last executing test programs: 10m38.508363369s ago: executing program 3 (id=2858): r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20008800) 10m38.293373523s ago: executing program 0 (id=2859): connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x3, 0x4000c2}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket(0x21, 0x2, 0x2) epoll_create1(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x77cf, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000840), 0xb40, 0x0) 10m37.637244592s ago: executing program 3 (id=2864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80002, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 10m36.452662728s ago: executing program 2 (id=2868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x105837, 0x5, 0x1, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x8000000000000000, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0xbe4, 0x8], 0xeeee8000, 0x1120c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m35.849408917s ago: executing program 3 (id=2869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)={0xff}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf", @ANYRES32=r5, @ANYBLOB="08000400ac14143d080002007f00000108000200e000000208000900030100"/48], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xa1ed, 0x4000, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) 10m35.723445042s ago: executing program 0 (id=2870): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002680)='./file0\x00', 0x987f543068eb4fa, 0x1f7) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x1) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 10m34.863211321s ago: executing program 2 (id=2871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 10m34.84979955s ago: executing program 0 (id=2872): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x161, 0x40000867, r0, 0x0) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80042, 0x43) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x3, 0x3, 0x7ffc, 0x2, 0x5, 0x40, {0x800000001, 0x180, 0x20ff, 0x9, 0x89, 0xd614, 0x5, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0x7f03) 10m33.196831402s ago: executing program 0 (id=2873): r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20008800) 10m32.995672034s ago: executing program 2 (id=2874): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="814b00db01a667024600000000000000000000000000210001000808ef440ae7"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) 10m32.800425429s ago: executing program 2 (id=2875): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000100"/19, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="1400063a186d4765b47e7200000000000000000014000700ff05"], 0x68}}, 0x0) 10m32.489196498s ago: executing program 2 (id=2877): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x101301) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) uname(0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0}) lseek(r2, 0xfffd, 0x0) 10m30.681203626s ago: executing program 2 (id=2879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80002, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 10m29.608106861s ago: executing program 3 (id=2882): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000280)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x3ff) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000240)={0x200, 0x6, 0x9, 0x5, 0x0, "ea55eea16d659f1a5c85129b27a188d9b2943a"}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0xfffffff7, 0xffffffff, 0x0, 0x10000, 0x0, "fe94160000000000111300"}) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 10m27.927277126s ago: executing program 0 (id=2883): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002680)='./file0\x00', 0x987f543068eb4fa, 0x1f7) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 10m27.923233497s ago: executing program 3 (id=2884): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="814b00db01a667024600000000000000000000000000210001000808ef440ae7"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) 10m27.150098234s ago: executing program 0 (id=2885): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 10m26.033549808s ago: executing program 3 (id=2887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000100"/19, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="1400063a186d4765b47e7200000000000000000014000700ff05"], 0x68}}, 0x0) 10m14.575726839s ago: executing program 32 (id=2879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80002, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 10m10.912919629s ago: executing program 33 (id=2885): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 10m10.343973921s ago: executing program 34 (id=2887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000100"/19, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="1400063a186d4765b47e7200000000000000000014000700ff05"], 0x68}}, 0x0) 7m20.548498113s ago: executing program 4 (id=4911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x201, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0, 0x4000}], 0x2) 7m20.332938688s ago: executing program 4 (id=4912): inotify_init() bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={r4, 0x1000, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) 7m20.177988861s ago: executing program 4 (id=4913): socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create(0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket(0x200000000000011, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m19.913346657s ago: executing program 4 (id=4914): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap(&(0x7f000053f000/0x3000)=nil, 0x3000, 0x8, 0x11012, 0xffffffffffffffff, 0x1000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xffffffffffffffad, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) 7m18.003337514s ago: executing program 4 (id=4915): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x1, 0x1800}], 0x1, 0x0) semop(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) semop(r0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 7m17.523555261s ago: executing program 4 (id=4919): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002680)='./file0\x00', 0x987f543068eb4fa, 0x1f7) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 7m11.282062081s ago: executing program 7 (id=4927): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x7c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x58, 0x1, 0x0, 0x1, [@nested={0x52, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x127, 0x0, 0x0, @u32=0x5}, @generic="0753e778c928f9d66fb555dd766a38c43349d9f22e916f559c14536d8a81c74d6084ab0b0416863c7e7f7541ca8f72e9fbd26b7afe12af0a92736235dc76"]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c00028008", @ANYRES32, @ANYBLOB="58d45b151f476145e82b4a40cf77d2efb9cc16ea964ee36bd8a82e249dbc2b24e6a14e08e6dd3881c6dccd01fa217557a25513f46905ff3dceb4da29b6066ba09ae0dea72d5556a0807a6d783ec2c27aabe44a01df7e207cf720be81561cb375fa8932d4193703314b1ae9a6571b29831f0dc22a2f13468a3eb07c328e8b19c62f11fdc2fa00c6eae9316d21413c4b9b7e50a16e59790350721ed918a8d5954bacbe0be2c331fcfb869cdd5666e09c8a397735f2ada55d0a94dc68fbffea9ccc8cea8420cdbb91aedf11ddeade"], 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, 0x0, 0x0) listen(r1, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) 7m3.150958204s ago: executing program 7 (id=4936): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x97, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x0, 0x1ff, 0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x304bde207c82038}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m1.258289197s ago: executing program 7 (id=4939): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) 6m57.000548829s ago: executing program 7 (id=4943): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x1, 0x1800}], 0x1, 0x0) semop(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) semop(r0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 6m52.415087546s ago: executing program 7 (id=4950): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) iopl(0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40006) 6m49.254033268s ago: executing program 7 (id=4953): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 6m33.853392266s ago: executing program 35 (id=4953): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5m51.860491966s ago: executing program 5 (id=5026): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x4, 0xfffffff9, &(0x7f0000000080)}) 5m51.668769423s ago: executing program 5 (id=5027): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a00000000000000000000000000000000006401010000000000000000000000000069d4d7"], 0x38}}, 0x48c0) 5m51.276808699s ago: executing program 5 (id=5028): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 5m50.212464713s ago: executing program 5 (id=5030): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 5m46.783706937s ago: executing program 5 (id=5034): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002340)=@abs={0x0, 0x0, 0x40004e20}, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(r0, &(0x7f00000023c0)='net/netlink\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'hsr0\x00', 0xd}) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 5m44.017425103s ago: executing program 5 (id=5036): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x8100}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '\"\x00', 0x0, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) 5m27.85151336s ago: executing program 36 (id=5036): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x8100}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '\"\x00', 0x0, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) 11.884715254s ago: executing program 6 (id=5464): socket$kcm(0x28, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000040)) 8.765060549s ago: executing program 6 (id=5469): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000140)={0x0, 0xb, 0x2, {0x2, 0x31}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.463598341s ago: executing program 6 (id=5474): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b7000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000009780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000afc8a00000c0a01"], 0x8b44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) 4.799467462s ago: executing program 6 (id=5476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000040)) 3.805709385s ago: executing program 6 (id=5477): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x7d, 0xa8, 0xe3, 0x40, 0xdba, 0x5000, 0x3d88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0x77, 0xb3, 0x6a}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d", 0x1a8}], 0x1}}], 0x1, 0x400c0) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0xffffffffffffffff, 0x0) 3.762972226s ago: executing program 1 (id=5478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x8010) 3.620831983s ago: executing program 1 (id=5479): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 3.111742316s ago: executing program 1 (id=5480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x180}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 1.45472751s ago: executing program 1 (id=5481): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x15, @empty, 'macvlan1\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'macvlan0\x00'}}, 0x1e) 352.348121ms ago: executing program 1 (id=5482): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) lseek(r2, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 245.397918ms ago: executing program 1 (id=5483): getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 0s ago: executing program 6 (id=5484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): mand tx timeout [ 1322.037776][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1323.524141][ T61] Bluetooth: hci3: command tx timeout [ 1324.003616][ T61] Bluetooth: hci5: command tx timeout [ 1325.164502][T20320] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1325.232615][T20732] tun0: tun_chr_ioctl cmd 1074025680 [ 1325.956139][T20771] binder: 20768:20771 ioctl c018620c 0 returned -14 [ 1325.958373][T20771] netlink: 'syz.6.5065': attribute type 1 has an invalid length. [ 1326.084616][ T61] Bluetooth: hci5: command tx timeout [ 1328.163529][ T61] Bluetooth: hci5: command tx timeout [ 1331.657953][T20162] usb 6-1: USB disconnect, device number 5 [ 1331.824885][ T5790] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1332.006762][ T5790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1332.006802][ T5790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1332.006849][ T5790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1332.006879][ T5790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1332.047736][ T5790] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1332.048872][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.048901][ T5790] usb 2-1: Product: syz [ 1332.048918][ T5790] usb 2-1: Manufacturer: syz [ 1332.049190][ T5790] usb 2-1: SerialNumber: syz [ 1332.124424][T15449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1332.313612][T15449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1332.360754][T20819] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1332.364398][ T5790] cdc_mbim 2-1:1.0: skipping garbage [ 1332.520585][T15449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1332.533731][T15449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1332.540158][T15449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1332.570784][T20819] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1332.570921][T20819] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1333.247805][T20819] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1333.247943][T20819] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1333.248367][ T5790] cdc_mbim 2-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 1333.248384][ T5790] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 1334.627268][ T5790] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1334.630387][ T5790] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1334.644070][T15449] Bluetooth: hci0: command tx timeout [ 1334.699461][ T5790] wwan wwan0: port wwan0mbim0 attached [ 1335.101705][ T5790] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, b6:a5:1f:c8:c7:44 [ 1335.182872][ T5790] usb 2-1: USB disconnect, device number 76 [ 1335.258230][ T5790] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1335.579513][ T5790] wwan wwan0: port wwan0mbim0 disconnected [ 1337.549612][T15449] Bluetooth: hci0: command tx timeout [ 1339.607211][T15449] Bluetooth: hci0: command tx timeout [ 1340.066327][T14896] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.269440][T20741] chnl_net:caif_netlink_parms(): no params data found [ 1340.299104][T20760] chnl_net:caif_netlink_parms(): no params data found [ 1341.684199][T15449] Bluetooth: hci0: command tx timeout [ 1341.799924][T14896] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.598168][T14896] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.476708][T14896] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.095092][T20741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.111527][T20741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.111803][T20741] bridge_slave_0: entered allmulticast mode [ 1345.137612][T20741] bridge_slave_0: entered promiscuous mode [ 1345.241075][T20760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.241211][T20760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.241465][T20760] bridge_slave_0: entered allmulticast mode [ 1345.249611][T20760] bridge_slave_0: entered promiscuous mode [ 1345.277917][T20741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.278045][T20741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.278264][T20741] bridge_slave_1: entered allmulticast mode [ 1345.324438][T20741] bridge_slave_1: entered promiscuous mode [ 1346.183779][T20760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.183951][T20760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.184276][T20760] bridge_slave_1: entered allmulticast mode [ 1346.187330][T20760] bridge_slave_1: entered promiscuous mode [ 1347.175706][T20741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.207955][T20760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.239512][T20741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.240112][T20824] chnl_net:caif_netlink_parms(): no params data found [ 1347.317510][T20760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.166352][T20741] team0: Port device team_slave_0 added [ 1349.314986][T20760] team0: Port device team_slave_0 added [ 1349.318575][T20741] team0: Port device team_slave_1 added [ 1349.376142][T20760] team0: Port device team_slave_1 added [ 1351.544877][T20741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.544898][T20741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.544929][T20741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.799763][T20760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.799783][T20760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.799814][T20760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.802400][T20741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.802418][T20741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.802449][T20741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.038890][T20915] netlink: 'syz.6.5093': attribute type 12 has an invalid length. [ 1352.231545][T20760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.231568][T20760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.231601][T20760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.343748][T20824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.343898][T20824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.344108][T20824] bridge_slave_0: entered allmulticast mode [ 1352.346125][T20824] bridge_slave_0: entered promiscuous mode [ 1354.650970][T20824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.651124][T20824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.651398][T20824] bridge_slave_1: entered allmulticast mode [ 1354.685047][T20824] bridge_slave_1: entered promiscuous mode [ 1356.119099][T20932] binder: 20931:20932 ioctl c018620c 0 returned -14 [ 1356.122862][T20932] netlink: 'syz.1.5099': attribute type 1 has an invalid length. [ 1356.341295][T20824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.341415][T20932] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 1356.341498][T20932] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 1356.341546][T20932] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 1356.341594][T20932] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 1356.341639][T20932] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 1356.341688][T20932] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 1356.341733][T20932] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 1356.341781][T20932] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 1357.565900][T20741] hsr_slave_0: entered promiscuous mode [ 1357.567501][T20741] hsr_slave_1: entered promiscuous mode [ 1357.593663][T20824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.650713][T20760] hsr_slave_0: entered promiscuous mode [ 1357.664463][T20760] hsr_slave_1: entered promiscuous mode [ 1357.666200][T20760] debugfs: 'hsr0' already exists in 'hsr' [ 1357.666228][T20760] Cannot create hsr debugfs directory [ 1359.239434][T20824] team0: Port device team_slave_0 added [ 1359.396761][T20824] team0: Port device team_slave_1 added [ 1361.528925][T20824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.528944][T20824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.528976][T20824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.613644][T20824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.613672][T20824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.613703][T20824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.339507][T20955] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5105' sets config #0 [ 1363.292270][T20960] binder: 20959:20960 ioctl c018620c 0 returned -14 [ 1363.292988][T20960] validate_nla: 46 callbacks suppressed [ 1363.293000][T20960] netlink: 'syz.1.5107': attribute type 1 has an invalid length. [ 1364.308728][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.308820][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.308871][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.308920][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.308970][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.309021][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.309072][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.309123][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.309282][T20962] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 1364.392791][T20824] hsr_slave_0: entered promiscuous mode [ 1364.405605][T20824] hsr_slave_1: entered promiscuous mode [ 1364.406683][T20824] debugfs: 'hsr0' already exists in 'hsr' [ 1364.406713][T20824] Cannot create hsr debugfs directory [ 1365.886931][T14896] bridge_slave_1: left allmulticast mode [ 1365.886954][T14896] bridge_slave_1: left promiscuous mode [ 1365.887198][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.035223][T14896] bridge_slave_0: left allmulticast mode [ 1366.035257][T14896] bridge_slave_0: left promiscuous mode [ 1366.035510][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.337951][T14896] bridge_slave_1: left allmulticast mode [ 1366.337986][T14896] bridge_slave_1: left promiscuous mode [ 1366.338244][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.335320][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.335483][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.455575][T14896] bridge_slave_0: left allmulticast mode [ 1367.455607][T14896] bridge_slave_0: left promiscuous mode [ 1367.455864][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.954430][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.014279][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.074269][T14896] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1371.177132][T14896] bond0 (unregistering): Released all slaves [ 1371.374151][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.454488][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.525659][T14896] bond0 (unregistering): Released all slaves [ 1371.782455][T21000] binder: 20999:21000 ioctl c018620c 0 returned -14 [ 1371.786062][T21000] validate_nla: 45 callbacks suppressed [ 1371.786083][T21000] netlink: 'syz.1.5116': attribute type 1 has an invalid length. [ 1372.344621][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1372.345826][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1372.345877][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1372.345923][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1372.345969][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1372.346015][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1372.346060][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1372.346105][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1372.346151][T21002] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 1374.066106][ T38] audit: type=1326 audit(1768005931.295:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.067343][ T38] audit: type=1326 audit(1768005931.295:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.067398][ T38] audit: type=1326 audit(1768005931.295:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.067746][ T38] audit: type=1326 audit(1768005931.295:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.068026][ T38] audit: type=1326 audit(1768005931.295:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.068516][ T38] audit: type=1326 audit(1768005931.295:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.068567][ T38] audit: type=1326 audit(1768005931.295:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.069109][ T38] audit: type=1326 audit(1768005931.295:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.069160][ T38] audit: type=1326 audit(1768005931.295:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.069725][ T38] audit: type=1326 audit(1768005931.295:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21010 comm="syz.1.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1374.312132][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1374.337405][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1374.353058][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1374.358629][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1374.368391][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1375.289150][T21026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5122'. [ 1375.770360][T21032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.778948][T21032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.843701][T21034] binder: 21033:21034 ioctl c018620c 0 returned -14 [ 1376.173776][T14896] hsr_slave_0: left promiscuous mode [ 1376.215460][T14896] hsr_slave_1: left promiscuous mode [ 1376.217254][T14896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.217284][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.260283][T14896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.260315][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.454251][T14896] hsr_slave_0: left promiscuous mode [ 1376.484141][T15449] Bluetooth: hci2: command tx timeout [ 1376.491658][T14896] hsr_slave_1: left promiscuous mode [ 1376.512093][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.535006][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.828796][T14896] veth1_macvtap: left promiscuous mode [ 1376.828927][T14896] veth0_macvtap: left promiscuous mode [ 1376.829205][T14896] veth1_vlan: left promiscuous mode [ 1376.829392][T14896] veth0_vlan: left promiscuous mode [ 1378.469068][T21044] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5128'. [ 1378.564317][T15449] Bluetooth: hci2: command tx timeout [ 1379.490574][ T38] kauditd_printk_skb: 74 callbacks suppressed [ 1379.491205][ T38] audit: type=1326 audit(1768005936.715:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.491264][ T38] audit: type=1326 audit(1768005936.715:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.491313][ T38] audit: type=1326 audit(1768005936.715:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.491363][ T38] audit: type=1326 audit(1768005936.715:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.492891][ T38] audit: type=1326 audit(1768005936.715:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.493047][ T38] audit: type=1326 audit(1768005936.715:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.497563][ T38] audit: type=1326 audit(1768005936.715:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.497684][ T38] audit: type=1326 audit(1768005936.715:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.499883][ T38] audit: type=1326 audit(1768005936.725:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1379.551230][ T38] audit: type=1326 audit(1768005936.775:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21046 comm="syz.6.