last executing test programs: 15.666369233s ago: executing program 3 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioprio_get$pid(0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) 13.337298869s ago: executing program 3 (id=371): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x880) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0xfffffffffffffffb, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) 11.756703677s ago: executing program 3 (id=374): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 8.791969494s ago: executing program 3 (id=377): socket(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) 7.543577945s ago: executing program 3 (id=381): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x80000000, @empty, 0xe}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000180)=0x7, 0x4) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffeffff}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f5, 0x0, 0x0, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x0) fanotify_init(0xf00, 0x1) recvfrom$inet6(r0, &(0x7f00000003c0)=""/201, 0xc9, 0x0, &(0x7f0000000280)={0xa, 0x4e24, 0x2bfc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) fanotify_mark(0xffffffffffffffff, 0x105, 0x20, 0xffffffffffffffff, 0x0) 6.195205472s ago: executing program 0 (id=384): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000480)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 5.909670566s ago: executing program 0 (id=386): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000340)={0x40, 0x16, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) 4.485219467s ago: executing program 1 (id=389): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x3, 0x10000, 0x2, 0x10000421, 0x5, 0xcc7, 0x77fffffe, 0xa, 0x5, 0x3ff, 0x0, 0x300, 0x1, 0x1, 0x9, 0x800, 0x40400, 0x8, 0x6, 0x1fe, 0x80000089, 0x7ff, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7fffffe]}) 3.872000018s ago: executing program 1 (id=390): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x14, 0x0, 0x200, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4", 0x8f}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.871319788s ago: executing program 2 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioprio_get$pid(0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) 2.911581926s ago: executing program 1 (id=392): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x880) socket$inet6(0xa, 0x5, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) 2.910577786s ago: executing program 2 (id=393): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 2.832550709s ago: executing program 0 (id=394): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000480)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 2.82185901s ago: executing program 2 (id=395): socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x2, 0x1a1003) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) close_range(r0, 0xffffffffffffffff, 0x0) 2.692948536s ago: executing program 1 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4044880}, 0x40848d0) fanotify_init(0x79, 0x101000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) accept4(r2, 0x0, 0x0, 0x800) setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x77359400}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) inotify_init1(0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000200000505000100070000000900020073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20008000) fcntl$setstatus(r4, 0x4, 0x2c00) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 2.677288637s ago: executing program 0 (id=397): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f0", 0x82}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d", 0xd7}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32", 0xc7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60", 0xb0}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.065304237s ago: executing program 2 (id=398): socket(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) 1.842337229s ago: executing program 3 (id=399): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x3, 0x10000, 0x2, 0x10000421, 0x5, 0xcc7, 0x77fffffe, 0xa, 0x5, 0x3ff, 0x0, 0x300, 0x1, 0x1, 0x9, 0x800, 0x40400, 0x8, 0x6, 0x1fe, 0x80000089, 0x7ff, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7fffffe]}) 1.275323497s ago: executing program 1 (id=400): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x14, 0x0, 0x200, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4", 0x8f}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.160011742s ago: executing program 2 (id=401): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sched_setparam(0x0, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.019628719s ago: executing program 0 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioprio_get$pid(0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) 87.825026ms ago: executing program 2 (id=403): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000340)={0x40, 0x16, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) 5.643609ms ago: executing program 0 (id=404): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x880) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) 0s ago: executing program 1 (id=405): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000480)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 72.659446][ T5756] cgroup: Unknown subsys name 'net' [ 