95/0x140 [ 477.760370][ T5808] le_conn_complete_evt+0xf65/0x1430 [ 477.760407][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.760439][ T5808] ? irqentry_exit+0x59e/0x620 [ 477.760466][ T5808] ? rcu_is_watching+0x15/0xb0 [ 477.760490][ T5808] ? skb_pull_data+0xfb/0x200 [ 477.760522][ T5808] hci_le_conn_complete_evt+0x187/0x470 [ 477.760557][ T5808] hci_event_packet+0x7af/0x12c0 [ 477.760589][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.760619][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 477.760645][ T5808] ? preempt_schedule_common+0x82/0xd0 [ 477.760672][ T5808] ? preempt_schedule_thunk+0x16/0x30 [ 477.760697][ T5808] ? hci_send_to_monitor+0xe2/0x590 [ 477.760719][ T5808] hci_rx_work+0x3ee/0x1030 [ 477.760746][ T5808] ? preempt_schedule_thunk+0x16/0x30 [ 477.760770][ T5808] ? process_scheduled_works+0xa25/0x1830 [ 477.760799][ T5808] process_scheduled_works+0xb02/0x1830 [ 477.760839][ T5808] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.760870][ T5808] ? assign_work+0x3d5/0x5e0 [ 477.760900][ T5808] worker_thread+0xa50/0xfc0 [ 477.760941][ T5808] kthread+0x388/0x470 [ 477.760961][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 477.760998][ T5808] ? __pfx_kthread+0x10/0x10 [ 477.761019][ T5808] ret_from_fork+0x51e/0xb90 [ 477.761049][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 477.761076][ T5808] ? __switch_to+0xc7d/0x1450 [ 477.761103][ T5808] ? __pfx_kthread+0x10/0x10 [ 477.761124][ T5808] ret_from_fork_asm+0x1a/0x30 [ 477.761151][ T5808] [ 477.761398][ T5808] Kernel Offset: disabled