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1380.000042][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1380.016117][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1380.046642][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1380.054917][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1380.058369][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1380.668456][ T61] Bluetooth: hci2: command tx timeout [ 1381.434223][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1381.754463][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1382.163697][ T61] Bluetooth: hci3: command tx timeout [ 1382.723565][ T61] Bluetooth: hci2: command tx timeout [ 1384.253759][ T61] Bluetooth: hci3: command tx timeout [ 1385.824215][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1386.014442][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1386.323642][ T61] Bluetooth: hci3: command tx timeout [ 1386.774061][T21034] validate_nla: 46 callbacks suppressed [ 1386.774089][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774159][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774208][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774258][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774302][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774346][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774391][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774437][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774480][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.774524][T21034] netlink: 'syz.1.5125': attribute type 3 has an invalid length. [ 1386.971334][T21061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5133'. [ 1387.426493][T21069] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5136'. [ 1388.410449][ T61] Bluetooth: hci3: command tx timeout [ 1388.733601][ T38] kauditd_printk_skb: 65 callbacks suppressed [ 1388.733622][ T38] audit: type=1326 audit(1768005945.955:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738237][ T38] audit: type=1326 audit(1768005945.965:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738297][ T38] audit: type=1326 audit(1768005945.965:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738345][ T38] audit: type=1326 audit(1768005945.965:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738393][ T38] audit: type=1326 audit(1768005945.965:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738442][ T38] audit: type=1326 audit(1768005945.965:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738490][ T38] audit: type=1326 audit(1768005945.965:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738536][ T38] audit: type=1326 audit(1768005945.965:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738582][ T38] audit: type=1326 audit(1768005945.965:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1388.738628][ T38] audit: type=1326 audit(1768005945.965:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21074 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1390.070433][T21093] binder: 21092:21093 ioctl c018620c 0 returned -14 [ 1390.229189][T21012] chnl_net:caif_netlink_parms(): no params data found [ 1390.708181][T20824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1390.771164][T21050] chnl_net:caif_netlink_parms(): no params data found [ 1390.815046][T20824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1390.942719][T20824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1391.055132][T20824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1391.458334][T21012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.458679][T21012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.458953][T21012] bridge_slave_0: entered allmulticast mode [ 1391.508707][T21012] bridge_slave_0: entered promiscuous mode [ 1391.521364][T20824] kthread_run failed with err -4 [ 1393.289529][T21012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.289746][T21012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.290076][T21012] bridge_slave_1: entered allmulticast mode [ 1393.323687][T21012] bridge_slave_1: entered promiscuous mode [ 1393.644422][T21130] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5144'. [ 1394.046022][T15449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1394.068678][T15449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1394.070253][T15449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1394.072536][T15449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1394.100569][T15449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1394.729495][T21012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.943762][T21050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.944119][T21050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.944370][T21050] bridge_slave_0: entered allmulticast mode [ 1394.948028][T21050] bridge_slave_0: entered promiscuous mode [ 1394.970805][T21012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.994157][T21050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.994333][T21050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.994606][T21050] bridge_slave_1: entered allmulticast mode [ 1394.997629][T21050] bridge_slave_1: entered promiscuous mode [ 1395.423287][T21147] binder: 21146:21147 ioctl c018620c 0 returned -14 [ 1395.427369][T21147] validate_nla: 97 callbacks suppressed [ 1395.427396][T21147] netlink: 'syz.6.5148': attribute type 1 has an invalid length. [ 1395.759099][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.759205][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.759256][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.778591][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.778654][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.778702][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.778749][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.778795][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.778841][T21147] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 1395.842499][T21012] team0: Port device team_slave_0 added [ 1395.864275][T21050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.999384][T21012] team0: Port device team_slave_1 added [ 1396.019134][T21050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.598609][T21012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.598630][T21012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.598663][T21012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.676498][T21050] team0: Port device team_slave_0 added [ 1398.681704][T21012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.681827][T21012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.681869][T21012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.778639][T21050] team0: Port device team_slave_1 added [ 1401.212834][T21050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.212856][T21050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.212888][T21050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.524390][T21172] binder: 21171:21172 ioctl c018620c 0 returned -14 [ 1401.525139][T21172] validate_nla: 43 callbacks suppressed [ 1401.525155][T21172] netlink: 'syz.1.5156': attribute type 1 has an invalid length. [ 1403.025358][T21050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.025374][T21050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.025398][T21050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.046638][T21012] hsr_slave_0: entered promiscuous mode [ 1403.085242][T21012] hsr_slave_1: entered promiscuous mode [ 1403.087860][T21012] debugfs: 'hsr0' already exists in 'hsr' [ 1403.087942][T21012] Cannot create hsr debugfs directory [ 1403.093573][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1403.093666][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1403.093717][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1403.093773][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1403.093824][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1403.093874][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1403.093925][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1403.093976][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1403.094027][T21172] netlink: 'syz.1.5156': attribute type 3 has an invalid length. [ 1408.745704][T21050] hsr_slave_0: entered promiscuous mode [ 1408.746858][T21050] hsr_slave_1: entered promiscuous mode [ 1408.747666][T21050] debugfs: 'hsr0' already exists in 'hsr' [ 1408.747686][T21050] Cannot create hsr debugfs directory [ 1411.949617][T21132] chnl_net:caif_netlink_parms(): no params data found [ 1413.173527][ T5790] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1413.330037][ T5790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.330075][ T5790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.351285][ T5790] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1413.351378][ T5790] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1413.351433][ T5790] usb 7-1: Manufacturer: syz [ 1413.385550][ T5790] usb 7-1: config 0 descriptor?? [ 1413.719267][T21132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.719573][T21132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.719976][T21132] bridge_slave_0: entered allmulticast mode [ 1413.734076][T21132] bridge_slave_0: entered promiscuous mode [ 1413.932271][T21132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.932421][T21132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.932738][T21132] bridge_slave_1: entered allmulticast mode [ 1413.958740][T21132] bridge_slave_1: entered promiscuous mode [ 1414.017038][ T5790] usbhid 7-1:0.0: can't add hid device: -32 [ 1414.017171][ T5790] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1414.410493][T21132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.557907][T21132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.334808][T21012] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1415.483627][T21012] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1415.652131][T21132] team0: Port device team_slave_0 added [ 1415.659968][T21012] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1415.710986][T21132] team0: Port device team_slave_1 added [ 1415.711296][T21012] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1416.028326][T21132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.028341][T21132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.028362][T21132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.091377][T21132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.091406][T21132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.091437][T21132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.511702][T14896] bridge_slave_1: left allmulticast mode [ 1416.511735][T14896] bridge_slave_1: left promiscuous mode [ 1416.528509][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.918254][T11712] usb 7-1: USB disconnect, device number 5 [ 1417.315422][T14896] bridge_slave_0: left allmulticast mode [ 1417.315454][T14896] bridge_slave_0: left promiscuous mode [ 1417.321022][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.487887][T15449] Bluetooth: Unexpected continuation frame (len 10) [ 1418.299892][T14896] bridge_slave_1: left allmulticast mode [ 1418.299922][T14896] bridge_slave_1: left promiscuous mode [ 1418.300208][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.385392][T14896] bridge_slave_0: left allmulticast mode [ 1418.385424][T14896] bridge_slave_0: left promiscuous mode [ 1418.385691][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.673468][T14896] bridge_slave_1: left allmulticast mode [ 1418.673504][T14896] bridge_slave_1: left promiscuous mode [ 1418.673786][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.765708][T14896] bridge_slave_0: left allmulticast mode [ 1418.765733][T14896] bridge_slave_0: left promiscuous mode [ 1418.765916][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.868982][T14896] bridge_slave_1: left allmulticast mode [ 1418.869015][T14896] bridge_slave_1: left promiscuous mode [ 1418.869426][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.936776][T14896] bridge_slave_0: left allmulticast mode [ 1418.936809][T14896] bridge_slave_0: left promiscuous mode [ 1418.937092][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.404500][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.485225][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.546554][T14896] bond0 (unregistering): Released all slaves [ 1420.060382][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.094313][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.136841][T14896] bond0 (unregistering): Released all slaves [ 1421.343927][T20036] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1421.394244][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.494005][T20036] usb 7-1: Using ep0 maxpacket: 32 [ 1421.496917][T20036] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1421.496967][T20036] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1421.496990][T20036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.502248][T20036] usb 7-1: config 0 descriptor?? [ 1421.525981][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.600806][T14896] bond0 (unregistering): Released all slaves [ 1421.826286][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.906225][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.975873][T14896] bond0 (unregistering): Released all slaves [ 1422.373093][T21132] hsr_slave_0: entered promiscuous mode [ 1422.374988][T21132] hsr_slave_1: entered promiscuous mode [ 1422.375992][T21132] debugfs: 'hsr0' already exists in 'hsr' [ 1422.376019][T21132] Cannot create hsr debugfs directory [ 1422.723551][ T5790] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1422.920332][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.920369][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.921743][ T5790] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1422.921780][ T5790] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1422.921804][ T5790] usb 2-1: Manufacturer: syz [ 1423.015321][ T5790] usb 2-1: config 0 descriptor?? [ 1423.443992][T14896] hsr_slave_0: left promiscuous mode [ 1423.464295][T14896] hsr_slave_1: left promiscuous mode [ 1423.465601][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.515728][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.622984][ T5790] usbhid 2-1:0.0: can't add hid device: -32 [ 1423.623083][ T5790] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1423.663789][T14896] hsr_slave_0: left promiscuous mode [ 1423.703824][T14896] hsr_slave_1: left promiscuous mode [ 1423.704837][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.727645][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.883837][T14896] hsr_slave_0: left promiscuous mode [ 1423.905069][T14896] hsr_slave_1: left promiscuous mode [ 1423.905893][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.945534][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.094065][T14896] hsr_slave_0: left promiscuous mode [ 1424.122202][T20036] usb 7-1: USB disconnect, device number 6 [ 1424.157058][T14896] hsr_slave_1: left promiscuous mode [ 1424.158214][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.206116][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.392461][T15449] Bluetooth: Unexpected continuation frame (len 10) [ 1426.062040][T20036] usb 2-1: USB disconnect, device number 77 [ 1427.025981][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1427.866046][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1428.678459][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.681659][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.491798][T15449] Bluetooth: Unexpected continuation frame (len 10) [ 1434.566494][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1434.590044][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1434.591715][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1434.613494][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1434.640727][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1434.894441][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1435.084567][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1437.133203][T15449] Bluetooth: hci4: command tx timeout [ 1437.986436][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1438.168614][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1439.203832][T15449] Bluetooth: hci4: command tx timeout [ 1439.524291][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1439.695171][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1441.271129][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1441.350009][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1441.371301][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1441.373253][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1441.392198][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1441.873469][ T61] Bluetooth: hci4: command tx timeout [ 1443.537020][ T61] Bluetooth: hci5: command tx timeout [ 1444.507202][ T61] Bluetooth: Unexpected continuation frame (len 10) [ 1444.692444][ T61] Bluetooth: hci4: command tx timeout [ 1444.914434][T21405] binder: 21404:21405 ioctl c018620c 0 returned -14 [ 1444.915464][T21405] validate_nla: 45 callbacks suppressed [ 1444.915490][T21405] netlink: 'syz.6.5210': attribute type 1 has an invalid length. [ 1445.049351][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.049442][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.049492][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.049537][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.049581][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.049625][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.049669][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.049721][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.049765][T21405] netlink: 'syz.6.5210': attribute type 3 has an invalid length. [ 1445.607311][ T61] Bluetooth: hci5: command tx timeout [ 1447.684893][ T61] Bluetooth: hci5: command tx timeout [ 1449.408183][T21367] chnl_net:caif_netlink_parms(): no params data found [ 1449.474561][T21384] chnl_net:caif_netlink_parms(): no params data found [ 1449.773229][ T61] Bluetooth: hci5: command tx timeout [ 1453.036847][T21450] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1453.036883][T21450] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1453.036899][T21450] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1453.050166][ T38] kauditd_printk_skb: 83 callbacks suppressed [ 1453.050189][ T38] audit: type=1800 audit(1768006010.255:726): pid=21450 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5216" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1453.230805][ T61] Bluetooth: Unexpected continuation frame (len 10) [ 1453.936735][T21461] binder: 21460:21461 ioctl c018620c 0 returned -14 [ 1453.937530][T21461] validate_nla: 43 callbacks suppressed [ 1453.937547][T21461] netlink: 'syz.1.5218': attribute type 1 has an invalid length. [ 1454.117279][T15449] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1454.124022][T15449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1454.156905][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.157052][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.157101][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.157147][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.157192][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.157238][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.157284][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.157329][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.157375][T21462] netlink: 'syz.1.5218': attribute type 3 has an invalid length. [ 1454.237288][T15449] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1454.250425][T15449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1454.263238][T15449] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1456.854826][T21367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.857674][T21367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.857943][T21367] bridge_slave_0: entered allmulticast mode [ 1456.861021][T21367] bridge_slave_0: entered promiscuous mode [ 1457.498984][T21367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.499116][T21367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.499334][T21367] bridge_slave_1: entered allmulticast mode [ 1457.502896][T21367] bridge_slave_1: entered promiscuous mode [ 1457.531827][T21384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.531936][T21384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.532111][T21384] bridge_slave_0: entered allmulticast mode [ 1457.536438][T21384] bridge_slave_0: entered promiscuous mode [ 1457.761885][T21384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.762575][T21384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.762839][T21384] bridge_slave_1: entered allmulticast mode [ 1457.790735][T21384] bridge_slave_1: entered promiscuous mode [ 1458.230597][T21367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.243914][T15449] Bluetooth: hci2: command tx timeout [ 1458.274682][T20389] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1458.365639][T21367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.370986][T21384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.444628][T21384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.467622][T20389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.467656][T20389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.468853][T20389] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1458.468882][T20389] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1458.468905][T20389] usb 2-1: Manufacturer: syz [ 1458.522321][T20389] usb 2-1: config 0 descriptor?? [ 1458.821079][T11686] libceph: connect (1)[c::]:6789 error -101 [ 1458.822004][T11686] libceph: mon0 (1)[c::]:6789 connect error [ 1458.850277][T11686] libceph: connect (1)[c::]:6789 error -101 [ 1458.850515][T11686] libceph: mon0 (1)[c::]:6789 connect error [ 1458.870657][T21492] ceph: No mds server is up or the cluster is laggy [ 1459.106754][ T864] libceph: connect (1)[c::]:6789 error -101 [ 1459.106996][ T864] libceph: mon0 (1)[c::]:6789 connect error [ 1459.140590][T20389] usbhid 2-1:0.0: can't add hid device: -32 [ 1459.140720][T20389] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1459.554094][T15449] Bluetooth: Unexpected continuation frame (len 10) [ 1460.392066][T15449] Bluetooth: hci2: command tx timeout [ 1460.487671][T21367] team0: Port device team_slave_0 added [ 1462.403655][T15449] Bluetooth: hci2: command tx timeout [ 1462.505659][ T864] usb 2-1: USB disconnect, device number 78 [ 1462.725399][T21384] team0: Port device team_slave_0 added [ 1462.740383][T21367] team0: Port device team_slave_1 added [ 1462.771968][T21384] team0: Port device team_slave_1 added [ 1463.227990][T21520] binder: 21518:21520 ioctl c018620c 0 returned -14 [ 1463.228732][T21520] validate_nla: 45 callbacks suppressed [ 1463.228750][T21520] netlink: 'syz.6.5228': attribute type 1 has an invalid length. [ 1463.764153][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.765113][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.765164][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.765210][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.765256][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.765301][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.765346][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.765390][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.765435][T21520] netlink: 'syz.6.5228': attribute type 3 has an invalid length. [ 1463.866047][T21367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.866063][T21367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.866086][T21367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.870828][T21384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.870846][T21384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.870908][T21384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.980509][T21367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.980529][T21367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.980561][T21367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.039559][T21384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.039576][T21384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.039601][T21384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.411782][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5233'. [ 1464.483672][T15449] Bluetooth: hci2: command tx timeout [ 1464.526621][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5233'. [ 1464.685160][T21532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.761924][T15449] Bluetooth: Unexpected continuation frame (len 10) [ 1465.401662][T21532] team0: Port device bond0 added [ 1468.858139][T21533] team0 (unregistering): Port device team_slave_0 removed [ 1468.881101][T21533] team0 (unregistering): Port device team_slave_1 removed [ 1468.924251][T21533] team0 (unregistering): Port device bond0 removed [ 1469.070091][T21367] hsr_slave_0: entered promiscuous mode [ 1469.079023][T21367] hsr_slave_1: entered promiscuous mode [ 1469.115897][T21384] hsr_slave_0: entered promiscuous mode [ 1469.127359][T21384] hsr_slave_1: entered promiscuous mode [ 1469.130039][T21384] debugfs: 'hsr0' already exists in 'hsr' [ 1469.130105][T21384] Cannot create hsr debugfs directory [ 1471.593948][T15449] Bluetooth: Unexpected continuation frame (len 10) [ 