72.790983][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.296352][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.394241][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.403478][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.414684][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.425084][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.427219][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.433348][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.443771][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.450155][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.457152][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.472593][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.474674][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.482865][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.494699][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.495428][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.512767][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.515252][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.521628][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.537401][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.545908][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.547791][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.560532][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.592469][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.602790][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.616533][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.110853][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 77.152896][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 77.177447][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 77.328126][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 77.356739][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.364262][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.374801][ T5767] bridge_slave_0: entered allmulticast mode [ 77.382897][ T5767] bridge_slave_0: entered promiscuous mode [ 77.416422][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.423690][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.431826][ T5768] bridge_slave_0: entered allmulticast mode [ 77.439407][ T5768] bridge_slave_0: entered promiscuous mode [ 77.447714][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.455175][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.462471][ T5768] bridge_slave_1: entered allmulticast mode [ 77.469570][ T5768] bridge_slave_1: entered promiscuous mode [ 77.478019][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.485615][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.493027][ T5767] bridge_slave_1: entered allmulticast mode [ 77.500651][ T5767] bridge_slave_1: entered promiscuous mode [ 77.524666][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.532108][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.539503][ T5770] bridge_slave_0: entered allmulticast mode [ 77.546500][ T5770] bridge_slave_0: entered promiscuous mode [ 77.556455][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.564150][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.571905][ T5770] bridge_slave_1: entered allmulticast mode [ 77.580329][ T5770] bridge_slave_1: entered promiscuous mode [ 77.637119][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.649497][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.680167][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.701944][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.718155][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.732442][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.786313][ T5768] team0: Port device team_slave_0 added [ 77.828431][ T5768] team0: Port device team_slave_1 added [ 77.845124][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.854991][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.864670][ T5769] bridge_slave_0: entered allmulticast mode [ 77.871717][ T5769] bridge_slave_0: entered promiscuous mode [ 77.882766][ T5767] team0: Port device team_slave_0 added [ 77.897270][ T5770] team0: Port device team_slave_0 added [ 77.913618][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.921844][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.929774][ T5769] bridge_slave_1: entered allmulticast mode [ 77.937752][ T5769] bridge_slave_1: entered promiscuous mode [ 77.947034][ T5767] team0: Port device team_slave_1 added [ 77.957712][ T5770] team0: Port device team_slave_1 added [ 77.976395][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.984090][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.013367][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.060628][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.069020][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.096696][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.110510][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.125053][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.157244][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.165227][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.193793][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.208082][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.215905][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.243355][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.270889][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.278333][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.305138][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.318988][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.326165][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.353058][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.412688][ T5768] hsr_slave_0: entered promiscuous mode [ 78.420366][ T5768] hsr_slave_1: entered promiscuous mode [ 78.442298][ T5769] team0: Port device team_slave_0 added [ 78.453413][ T5769] team0: Port device team_slave_1 added [ 78.519054][ T5770] hsr_slave_0: entered promiscuous mode [ 78.528357][ T5770] hsr_slave_1: entered promiscuous mode [ 78.536675][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.546059][ T5770] Cannot create hsr debugfs directory [ 78.562060][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.569406][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.597189][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.614065][ T5767] hsr_slave_0: entered promiscuous mode [ 78.616268][ T51] Bluetooth: hci3: command tx timeout [ 78.620415][ T5084] Bluetooth: hci1: command tx timeout [ 78.637209][ T5767] hsr_slave_1: entered promiscuous mode [ 78.643654][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.652200][ T5767] Cannot create hsr debugfs directory [ 78.679828][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.689378][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.694983][ T5084] Bluetooth: hci2: command tx timeout [ 78.722292][ T51] Bluetooth: hci0: command tx timeout [ 