1472.774539][T11686] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1472.927173][T11686] usb 7-1: Using ep0 maxpacket: 32 [ 1472.929422][T11686] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1472.929462][T11686] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1472.929486][T11686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.972157][T11686] usb 7-1: config 0 descriptor?? [ 1473.095005][T21464] chnl_net:caif_netlink_parms(): no params data found [ 1475.557439][T20045] usb 7-1: USB disconnect, device number 7 [ 1475.679973][T20389] libceph: connect (1)[c::]:6789 error -101 [ 1475.680191][T20389] libceph: mon0 (1)[c::]:6789 connect error [ 1475.687701][T20389] libceph: connect (1)[c::]:6789 error -101 [ 1475.688324][T20389] libceph: mon0 (1)[c::]:6789 connect error [ 1475.969849][T21584] ceph: No mds server is up or the cluster is laggy [ 1476.396851][T20389] libceph: connect (1)[c::]:6789 error -101 [ 1476.397076][T20389] libceph: mon0 (1)[c::]:6789 connect error [ 1478.087194][ T61] Bluetooth: Unexpected continuation frame (len 10) [ 1480.915717][T21464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.915956][T21464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.916241][T21464] bridge_slave_0: entered allmulticast mode [ 1480.923080][T21464] bridge_slave_0: entered promiscuous mode [ 1480.951627][T21464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.954622][T21464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.955597][T21464] bridge_slave_1: entered allmulticast mode [ 1480.977622][T21464] bridge_slave_1: entered promiscuous mode [ 1481.975226][ T38] audit: type=1800 audit(1768006039.205:727): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5253" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1481.975678][T21616] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1481.975715][T21616] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1481.975731][T21616] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1482.254416][T21623] fuse: Bad value for 'rootmode' [ 1483.821117][T21464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.905804][T21464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.151625][T14896] bridge_slave_1: left allmulticast mode [ 1484.151656][T14896] bridge_slave_1: left promiscuous mode [ 1484.151915][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.264047][ T61] Bluetooth: Unexpected continuation frame (len 10) [ 1485.179453][T14896] bridge_slave_0: left allmulticast mode [ 1485.179478][T14896] bridge_slave_0: left promiscuous mode [ 1485.179689][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.226690][T14896] bridge_slave_1: left allmulticast mode [ 1485.226715][T14896] bridge_slave_1: left promiscuous mode [ 1485.226920][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.010640][T14896] bridge_slave_0: left allmulticast mode [ 1487.010675][T14896] bridge_slave_0: left promiscuous mode [ 1487.010931][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.128849][T14896] bridge_slave_1: left allmulticast mode [ 1488.128886][T14896] bridge_slave_1: left promiscuous mode [ 1488.129153][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.756249][T14896] bridge_slave_0: left allmulticast mode [ 1488.756282][T14896] bridge_slave_0: left promiscuous mode [ 1488.756547][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.496680][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.496774][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.924404][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.044442][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.131493][T14896] bond0 (unregistering): Released all slaves [ 1491.574271][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.757153][T21658] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5264' sets config #0 [ 1492.825075][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.716073][T14896] bond0 (unregistering): Released all slaves [ 1494.804927][ T61] Bluetooth: Unexpected continuation frame (len 10) [ 1495.714319][T15449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1495.717847][T15449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1495.719319][T15449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1495.727939][T15449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1495.753898][T15449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1496.024330][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.475409][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.536082][T14896] bond0 (unregistering): Released all slaves [ 1496.561973][ T38] audit: type=1800 audit(1768006053.785:728): pid=21642 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.5261" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1496.562218][T21642] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1496.562248][T21642] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1496.562264][T21642] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1496.706494][T21464] team0: Port device team_slave_0 added [ 1498.579014][T21464] team0: Port device team_slave_1 added [ 1498.590581][ T61] Bluetooth: hci0: command tx timeout [ 1499.515888][T14896] hsr_slave_0: left promiscuous mode [ 1499.760086][T14896] hsr_slave_1: left promiscuous mode [ 1499.761084][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.634403][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.679011][ T61] Bluetooth: hci0: command tx timeout [ 1501.108571][T15449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1501.121135][T15449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1501.122728][T15449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1501.129031][T15449] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1501.131390][T15449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1501.823734][T14896] hsr_slave_0: left promiscuous mode [ 1501.863612][T14896] hsr_slave_1: left promiscuous mode [ 1501.864639][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.916844][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.013412][T11686] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1502.063495][T14896] hsr_slave_0: left promiscuous mode [ 1502.084739][T14896] hsr_slave_1: left promiscuous mode [ 1502.085714][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.124332][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.173896][T11686] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1502.173938][T11686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.173953][T11686] usb 2-1: Product: syz [ 1502.173965][T11686] usb 2-1: Manufacturer: syz [ 1502.173976][T11686] usb 2-1: SerialNumber: syz [ 1502.178587][T11686] usb 2-1: config 0 descriptor?? [ 1502.415112][T11686] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1502.735039][ T61] Bluetooth: hci0: command tx timeout [ 1503.194365][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1503.211164][ T61] Bluetooth: hci3: command tx timeout [ 1503.387681][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1503.807498][T20149] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1503.961346][T11686] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1503.975860][T20149] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.975899][T20149] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.977406][T20149] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1503.977438][T20149] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1503.977461][T20149] usb 7-1: Manufacturer: syz [ 1504.009539][T20149] usb 7-1: config 0 descriptor?? [ 1504.034206][T11686] usb 2-1: USB disconnect, device number 79 [ 1504.430166][T20149] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 1504.430204][T20149] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 1504.430232][T20149] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 1504.430260][T20149] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 1504.430287][T20149] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 1504.430316][T20149] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 1504.430349][T20149] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 1504.490824][T20149] pyra 0003:1E7D:2CF6.002C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1504.629308][T20149] pyra 0003:1E7D:2CF6.002C: couldn't init struct pyra_device [ 1504.629368][T20149] pyra 0003:1E7D:2CF6.002C: couldn't install mouse [ 1504.660029][T20149] pyra 0003:1E7D:2CF6.002C: probe with driver pyra failed with error -32 [ 1504.803888][ T61] Bluetooth: hci0: command tx timeout [ 1505.355025][T21734] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5282' sets config #0 [ 1506.133557][ T61] Bluetooth: hci3: command tx timeout [ 1506.418085][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1506.545915][T20389] usb 7-1: USB disconnect, device number 8 [ 1507.034584][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1508.810611][ T61] Bluetooth: hci3: command tx timeout [ 1508.859302][T21751] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1509.090402][T21758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5288'. [ 1509.658341][T21765] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5290' sets config #0 [ 1511.571386][ T61] Bluetooth: hci3: command tx timeout [ 1512.083858][T20045] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1512.266958][T20045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.266996][T20045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.268302][T20045] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1512.268333][T20045] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1512.268348][T20045] usb 2-1: Manufacturer: syz [ 1512.272633][T20045] usb 2-1: config 0 descriptor?? [ 1512.330532][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1512.506824][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1512.800149][T20045] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 1512.800216][T20045] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 1512.800237][T20045] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 1512.800261][T20045] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 1512.800280][T20045] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 1512.800305][T20045] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 1512.800324][T20045] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 1512.815068][T20045] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1513.004412][T20045] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 1513.004460][T20045] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 1513.007523][T20045] pyra 0003:1E7D:2CF6.002D: probe with driver pyra failed with error -32 [ 1513.465936][T21464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.465968][T21464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.465999][T21464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.560386][T21760] tipc: Started in network mode [ 1513.560435][T21760] tipc: Node identity 7a540892a876, cluster identity 4711 [ 1513.561230][T21760] tipc: Enabled bearer , priority 0 [ 1513.646126][T21756] tipc: Disabling bearer [ 1514.492193][T15449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1514.512069][T15449] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1514.513783][T15449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1514.515749][T15449] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1514.516682][T15449] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1516.182989][T21705] chnl_net:caif_netlink_parms(): no params data found [ 1516.294210][T14498] usb 2-1: USB disconnect, device number 80 [ 1516.593501][T15449] Bluetooth: hci7: command tx timeout [ 1518.361279][T21675] chnl_net:caif_netlink_parms(): no params data found [ 1518.646039][T15449] Bluetooth: hci7: command tx timeout [ 1519.956645][T21811] syz.6.5298 (21811) used greatest stack depth: 16064 bytes left [ 1521.817835][T15449] Bluetooth: hci7: command tx timeout [ 1523.912555][T15449] Bluetooth: hci7: command tx timeout [ 1523.973383][T21705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.973612][T21705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.973934][T21705] bridge_slave_0: entered allmulticast mode [ 1523.979522][T21705] bridge_slave_0: entered promiscuous mode [ 1524.171303][T21705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.171393][T21705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.171571][T21705] bridge_slave_1: entered allmulticast mode [ 1524.255447][T21705] bridge_slave_1: entered promiscuous mode [ 1525.504567][T20045] libceph: connect (1)[c::]:6789 error -101 [ 1525.504770][T20045] libceph: mon0 (1)[c::]:6789 connect error [ 1525.505259][T20045] libceph: connect (1)[c::]:6789 error -101 [ 1525.505420][T20045] libceph: mon0 (1)[c::]:6789 connect error [ 1525.773856][T20045] libceph: connect (1)[c::]:6789 error -101 [ 1525.774016][T20045] libceph: mon0 (1)[c::]:6789 connect error [ 1527.213001][T20045] libceph: connect (1)[c::]:6789 error -101 [ 1527.213153][T20045] libceph: mon0 (1)[c::]:6789 connect error [ 1527.256496][T21847] ceph: No mds server is up or the cluster is laggy [ 