78.735043][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.891984][ T5769] hsr_slave_0: entered promiscuous mode [ 78.898886][ T5769] hsr_slave_1: entered promiscuous mode [ 78.907319][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.915196][ T5769] Cannot create hsr debugfs directory [ 79.253084][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.281909][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.294575][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.325777][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.380207][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.406848][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.425998][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.437576][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.488952][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.507914][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.519703][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.561026][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.613971][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.642968][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.652788][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.672519][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.742787][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.851567][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.865374][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.884989][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.892593][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.909824][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.952013][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.959727][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.977268][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.987735][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.018992][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.026718][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.043820][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.082298][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.089692][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.101746][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.108985][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.140262][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.147538][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.207333][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.252237][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.259813][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.273832][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.282219][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.313125][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.479390][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.627207][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.694887][ T51] Bluetooth: hci3: command tx timeout [ 80.695866][ T5084] Bluetooth: hci1: command tx timeout [ 80.775564][ T5084] Bluetooth: hci0: command tx timeout [ 80.778161][ T51] Bluetooth: hci2: command tx timeout [ 80.803828][ T5770] veth0_vlan: entered promiscuous mode [ 80.863507][ T5770] veth1_vlan: entered promiscuous mode [ 80.879761][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.958484][ T5770] veth0_macvtap: entered promiscuous mode [ 80.998544][ T5770] veth1_macvtap: entered promiscuous mode [ 81.037305][ T5767] veth0_vlan: entered promiscuous mode [ 81.048315][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.067696][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.083165][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.100297][ T5767] veth1_vlan: entered promiscuous mode [ 81.116579][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.131746][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.142234][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.157175][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.167503][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.292081][ T5769] veth0_vlan: entered promiscuous mode [ 81.303252][ T5767] veth0_macvtap: entered promiscuous mode [ 81.363951][ T5767] veth1_macvtap: entered promiscuous mode [ 81.395856][ T5769] veth1_vlan: entered promiscuous mode [ 81.407447][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.420559][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.441819][ T5768] veth0_vlan: entered promiscuous mode [ 81.478745][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.490393][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.509549][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.523006][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.535017][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.548754][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.577932][ T5768] veth1_vlan: entered promiscuous mode [ 81.581277][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.605848][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.630150][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.641180][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.650420][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.659902][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.713141][ T5769] veth0_macvtap: entered promiscuous mode [ 81.735900][ T5768] veth0_macvtap: entered promiscuous mode [ 81.761913][ T5769] veth1_macvtap: entered promiscuous mode [ 81.810855][ T5768] veth1_macvtap: entered promiscuous mode [ 