1528.274740][T21705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.437429][T21705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.437675][T21675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.438026][T21675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.438191][T21675] bridge_slave_0: entered allmulticast mode [ 1528.440281][T21675] bridge_slave_0: entered promiscuous mode [ 1528.574853][T21675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.574943][T21675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.575088][T21675] bridge_slave_1: entered allmulticast mode [ 1528.577137][T21675] bridge_slave_1: entered promiscuous mode [ 1528.693638][T20389] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1528.843342][T20389] usb 7-1: Using ep0 maxpacket: 32 [ 1528.846125][T20389] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.846153][T20389] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1528.846194][T20389] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1528.846219][T20389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.858399][T20389] usb 7-1: config 0 descriptor?? [ 1528.956898][T21705] team0: Port device team_slave_0 added [ 1529.077334][T21705] team0: Port device team_slave_1 added [ 1529.126736][T21675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1529.469431][T21675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.914043][T21705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1530.914063][T21705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1530.914093][T21705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1530.915197][T21779] chnl_net:caif_netlink_parms(): no params data found [ 1531.184723][T21705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1531.184744][T21705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1531.184775][T21705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1531.265032][T21675] team0: Port device team_slave_0 added [ 1531.357098][T21675] team0: Port device team_slave_1 added [ 1531.487297][ T864] usb 7-1: USB disconnect, device number 9 [ 1531.644313][T21888] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5316'. [ 1531.968866][T21893] fuse: Bad value for 'fd' [ 1533.793382][T20149] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1533.958146][T20149] usb 2-1: config 1 has an invalid interface number: 140 but max is 0 [ 1533.958177][T20149] usb 2-1: config 1 has no interface number 0 [ 1533.958227][T20149] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1533.958246][T20149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.000245][T20149] usb 2-1: MBOX3: Invalid descriptor size=18. [ 1534.384118][T21675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.384219][T21675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.384281][T21675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.832684][T21705] hsr_slave_0: entered promiscuous mode [ 1534.839853][T21705] hsr_slave_1: entered promiscuous mode [ 1534.840836][T21705] debugfs: 'hsr0' already exists in 'hsr' [ 1534.840864][T21705] Cannot create hsr debugfs directory [ 1534.841928][T21675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.841943][T21675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.841976][T21675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.408773][T21779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.408982][T21779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.409185][T21779] bridge_slave_0: entered allmulticast mode [ 1536.436788][T21779] bridge_slave_0: entered promiscuous mode [ 1536.614548][T21779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.614706][T21779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.614918][T21779] bridge_slave_1: entered allmulticast mode [ 1536.617409][T21779] bridge_slave_1: entered promiscuous mode [ 1536.773060][T21924] fuse: Unknown parameter 'group_id00000000000000000000' [ 1536.850008][T21926] fuse: Bad value for 'fd' [ 1537.206637][ T5790] usb 2-1: USB disconnect, device number 81 [ 1538.585024][ T864] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1539.205665][T21675] hsr_slave_0: entered promiscuous mode [ 1539.206671][T21675] hsr_slave_1: entered promiscuous mode [ 1539.207340][T21675] debugfs: 'hsr0' already exists in 'hsr' [ 1539.207359][T21675] Cannot create hsr debugfs directory [ 1539.278863][ T864] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1539.574779][T21942] fido_id[21942]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1540.903405][T21779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.929894][T21779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.591468][ T864] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1544.597656][ T864] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1545.910750][T21977] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1545.910799][T21977] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1545.910822][T21977] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1546.081039][T21980] fido_id[21980]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1546.153204][ T38] audit: type=1326 audit(1768006103.375:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.155613][ T38] audit: type=1326 audit(1768006103.385:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.156382][ T38] audit: type=1326 audit(1768006103.385:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.156938][ T38] audit: type=1326 audit(1768006103.385:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.157782][ T38] audit: type=1326 audit(1768006103.385:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.158250][ T38] audit: type=1326 audit(1768006103.385:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.158534][ T38] audit: type=1326 audit(1768006103.385:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.158934][ T38] audit: type=1326 audit(1768006103.385:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.159220][ T38] audit: type=1326 audit(1768006103.385:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.159606][ T38] audit: type=1326 audit(1768006103.385:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21985 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1546.420107][T21988] validate_nla: 44 callbacks suppressed [ 1546.420131][T21988] netlink: 'syz.6.5342': attribute type 1 has an invalid length. [ 1546.420148][T21988] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5342'. [ 1546.487488][T21779] team0: Port device team_slave_0 added [ 1546.761952][T21779] team0: Port device team_slave_1 added [ 1547.531183][T20036] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1547.550453][T20036] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1547.686508][T21779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.686529][T21779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.686562][T21779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.816976][T21779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.816998][T21779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.817031][T21779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.802956][T22001] fido_id[22001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1549.001653][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'. [ 1549.126239][T22012] netlink: 'syz.1.5349': attribute type 10 has an invalid length. [ 1549.236636][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5349'. [ 1549.708728][T21779] hsr_slave_0: entered promiscuous mode [ 1549.710184][T21779] hsr_slave_1: entered promiscuous mode [ 1549.711174][T21779] debugfs: 'hsr0' already exists in 'hsr' [ 1549.711200][T21779] Cannot create hsr debugfs directory [ 1551.076990][T22025] ceph: No mds server is up or the cluster is laggy [ 1551.086848][T20045] libceph: connect (1)[c::]:6789 error -101 [ 1551.087060][T20045] libceph: mon0 (1)[c::]:6789 connect error [ 1551.318986][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.598696][T20045] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 1551.629328][T20045] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1551.673695][T22028] tipc: Enabled bearer , priority 0 [ 1551.727104][T22034] fido_id[22034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1552.048613][T22024] tipc: Disabling bearer [ 1553.013752][ T38] kauditd_printk_skb: 55 callbacks suppressed [ 1553.013773][ T38] audit: type=1326 audit(1768006110.245:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.014474][ T38] audit: type=1326 audit(1768006110.245:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.014956][ T38] audit: type=1326 audit(1768006110.245:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.015393][ T38] audit: type=1326 audit(1768006110.245:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.015980][ T38] audit: type=1326 audit(1768006110.245:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.016278][ T38] audit: type=1326 audit(1768006110.245:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.016439][ T38] audit: type=1326 audit(1768006110.245:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.016693][ T38] audit: type=1326 audit(1768006110.245:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.016851][ T38] audit: type=1326 audit(1768006110.245:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.017107][ T38] audit: type=1326 audit(1768006110.245:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22044 comm="syz.1.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1553.360486][T14896] bridge_slave_1: left allmulticast mode [ 1553.360510][T14896] bridge_slave_1: left promiscuous mode [ 1553.360727][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.485017][T14896] bridge_slave_0: left allmulticast mode [ 1553.485056][T14896] bridge_slave_0: left promiscuous mode [ 1553.485335][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.538213][T14896] bridge_slave_1: left allmulticast mode [ 1553.538247][T14896] bridge_slave_1: left promiscuous mode [ 1553.538501][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.605050][T14896] bridge_slave_0: left allmulticast mode [ 1553.605084][T14896] bridge_slave_0: left promiscuous mode [ 1553.605364][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.671514][T14896] bridge_slave_1: left allmulticast mode [ 1553.671550][T14896] bridge_slave_1: left promiscuous mode [ 1553.671831][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.734946][T14896] bridge_slave_0: left allmulticast mode [ 1553.734980][T14896] bridge_slave_0: left promiscuous mode [ 1553.735247][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.315326][T15449] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1554.694134][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.995285][T15449] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1554.995402][T15449] CPU: 0 UID: 0 PID: 15449 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1554.995439][T15449] Tainted: [L]=SOFTLOCKUP [ 1554.995449][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1554.995466][T15449] Workqueue: hci6 hci_rx_work [ 1554.995652][T15449] Call Trace: [ 1554.995667][T15449] [ 1554.995680][T15449] dump_stack_lvl+0xe8/0x150 [ 1554.995757][T15449] sysfs_create_dir_ns+0x259/0x280 [ 1554.995821][T15449] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1554.995908][T15449] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1554.995941][T15449] ? __rcu_read_unlock+0x84/0xe0 [ 1554.995995][T15449] ? rt_spin_unlock+0x161/0x200 [ 1554.996030][T15449] kobject_add_internal+0x6b1/0xcd0 [ 1554.996207][T15449] kobject_add+0x155/0x220 [ 1554.996246][T15449] ? __pfx_kobject_add+0x10/0x10 [ 1554.996282][T15449] ? get_device_parent+0x370/0x3a0 [ 1554.996379][T15449] device_add+0x408/0xb80 [ 1554.996412][T15449] hci_conn_add_sysfs+0xd5/0x210 [ 1554.996473][T15449] le_conn_complete_evt+0xf1d/0x1420 [ 1554.996536][T15449] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1554.996565][T15449] ? lockdep_hardirqs_on+0x7b/0x110 [ 1554.996610][T15449] ? irqentry_exit+0x5e8/0x670 [ 1554.996632][T15449] ? rcu_is_watching+0x15/0xb0 [ 1554.996658][T15449] ? skb_pull_data+0xfb/0x200 [ 1554.996784][T15449] hci_le_conn_complete_evt+0x187/0x480 [ 1554.996823][T15449] hci_event_packet+0x78f/0x1260 [ 1554.996873][T15449] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1554.996905][T15449] ? __pfx_hci_event_packet+0x10/0x10 [ 1554.996928][T15449] ? preempt_schedule_common+0x83/0xd0 [ 1554.996953][T15449] ? preempt_schedule_thunk+0x16/0x30 [ 1554.996985][T15449] ? hci_send_to_monitor+0xe2/0x590 [ 1554.997021][T15449] hci_rx_work+0x3ee/0x1060 [ 1554.997047][T15449] ? preempt_schedule_thunk+0x16/0x30 [ 1554.997076][T15449] ? process_scheduled_works+0x9ef/0x1770 [ 1554.997128][T15449] process_scheduled_works+0xad1/0x1770 [ 1554.997195][T15449] ? __pfx_process_scheduled_works+0x10/0x10 [ 1554.997220][T15449] ? do_raw_spin_lock+0x121/0x290 [ 1554.997276][T15449] worker_thread+0x8a0/0xda0 [ 1554.997320][T15449] ? __kthread_parkme+0x7b/0x200 [ 1554.997360][T15449] kthread+0x711/0x8a0 [ 1554.997396][T15449] ? __pfx_worker_thread+0x10/0x10 [ 1554.997423][T15449] ? __pfx_kthread+0x10/0x10 [ 1554.997453][T15449] ? rt_spin_unlock+0x150/0x200 [ 1554.997489][T15449] ? rt_spin_unlock+0x161/0x200 [ 1554.997519][T15449] ? __pfx_kthread+0x10/0x10 [ 1554.997553][T15449] ret_from_fork+0x510/0xa50 [ 1554.997596][T15449] ? __pfx_ret_from_fork+0x10/0x10 [ 1554.997619][T15449] ? __switch_to+0xc9e/0x1480 [ 1554.997659][T15449] ? __pfx_kthread+0x10/0x10 [ 1554.997691][T15449] ret_from_fork_asm+0x1a/0x30 [ 1554.997746][T15449] [ 1554.998135][T15449] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1554.998438][T15449] Bluetooth: hci6: failed to register connection device [ 1555.774618][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.855782][T14896] bond0 (unregistering): Released all slaves [ 1556.085331][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.164179][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.252712][T14896] bond0 (unregistering): Released all slaves [ 1556.551885][T15449] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1556.557261][T20036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1556.569019][T20036] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1556.606597][T15449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1556.608273][T15449] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1556.609626][T15449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1556.610600][T15449] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1556.804440][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.842566][T22064] fido_id[22064]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1557.074027][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1557.111420][T22067] Bluetooth: MGMT ver 1.23 [ 1557.135958][T14896] bond0 (unregistering): Released all slaves [ 1557.806600][T22048] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1557.867912][T22048] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 1558.643508][ T61] Bluetooth: hci2: command tx timeout [ 1559.043574][T14896] hsr_slave_0: left promiscuous mode [ 1559.101460][T14896] hsr_slave_1: left promiscuous mode [ 1559.102528][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1559.145697][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.288575][ T38] kauditd_printk_skb: 28 callbacks suppressed [ 1559.288597][ T38] audit: type=1326 audit(1768006116.515:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.288652][ T38] audit: type=1326 audit(1768006116.515:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.365668][ T38] audit: type=1326 audit(1768006116.515:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.365737][ T38] audit: type=1326 audit(1768006116.515:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.365788][ T38] audit: type=1326 audit(1768006116.515:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.365838][ T38] audit: type=1326 audit(1768006116.515:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.365888][ T38] audit: type=1326 audit(1768006116.525:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.365941][ T38] audit: type=1326 audit(1768006116.525:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.365990][ T38] audit: type=1326 audit(1768006116.525:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.366040][ T38] audit: type=1326 audit(1768006116.525:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1559.738184][T14896] hsr_slave_0: left promiscuous mode [ 1559.790089][T14896] hsr_slave_1: left promiscuous mode [ 1559.791405][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1559.826158][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.866398][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.723412][ T61] Bluetooth: hci2: command tx timeout [ 1561.395207][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1561.645159][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1561.863169][T15449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1561.897155][T15449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1561.898606][T15449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1561.900272][T15449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1561.902230][T15449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1562.803556][T15449] Bluetooth: hci2: command tx timeout [ 1563.887650][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1564.019202][T15449] Bluetooth: hci0: command tx timeout [ 1564.074168][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1564.886685][T15449] Bluetooth: hci2: command tx timeout [ 1564.901588][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1565.106081][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1565.733711][T22082] netlink: 'syz.6.5368': attribute type 12 has an invalid length. [ 1565.870086][T20045] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1565.984681][T20045] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1566.085284][T15449] Bluetooth: hci0: command tx timeout [ 1566.403683][T22098] Bluetooth: MGMT ver 1.23 [ 1568.108924][ T38] kauditd_printk_skb: 31 callbacks suppressed [ 1568.108945][ T38] audit: type=1326 audit(1768006125.335:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.110071][ T38] audit: type=1326 audit(1768006125.335:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.118004][T22109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5373'. [ 1568.143369][ T38] audit: type=1326 audit(1768006125.335:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.143429][ T38] audit: type=1326 audit(1768006125.335:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.143515][ T38] audit: type=1326 audit(1768006125.335:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.143565][ T38] audit: type=1326 audit(1768006125.335:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.143613][ T38] audit: type=1326 audit(1768006125.335:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.143671][ T38] audit: type=1326 audit(1768006125.355:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.143720][ T38] audit: type=1326 audit(1768006125.355:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.143767][ T38] audit: type=1326 audit(1768006125.355:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22106 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1568.163451][T15449] Bluetooth: hci0: command tx timeout [ 1568.214062][T22110] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5373'. [ 1568.441374][T22061] chnl_net:caif_netlink_parms(): no params data found [ 1570.244127][T15449] Bluetooth: hci0: command tx timeout [ 1570.810264][T20045] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1570.865764][T20045] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1571.035416][T22061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.035765][T22061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.035954][T22061] bridge_slave_0: entered allmulticast mode [ 1571.038681][T22061] bridge_slave_0: entered promiscuous mode [ 1571.227468][T22061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.227606][T22061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.227868][T22061] bridge_slave_1: entered allmulticast mode [ 1571.230384][T22061] bridge_slave_1: entered promiscuous mode [ 1572.331086][T22088] chnl_net:caif_netlink_parms(): no params data found [ 1572.365186][T22061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.461361][T22061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.927343][T22061] team0: Port device team_slave_0 added [ 1573.024905][T22061] team0: Port device team_slave_1 added [ 1576.113061][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1576.142657][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1576.163494][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1576.181094][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1576.181896][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1576.591264][T14498] libceph: connect (1)[c::]:6789 error -101 [ 1576.591415][T14498] libceph: mon0 (1)[c::]:6789 connect error [ 1576.897357][T22174] ceph: No mds server is up or the cluster is laggy [ 1577.066801][T22061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.066821][T22061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.066895][T22061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.178821][T14498] libceph: connect (1)[c::]:6789 error -101 [ 1577.179024][T14498] libceph: mon0 (1)[c::]:6789 connect error [ 1577.184156][T22061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.184170][T22061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.184191][T22061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.358737][ T5790] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1577.493508][ T5790] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1577.710886][T22185] fido_id[22185]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1577.964213][ T38] kauditd_printk_skb: 118 callbacks suppressed [ 1577.964228][ T38] audit: type=1326 audit(1768006135.195:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1577.964460][ T38] audit: type=1326 audit(1768006135.195:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1577.967392][ T38] audit: type=1326 audit(1768006135.195:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1577.967958][ T38] audit: type=1326 audit(1768006135.195:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1577.970351][ T38] audit: type=1326 audit(1768006135.195:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1577.977464][T22088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.978129][T22088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.978876][T22088] bridge_slave_0: entered allmulticast mode [ 1577.993756][T22088] bridge_slave_0: entered promiscuous mode [ 1578.733561][T15449] Bluetooth: hci3: command tx timeout [ 1578.980275][ T38] audit: type=1326 audit(1768006136.205:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1578.981202][ T38] audit: type=1326 audit(1768006136.205:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1578.981683][ T38] audit: type=1326 audit(1768006136.205:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1578.982003][ T38] audit: type=1326 audit(1768006136.205:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1578.982413][ T38] audit: type=1326 audit(1768006136.205:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22188 comm="syz.6.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1579.706382][T22088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.706518][T22088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.706714][T22088] bridge_slave_1: entered allmulticast mode [ 1579.710688][T22088] bridge_slave_1: entered promiscuous mode [ 1580.803509][T15449] Bluetooth: hci3: command tx timeout [ 1582.315257][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5396'. [ 1582.375249][T22209] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5396'. [ 1582.482600][T22088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.557144][T22061] hsr_slave_0: entered promiscuous mode [ 1582.558790][T22061] hsr_slave_1: entered promiscuous mode [ 1582.595494][T22088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.537314][T15449] Bluetooth: hci3: command tx timeout [ 1586.573524][ T61] Bluetooth: hci3: command tx timeout [ 1586.604914][T22088] team0: Port device team_slave_0 added [ 1586.657583][T22088] team0: Port device team_slave_1 added [ 1588.408442][T22088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.410126][T22088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.410163][T22088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.540976][T22088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.540992][T22088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.541013][T22088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.526796][T22088] hsr_slave_0: entered promiscuous mode [ 1589.528590][T22088] hsr_slave_1: entered promiscuous mode [ 1589.529804][T22088] debugfs: 'hsr0' already exists in 'hsr' [ 1589.529831][T22088] Cannot create hsr debugfs directory [ 1593.195307][T14896] bridge_slave_1: left allmulticast mode [ 1593.195340][T14896] bridge_slave_1: left promiscuous mode [ 1593.195633][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.352152][T14896] bridge_slave_0: left allmulticast mode [ 1593.352184][T14896] bridge_slave_0: left promiscuous mode [ 1593.352472][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.427495][T14896] bridge_slave_1: left allmulticast mode [ 1593.427521][T14896] bridge_slave_1: left promiscuous mode [ 1593.427697][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.683984][T14896] bridge_slave_0: left allmulticast mode [ 1594.684008][T14896] bridge_slave_0: left promiscuous mode [ 1594.684203][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.034082][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.138087][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.361286][T14896] bond0 (unregistering): Released all slaves [ 1596.714197][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.814799][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.856704][T14896] bond0 (unregistering): Released all slaves [ 1599.305599][T14896] hsr_slave_0: left promiscuous mode [ 1599.329979][T14896] hsr_slave_1: left promiscuous mode [ 1599.331020][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.349073][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.863962][T14896] hsr_slave_0: left promiscuous