81.829878][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.844921][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.856954][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.869313][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.881196][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.922957][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.942089][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.948794][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.963545][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.979594][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.023324][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.064030][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.227502][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.240227][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.252805][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.281998][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.304462][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.318772][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.349762][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.415837][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.444495][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.587240][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.649838][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.774875][ T51] Bluetooth: hci3: command tx timeout [ 82.782789][ T51] Bluetooth: hci1: command tx timeout [ 82.860084][ T5084] Bluetooth: hci2: command tx timeout [ 82.860461][ T51] Bluetooth: hci0: command tx timeout [ 83.054927][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.074667][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.092972][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.112182][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.131411][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.149807][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.162729][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.220641][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.255205][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.453129][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.486340][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.524658][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.536447][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.470247][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.627271][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.844195][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.873880][ T51] Bluetooth: hci1: command tx timeout [ 84.880897][ T51] Bluetooth: hci3: command tx timeout [ 84.893718][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.935128][ T5084] Bluetooth: hci2: command tx timeout [ 84.953019][ T5084] Bluetooth: hci0: command tx timeout [ 85.056423][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.781449][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.000206][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.034856][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.586599][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.225991][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.387598][ T27] cfg80211: failed to load regulatory.db [ 87.512692][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 87.945473][ T5812] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 87.959920][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.004577][ T5812] usb 4-1: Product: syz [ 88.008867][ T5812] usb 4-1: Manufacturer: syz [ 88.034045][ T5812] usb 4-1: SerialNumber: syz [ 88.068931][ T5812] usb 4-1: config 0 descriptor?? [ 88.095130][ T5882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.139023][ T5812] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 88.168796][ T5881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.381954][ T5886] random: crng reseeded on system resumption [ 88.497581][ T5887] syz.1.12: attempt to access beyond end of device [ 88.497581][ T5887] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 88.513382][ T5887] FAT-fs (nbd1): unable to read boot sector [ 90.019128][ T5812] gspca_ov534_9: reg_r err -110 [ 90.404428][ T5812] gspca_ov534_9: Unknown sensor 0000 [ 90.404536][ T5812] ov534_9: probe of 4-1:0.0 failed with error -22 [ 90.618969][ T27] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 90.740022][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.815509][ T5906] syz.0.18[5906]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.848709][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.864776][ T5906] process 'syz.0.18' launched '/dev/fd/4' with NULL argv: empty string added [ 90.880464][ T27] usb 3-1: not running at top speed; connect to a high speed hub [ 90.959046][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.023695][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.064905][ T27] usb 3-1: string descriptor 0 read error: -22 [ 91.073694][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.084144][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.322491][ T27] usb 3-1: 0:2 : does not exist [ 91.975989][ T5812] usb 4-1: USB disconnect, device number 2 [ 92.021742][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.640610][ T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 92.663170][ T27] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 92.687166][ T27] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 94.001023][ T27] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 94.039069][ T5920] mkiss: ax0: crc mode is auto. [ 94.107996][ T27] usb 3-1: USB disconnect, device number 2 [ 94.654496][ T5812] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.854535][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 94.877896][ T5812] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 94.901002][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.944639][ T5812] usb 1-1: Product: syz [ 94.956487][ T5812] usb 1-1: Manufacturer: syz [ 94.973866][ T5812] usb 1-1: SerialNumber: syz [ 95.009379][ T5812] usb 1-1: config 0 descriptor?? [ 95.116497][ T5812] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 95.245036][ T5812] dvb-usb: bulk message failed: -22 (4/0) [ 95.251633][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.558667][ T5812] dvb-usb: bulk message failed: -22 (5/0) [ 95.644123][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.764238][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.809190][ T5812] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 95.841529][ T5812] usb 1-1: media controller created [ 95.957924][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.111041][ T5812] usb 1-1: selecting invalid altsetting 3 [ 96.118611][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.130551][ T5812] ttusb2: set interface to alts=3 failed [ 97.814963][ T5811] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 98.374640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 98.506124][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 98.506803][ T5811] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 98.518713][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 98.522361][ T51] Bluetooth: hci0: hardware error 0x00 [ 98.533197][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.823435][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.188858][ T5812] DVB: Unable to find symbol tda10086_attach() [ 100.197570][ T5812] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 100.211585][ T5812] dvb-usb: bulk message failed: -22 (4/0) [ 100.222162][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.242374][ T5811] usb 2-1: can't set config #4, error -71 [ 100.249442][ T5812] dvb-usb: bulk message failed: -22 (5/0) [ 100.262124][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.279231][ T5811] usb 2-1: USB disconnect, device number 2 [ 100.293789][ T5812] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 100.316510][ T5812] usb 1-1: USB disconnect, device number 2 [ 101.798557][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 101.868314][ T5812] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 103.433255][ T5971] mkiss: ax0: crc mode is auto. [ 103.904326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.048321][ T5979] sched: RT throttling activated [ 106.854850][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.140959][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.153930][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.251466][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.319273][ T5840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.344391][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.386260][ T5840] usb 3-1: config 0 descriptor?? [ 108.239416][ T5840] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 108.322068][ T5840] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 108.458683][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 108.478745][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 108.488936][ T51] Bluetooth: hci2: hardware error 0x00 [ 111.003483][ T6016] mkiss: ax0: crc mode is auto. [ 111.584354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.020005][ T5568] usb 3-1: USB disconnect, device number 3 [ 112.022215][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 115.004112][ T6035] mkiss: ax0: crc mode is auto. [ 115.777861][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.787537][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.191430][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 116.211749][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 116.223663][ T5084] Bluetooth: hci1: hardware error 0x00 [ 119.264706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 119.377999][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 119.389869][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 119.407456][ T5779] Bluetooth: hci3: hardware error 0x00 [ 119.734399][ T5084] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 120.179427][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.329639][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.574724][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 122.582198][ T6046] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.591741][ T6046] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.605848][ T6046] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.622230][ T6046] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.869985][ T5811] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.168834][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 125.199459][ T5811] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 125.221813][ T5811] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.239580][ T5811] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.252390][ T5811] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.277811][ T5811] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.290919][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.543060][ T6123] affs: No valid root block on device nullb0 [ 125.615876][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 126.394323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 127.234306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.804302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.984312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.059751][ T6125] mkiss: ax0: crc mode is auto. [ 128.418436][ T5811] usb 2-1: GET_CAPABILITIES returned 0 [ 128.446722][ T5811] usbtmc 2-1:16.0: can't read capabilities [ 129.181030][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 129.216859][ T6069] usb 2-1: USB disconnect, device number 3 [ 129.478454][ T6134] syzkaller0: entered promiscuous mode [ 129.490200][ T6134] syzkaller0: entered allmulticast mode [ 131.644543][ T6144] Falling back ldisc for ttyprintk. [ 133.720388][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.744430][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.250152][ T6158] mkiss: ax0: crc mode is auto. [ 134.624302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.115953][ T6152] random: crng reseeded on system resumption [ 136.270260][ T6164] libceph: resolve '96.' (ret=-3): failed [ 139.019027][ T6183] mkiss: ax0: crc mode is auto. [ 141.523976][ T6194] mkiss: ax0: crc mode is auto. [ 141.894431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 145.612219][ T28] audit: type=1800 audit(1774598990.288:2): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.91" name="/" dev="fuse" ino=9 res=0 errno=0 [ 145.628492][ T6206] netlink: 'syz.2.93': attribute type 2 has an invalid length. [ 145.665746][ T6206] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 148.320834][ T6222] mkiss: ax0: crc mode is auto. [ 153.507430][ T6262] mkiss: ax0: crc mode is auto. [ 159.632825][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 161.279315][ T6314] comedi comedi3: pcmda12: I/O port conflict (0x3,16) [ 162.003985][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 162.011127][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 162.094621][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.331576][ T5840] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 162.364431][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.373103][ T5840] usb 2-1: Product: syz [ 162.388350][ T5840] usb 2-1: Manufacturer: syz [ 162.398569][ T5840] usb 2-1: SerialNumber: syz [ 162.407781][ T5840] usb 2-1: config 0 descriptor?? [ 162.869916][ T5840] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 162.887238][ T5840] usb 2-1: Firmware version (0.0) predates our first public release. [ 162.912062][ T5840] usb 2-1: Please update to version 0.2 or newer [ 163.566746][ T5840] usb 2-1: USB disconnect, device number 4 [ 169.152273][ T6377] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 169.308294][ T6378] Device name cannot be null; rc = [-22] [ 170.779069][ T3519] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.784752][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 175.778915][ T6416] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 175.923310][ T6417] Device name cannot be null; rc = [-22] [ 178.670677][ T6439] mkiss: ax0: crc mode is auto. [ 180.076207][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 181.974491][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 181.975333][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 184.437299][ T6467] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 184.611435][ T6471] Device name cannot be null; rc = [-22] [ 188.139882][ T6494] mkiss: ax0: crc mode is auto. [ 189.378552][ T128] Bluetooth: hci4: Frame reassembly failed (-84) [ 191.337830][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.197560][ T6513] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 193.381107][ T6514] Device name cannot be null; rc = [-22] [ 194.875808][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.882568][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.610713][ T6531] mkiss: ax0: crc mode is auto. [ 198.246159][ T6549] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 198.358840][ T6552] Device name cannot be null; rc = [-22] [ 201.294359][ T6574] mkiss: ax0: crc mode is auto. [ 203.202287][ T6583] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 203.675173][ T6589] Device name cannot be null; rc = [-22] [ 208.713744][ T6629] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 208.834905][ T6630] Device name cannot be null; rc = [-22] [ 210.659723][ T6637] mkiss: ax0: crc mode is auto. [ 213.436505][ T6661] Device name cannot be null; rc = [-22] [ 214.669758][ T6679] warning: `syz.2.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 217.464354][ T6695] mkiss: ax0: crc mode is auto. [ 218.120312][ T6702] Device name cannot be null; rc = [-22] [ 219.681607][ T6710] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.228'. [ 224.085749][ T6736] mkiss: ax0: crc mode is auto. [ 225.872918][ T6743] mkiss: ax0: crc mode is auto. [ 226.705220][ T6750] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.241'. [ 227.077730][ T6759] Device name cannot be null; rc = [-22] [ 234.541381][ T6790] netlink: 'syz.2.251': attribute type 72 has an invalid length. [ 234.716701][ T6789] mkiss: ax0: crc mode is auto. [ 240.045686][ T6828] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 240.223768][ T6833] Device name cannot be null; rc = [-22] [ 245.158656][ T6873] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 245.278290][ T6873] Device name cannot be null; rc = [-22] [ 246.365407][ T6878] mkiss: ax0: crc mode is auto. [ 249.325429][ T6912] mkiss: ax0: crc mode is auto. [ 256.336344][ T6955] mkiss: ax0: crc mode is auto. [ 256.997116][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.003702][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.247211][ T6970] Device name cannot be null; rc = [-22] [ 262.000259][ T6988] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.302'. [ 263.153460][ T3513] Bluetooth: hci4: Frame reassembly failed (-84) [ 265.104038][ T7006] Device name cannot be null; rc = [-22] [ 265.174700][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 268.650980][ T7024] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.311'. [ 271.663107][ T7042] Device name cannot be null; rc = [-22] [ 275.587593][ T128] Bluetooth: hci4: Frame reassembly failed (-84) [ 275.768460][ T7068] mkiss: ax0: crc mode is auto. [ 277.584432][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 277.584466][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 281.514810][ T7102] Device name cannot be null; rc = [-22] [ 282.413852][ T7099] autofs4:pid:7099:autofs_fill_super: called with bogus options [ 283.274277][ T3513] Bluetooth: hci4: Frame reassembly failed (-84) [ 286.564327][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 286.574834][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 287.915087][ T7143] autofs4:pid:7143:autofs_fill_super: called with bogus options [ 288.969112][ T7151] mkiss: ax0: crc mode is auto. [ 290.715664][ T5840] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 290.926303][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 290.943506][ T5840] usb 4-1: not running at top speed; connect to a high speed hub [ 290.970967][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.004810][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.021424][ T5840] usb 4-1: string descriptor 0 read error: -22 [ 291.028269][ T5840] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.074524][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.116842][ T5840] usb 4-1: 0:2 : does not exist [ 292.536744][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 292.561508][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 292.748841][ T5840] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 292.788939][ T5840] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 292.823215][ T5840] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 292.891226][ T5840] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 292.966234][ T5840] usb 4-1: USB disconnect, device number 3 [ 294.535580][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 294.574550][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 296.057390][ T7191] random: crng reseeded on system resumption [ 297.530134][ T7195] syz.3.360: attempt to access beyond end of device [ 297.530134][ T7195] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 297.608788][ T7195] FAT-fs (nbd3): unable to read boot sector [ 300.454775][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 303.293321][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 303.300488][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 303.794380][ T6070] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 304.009034][ T6070] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 304.044570][ T6070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.068546][ T6070] usb 4-1: Product: syz [ 304.072962][ T6070] usb 4-1: Manufacturer: syz [ 304.094532][ T6070] usb 4-1: SerialNumber: syz [ 304.116349][ T6070] usb 4-1: config 0 descriptor?? [ 304.645364][ T7240] mkiss: ax0: crc mode is auto. [ 305.443361][ T6070] usb 4-1: Firmware version (0.0) predates our first public release. [ 305.464463][ T6070] usb 4-1: Please update to version 0.2 or newer [ 305.552862][ T6070] usb 4-1: USB disconnect, device number 4 [ 310.411817][ T6084] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 310.440592][ T3513] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.661592][ T6084] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 310.682228][ T6084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.698830][ T6084] usb 1-1: Product: syz [ 310.703248][ T6084] usb 1-1: Manufacturer: syz [ 310.719752][ T6084] usb 1-1: SerialNumber: syz [ 310.736989][ T6084] usb 1-1: config 0 descriptor?? [ 311.556989][ T6084] usb 1-1: Firmware version (0.0) predates our first public release. [ 311.565771][ T6084] usb 1-1: Please update to version 0.2 or newer [ 311.876071][ T6084] usb 1-1: USB disconnect, device number 3 [ 312.456625][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 312.464041][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 314.463400][ T7335] autofs4:pid:7335:autofs_fill_super: called with bogus options [ 315.296075][ T7340] ================================================================== [ 315.305244][ T7340] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 315.313773][ T7340] Read of size 8 at addr ffff888026570c18 by task syz.1.405/7340 [ 315.322139][ T7340] [ 315.324504][ T7340] CPU: 1 PID: 7340 Comm: syz.1.405 Not tainted syzkaller #0 [ 315.332084][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.342381][ T7340] Call Trace: [ 315.346309][ T7340] [ 315.349617][ T7340] dump_stack_lvl+0x18c/0x250 [ 315.354465][ T7340] ? __lock_acquire+0x7d40/0x7d40 [ 315.359972][ T7340] ? show_regs_print_info+0x20/0x20 [ 315.365566][ T7340] ? load_image+0x400/0x400 [ 315.370460][ T7340] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 315.376151][ T7340] ? __virt_addr_valid+0x18c/0x540 [ 315.381668][ T7340] ? __virt_addr_valid+0x469/0x540 [ 315.387004][ T7340] print_report+0xa8/0x210 [ 315.391744][ T7340] ? dvb_device_open+0xca/0x370 [ 315.396977][ T7340] kasan_report+0x117/0x150 [ 315.401778][ T7340] ? chrdev_open+0x3e3/0x6a0 [ 315.406672][ T7340] ? dvb_device_open+0xca/0x370 [ 315.412124][ T7340] dvb_device_open+0xca/0x370 [ 315.417881][ T7340] ? do_raw_spin_unlock+0x121/0x230 [ 315.423645][ T7340] chrdev_open+0x5cc/0x6a0 [ 315.428936][ T7340] ? cd_forget+0x160/0x160 [ 315.433880][ T7340] ? fsnotify_perm+0x3ed/0x5e0 [ 315.439697][ T7340] ? cd_forget+0x160/0x160 [ 315.445198][ T7340] do_dentry_open+0x8c6/0x1500 [ 315.451030][ T7340] path_openat+0x27f1/0x3230 [ 315.456154][ T7340] ? do_sys_openat2+0xda/0x1d0 [ 315.461107][ T7340] ? verify_lock_unused+0x140/0x140 [ 315.466856][ T7340] ? do_filp_open+0x430/0x430 [ 315.471940][ T7340] ? __virt_addr_valid+0x18c/0x540 [ 315.477476][ T7340] do_filp_open+0x1f5/0x430 [ 315.482262][ T7340] ? vfs_tmpfile+0x490/0x490 [ 315.487311][ T7340] ? _raw_spin_unlock+0x28/0x40 [ 315.493054][ T7340] ? alloc_fd+0x58f/0x630 [ 315.497411][ T7340] do_sys_openat2+0x134/0x1d0 [ 315.502100][ T7340] ? do_sys_open+0xe0/0xe0 [ 315.506689][ T7340] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 315.512982][ T7340] ? lock_chain_count+0x20/0x20 [ 315.518010][ T7340] __x64_sys_openat+0x139/0x160 [ 315.522866][ T7340] do_syscall_64+0x55/0xa0 [ 315.527374][ T7340] ? clear_bhb_loop+0x40/0x90 [ 315.532053][ T7340] ? clear_bhb_loop+0x40/0x90 [ 315.536902][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.543771][ T7340] RIP: 0033:0x7f1cf7f5cfce [ 315.548476][ T7340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.569149][ T7340] RSP: 002b:00007f1cf8d92b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.578209][ T7340] RAX: ffffffffffffffda RBX: 00007f1cf8d936c0 RCX: 00007f1cf7f5cfce [ 315.586673][ T7340] RDX: 0000000000040002 RSI: 00007f1cf8d92c00 RDI: ffffffffffffff9c [ 315.595002][ T7340] RBP: 00007f1cf8d92c00 R08: 0000000000000000 R09: 0000000000000000 [ 315.603149][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 315.611554][ T7340] R13: 00007f1cf8216038 R14: 00007f1cf8215fa0 R15: 00007ffcb1706c08 [ 315.619885][ T7340] [ 315.623807][ T7340] [ 315.626446][ T7340] Allocated by task 1: [ 315.630621][ T7340] kasan_set_track+0x4e/0x70 [ 315.635402][ T7340] __kasan_kmalloc+0x8f/0xa0 [ 315.641034][ T7340] dvb_register_device+0x2fd/0x2210 [ 315.646753][ T7340] dvb_register_frontend+0x649/0x930 [ 315.653289][ T7340] vidtv_bridge_probe+0x9ab/0xf80 [ 315.658342][ T7340] platform_probe+0x13b/0x1c0 [ 315.663390][ T7340] really_probe+0x25b/0xb20 [ 315.668266][ T7340] __driver_probe_device+0x18c/0x330 [ 315.674019][ T7340] driver_probe_device+0x4f/0x420 [ 315.679180][ T7340] __driver_attach+0x44e/0x6e0 [ 315.683959][ T7340] bus_for_each_dev+0x235/0x2b0 [ 315.688832][ T7340] bus_add_driver+0x340/0x630 [ 315.693812][ T7340] driver_register+0x23a/0x310 [ 315.698602][ T7340] vidtv_bridge_init+0x3d/0x70 [ 315.703479][ T7340] do_one_initcall+0x242/0x790 [ 315.708534][ T7340] do_initcall_level+0x137/0x1f0 [ 315.713572][ T7340] do_initcalls+0x69/0xd0 [ 315.717901][ T7340] kernel_init_freeable+0x3ed/0x580 [ 315.723446][ T7340] kernel_init+0x1d/0x1c0 [ 315.727781][ T7340] ret_from_fork+0x48/0x80 [ 315.732385][ T7340] ret_from_fork_asm+0x11/0x20 [ 315.737145][ T7340] [ 315.739760][ T7340] Freed by task 7314: [ 315.744565][ T7340] kasan_set_track+0x4e/0x70 [ 315.749854][ T7340] kasan_save_free_info+0x2e/0x50 [ 315.754962][ T7340] ____kasan_slab_free+0x126/0x1e0 [ 315.760254][ T7340] slab_free_freelist_hook+0x130/0x1a0 [ 315.765891][ T7340] __kmem_cache_free+0xba/0x1e0 [ 315.771436][ T7340] dvb_device_open+0x2ee/0x370 [ 315.776296][ T7340] chrdev_open+0x5cc/0x6a0 [ 315.780968][ T7340] do_dentry_open+0x8c6/0x1500 [ 315.786175][ T7340] path_openat+0x27f1/0x3230 [ 315.790938][ T7340] do_filp_open+0x1f5/0x430 [ 315.796026][ T7340] do_sys_openat2+0x134/0x1d0 [ 315.800898][ T7340] __x64_sys_openat+0x139/0x160 [ 315.806377][ T7340] do_syscall_64+0x55/0xa0 [ 315.810884][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.817574][ T7340] [ 315.819987][ T7340] The buggy address belongs to the object at ffff888026570c00 [ 315.819987][ T7340] which belongs to the cache kmalloc-256 of size 256 [ 315.834826][ T7340] The buggy address is located 24 bytes inside of [ 315.834826][ T7340] freed 256-byte region [ffff888026570c00, ffff888026570d00) [ 315.848895][ T7340] [ 315.851309][ T7340] The buggy address belongs to the physical page: [ 315.858165][ T7340] page:ffffea0000995c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26570 [ 315.868950][ T7340] head:ffffea0000995c00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 315.878170][ T7340] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 315.886871][ T7340] page_type: 0xffffffff() [ 315.891919][ T7340] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 315.902375][ T7340] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 315.911355][ T7340] page dumped because: kasan: bad access detected [ 315.918225][ T7340] page_owner tracks the page as allocated [ 315.924292][ T7340] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13748992735, free_ts 0 [ 315.945889][ T7340] post_alloc_hook+0x1c1/0x200 [ 315.951518][ T7340] get_page_from_freelist+0x1951/0x19e0 [ 315.958217][ T7340] __alloc_pages+0x1f0/0x460 [ 315.962984][ T7340] alloc_page_interleave+0x24/0x1e0 [ 315.968203][ T7340] alloc_slab_page+0x5d/0x160 [ 315.973283][ T7340] new_slab+0x87/0x2d0 [ 315.977665][ T7340] ___slab_alloc+0xc5d/0x12f0 [ 315.982542][ T7340] __kmem_cache_alloc_node+0x19e/0x250 [ 315.988186][ T7340] kmalloc_trace+0x2a/0xe0 [ 315.992722][ T7340] bus_add_driver+0x162/0x630 [ 315.997682][ T7340] driver_register+0x23a/0x310 [ 316.003002][ T7340] usb_register_driver+0x206/0x3d0 [ 316.008496][ T7340] do_one_initcall+0x242/0x790 [ 316.013356][ T7340] do_initcall_level+0x137/0x1f0 [ 316.018382][ T7340] do_initcalls+0x69/0xd0 [ 316.023057][ T7340] kernel_init_freeable+0x3ed/0x580 [ 316.028780][ T7340] page_owner free stack trace missing [ 316.034487][ T7340] [ 316.036891][ T7340] Memory state around the buggy address: [ 316.042777][ T7340] ffff888026570b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 316.051390][ T7340] ffff888026570b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 316.059574][ T7340] >ffff888026570c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.068089][ T7340] ^ [ 316.073039][ T7340] ffff888026570c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.081446][ T7340] ffff888026570d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 316.090228][ T7340] ================================================================== [ 316.176729][ T7340] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 316.184271][ T7340] CPU: 0 PID: 7340 Comm: syz.1.405 Not tainted syzkaller #0 [ 316.191776][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 316.203035][ T7340] Call Trace: [ 316.206794][ T7340] [ 316.209804][ T7340] dump_stack_lvl+0x18c/0x250 [ 316.214791][ T7340] ? show_regs_print_info+0x20/0x20 [ 316.220229][ T7340] ? load_image+0x400/0x400 [ 316.224957][ T7340] panic+0x2dc/0x730 [ 316.229228][ T7340] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.236095][ T7340] ? bpf_jit_dump+0xd0/0xd0 [ 316.240715][ T7340] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 316.247143][ T7340] ? _raw_spin_unlock+0x40/0x40 [ 316.252424][ T7340] ? dvb_device_open+0xca/0x370 [ 316.257389][ T7340] check_panic_on_warn+0x84/0xa0 [ 316.262550][ T7340] ? dvb_device_open+0xca/0x370 [ 316.267876][ T7340] end_report+0x6f/0x130 [ 316.272247][ T7340] kasan_report+0x128/0x150 [ 316.276900][ T7340] ? chrdev_open+0x3e3/0x6a0 [ 316.281625][ T7340] ? dvb_device_open+0xca/0x370 [ 316.286487][ T7340] dvb_device_open+0xca/0x370 [ 316.291605][ T7340] ? do_raw_spin_unlock+0x121/0x230 [ 316.297163][ T7340] chrdev_open+0x5cc/0x6a0 [ 316.301871][ T7340] ? cd_forget+0x160/0x160 [ 316.306312][ T7340] ? fsnotify_perm+0x3ed/0x5e0 [ 316.311279][ T7340] ? cd_forget+0x160/0x160 [ 316.316333][ T7340] do_dentry_open+0x8c6/0x1500 [ 316.321383][ T7340] path_openat+0x27f1/0x3230 [ 316.325979][ T7340] ? do_sys_openat2+0xda/0x1d0 [ 316.331089][ T7340] ? verify_lock_unused+0x140/0x140 [ 316.336459][ T7340] ? do_filp_open+0x430/0x430 [ 316.341223][ T7340] ? __virt_addr_valid+0x18c/0x540 [ 316.346525][ T7340] do_filp_open+0x1f5/0x430 [ 316.351065][ T7340] ? vfs_tmpfile+0x490/0x490 [ 316.356298][ T7340] ? _raw_spin_unlock+0x28/0x40 [ 316.361243][ T7340] ? alloc_fd+0x58f/0x630 [ 316.365750][ T7340] do_sys_openat2+0x134/0x1d0 [ 316.371148][ T7340] ? do_sys_open+0xe0/0xe0 [ 316.375598][ T7340] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 316.381699][ T7340] ? lock_chain_count+0x20/0x20 [ 316.386646][ T7340] __x64_sys_openat+0x139/0x160 [ 316.391795][ T7340] do_syscall_64+0x55/0xa0 [ 316.396503][ T7340] ? clear_bhb_loop+0x40/0x90 [ 316.401295][ T7340] ? clear_bhb_loop+0x40/0x90 [ 316.406416][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.413104][ T7340] RIP: 0033:0x7f1cf7f5cfce [ 316.417867][ T7340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.438544][ T7340] RSP: 002b:00007f1cf8d92b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.447718][ T7340] RAX: ffffffffffffffda RBX: 00007f1cf8d936c0 RCX: 00007f1cf7f5cfce [ 316.455961][ T7340] RDX: 0000000000040002 RSI: 00007f1cf8d92c00 RDI: ffffffffffffff9c [ 316.464457][ T7340] RBP: 00007f1cf8d92c00 R08: 0000000000000000 R09: 0000000000000000 [ 316.472944][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 316.481269][ T7340] R13: 00007f1cf8216038 R14: 00007f1cf8215fa0 R15: 00007ffcb1706c08 [ 316.489861][ T7340] [ 316.493614][ T7340] Kernel Offset: disabled [ 316.498040][ T7340] Rebooting in 86400 seconds..