mode [ 1601.220907][T14896] hsr_slave_1: left promiscuous mode [ 1601.221981][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.274434][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.443894][T19147] libceph: connect (1)[c::]:6789 error -101 [ 1604.444106][T19147] libceph: mon0 (1)[c::]:6789 connect error [ 1604.458242][T19147] libceph: connect (1)[c::]:6789 error -101 [ 1604.458458][T19147] libceph: mon0 (1)[c::]:6789 connect error [ 1604.628514][T22345] ceph: No mds server is up or the cluster is laggy [ 1604.760188][T20045] libceph: connect (1)[c::]:6789 error -101 [ 1604.760359][T20045] libceph: mon0 (1)[c::]:6789 connect error [ 1605.125604][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1605.304035][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1606.475224][T14896] team0 (unregistering): Port device team_slave_1 removed [ 1606.595578][T14896] team0 (unregistering): Port device team_slave_0 removed [ 1607.282960][T22171] chnl_net:caif_netlink_parms(): no params data found [ 1607.395490][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5415'. [ 1607.434783][T22061] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1607.746502][T22061] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1607.842489][T22061] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1609.386258][T22061] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1611.546761][T22171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.546974][T22171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.547235][T22171] bridge_slave_0: entered allmulticast mode [ 1611.551126][T22171] bridge_slave_0: entered promiscuous mode [ 1611.775056][ T38] kauditd_printk_skb: 33 callbacks suppressed [ 1611.775077][ T38] audit: type=1326 audit(1768006169.005:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.775418][ T38] audit: type=1326 audit(1768006169.005:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.775739][ T38] audit: type=1326 audit(1768006169.005:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.776266][ T38] audit: type=1326 audit(1768006169.005:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.776557][ T38] audit: type=1326 audit(1768006169.005:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.776983][ T38] audit: type=1326 audit(1768006169.005:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.777805][ T38] audit: type=1326 audit(1768006169.005:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.778424][ T38] audit: type=1326 audit(1768006169.005:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.781307][ T38] audit: type=1326 audit(1768006169.005:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1611.782556][ T38] audit: type=1326 audit(1768006169.005:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22406 comm="syz.6.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23ca34f749 code=0x7ffc0000 [ 1612.120343][T22171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.120569][T22171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.120890][T22171] bridge_slave_1: entered allmulticast mode [ 1612.158304][T22171] bridge_slave_1: entered promiscuous mode [ 1612.745452][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1615.302950][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5424'. [ 1615.358509][T22171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.465379][T22171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.530769][T22171] team0: Port device team_slave_0 added [ 1616.537003][T22171] team0: Port device team_slave_1 added [ 1616.640392][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5426'. [ 1617.010110][T22171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.010129][T22171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.010152][T22171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.084679][T22171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.084699][T22171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.084731][T22171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.732431][T22461] random: crng reseeded on system resumption [ 1618.207704][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1618.307642][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1618.320599][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1618.322164][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1618.324515][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1618.468562][T22464] fuse: Bad value for 'fd' [ 1618.620415][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 1618.620573][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 1618.620936][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 1618.621065][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 1618.752772][T22468] ceph: No mds server is up or the cluster is laggy [ 1618.942059][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 1618.983164][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 1620.618535][ T61] Bluetooth: hci2: command tx timeout [ 1621.164228][T22171] hsr_slave_0: entered promiscuous mode [ 1621.165495][T22171] hsr_slave_1: entered promiscuous mode [ 1621.166236][T22171] debugfs: 'hsr0' already exists in 'hsr' [ 1621.166256][T22171] Cannot create hsr debugfs directory [ 1622.561381][ T38] kauditd_printk_skb: 18 callbacks suppressed [ 1622.561467][ T38] audit: type=1326 audit(1768006179.785:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.561791][ T38] audit: type=1326 audit(1768006179.785:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.562097][ T38] audit: type=1326 audit(1768006179.785:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.562633][ T38] audit: type=1326 audit(1768006179.785:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.562949][ T38] audit: type=1326 audit(1768006179.785:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.563678][ T38] audit: type=1326 audit(1768006179.785:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.564373][ T38] audit: type=1326 audit(1768006179.785:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.564919][ T38] audit: type=1326 audit(1768006179.785:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.572356][ T38] audit: type=1326 audit(1768006179.795:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.574873][ T38] audit: type=1326 audit(1768006179.805:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1622.640276][T22493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5435'. [ 1622.643367][ T61] Bluetooth: hci2: command tx timeout [ 1622.964565][T22218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1622.984442][T22218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1622.990999][T22218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1622.992929][T22218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1623.018665][T22218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1623.409248][T22498] fuse: Bad value for 'fd' [ 1624.741703][T22218] Bluetooth: hci2: command tx timeout [ 1625.830973][T22218] Bluetooth: hci4: command tx timeout [ 1627.164712][T22218] Bluetooth: hci2: command tx timeout [ 1627.279093][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5448'. [ 1628.227745][T22218] Bluetooth: hci4: command tx timeout [ 1630.514174][ T61] Bluetooth: hci4: command tx timeout [ 1631.548631][T22599] binder: 22593:22599 ioctl 4018620d 0 returned -22 [ 1632.563689][ T61] Bluetooth: hci4: command tx timeout [ 1632.633386][T20036] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1632.798437][T20036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1632.798479][T20036] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1632.798510][T20036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1632.799716][T20036] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1632.799747][T20036] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1632.799771][T20036] usb 2-1: Manufacturer: syz [ 1632.828950][T20036] usb 2-1: config 0 descriptor?? [ 1632.870373][T20036] smsusb:smsusb_probe: board id=9, interface number 0 [ 1632.893875][T20036] smsusb:smsusb_probe: Device initialized with return code -19 [ 1632.926762][T22458] chnl_net:caif_netlink_parms(): no params data found [ 1633.192908][T14896] bridge_slave_1: left allmulticast mode [ 1633.192939][T14896] bridge_slave_1: left promiscuous mode [ 1633.204781][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.269999][T14896] bridge_slave_0: left allmulticast mode [ 1633.270032][T14896] bridge_slave_0: left promiscuous mode [ 1633.270309][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.356271][T20162] usb 2-1: USB disconnect, device number 82 [ 1633.634998][T14896] bridge_slave_1: left allmulticast mode [ 1633.644054][T14896] bridge_slave_1: left promiscuous mode [ 1633.646129][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.726269][T14896] bridge_slave_0: left allmulticast mode [ 1633.726301][T14896] bridge_slave_0: left promiscuous mode [ 1633.726575][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.960984][ T38] kauditd_printk_skb: 20 callbacks suppressed [ 1633.961005][ T38] audit: type=1326 audit(1768006191.185:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1633.961355][ T38] audit: type=1326 audit(1768006191.185:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1633.962114][ T38] audit: type=1326 audit(1768006191.185:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1633.962618][ T38] audit: type=1326 audit(1768006191.185:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1634.062923][ T38] audit: type=1326 audit(1768006191.285:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1634.085848][ T38] audit: type=1326 audit(1768006191.285:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1634.188903][ T38] audit: type=1326 audit(1768006191.355:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1634.188971][ T38] audit: type=1326 audit(1768006191.355:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1634.189019][ T38] audit: type=1326 audit(1768006191.355:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1634.189067][ T38] audit: type=1326 audit(1768006191.355:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22646 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af352f749 code=0x7ffc0000 [ 1637.196628][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.324987][T22218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1637.349320][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.368198][T22218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1637.371597][T22218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1637.891730][T22218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1638.031728][T22218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1638.436714][T14896] bond0 (unregistering): Released all slaves [ 1638.724499][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.733675][T19159] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1638.815571][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.886712][T19159] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.886740][T19159] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1638.886775][T19159] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1638.886797][T19159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.904738][T19159] usb 7-1: config 0 descriptor?? [ 1638.937956][T14896] bond0 (unregistering): Released all slaves [ 1639.216252][T22494] chnl_net:caif_netlink_parms(): no params data found [ 1640.146954][T22458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.153097][T22458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.153891][T22458] bridge_slave_0: entered allmulticast mode [ 1640.182211][T22458] bridge_slave_0: entered promiscuous mode [ 1640.279950][T22458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.280064][T22458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.280256][T22458] bridge_slave_1: entered allmulticast mode [ 1640.296063][T22458] bridge_slave_1: entered promiscuous mode [ 1640.403594][ T61] Bluetooth: hci0: command tx timeout [ 1641.758119][ T864] usb 7-1: USB disconnect, device number 10 [ 1641.983417][T22494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.983585][T22494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.983791][T22494] bridge_slave_0: entered allmulticast mode [ 1641.985980][T22494] bridge_slave_0: entered promiscuous mode [ 1643.368465][ T61] Bluetooth: hci0: command tx timeout [ 1643.553426][T14896] hsr_slave_0: left promiscuous mode [ 1643.593630][T14896] hsr_slave_1: left promiscuous mode [ 1643.595361][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.624480][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.634510][T22746] fuse: Unknown parameter 'group_id00000000000000000000' [ 1643.753517][T19147] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1643.773555][T14896] hsr_slave_0: left promiscuous mode [ 1643.793410][T14896] hsr_slave_1: left promiscuous mode [ 1643.794536][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.834361][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.920591][T19147] usb 7-1: config 1 has an invalid interface number: 140 but max is 0 [ 1643.920625][T19147] usb 7-1: config 1 has no interface number 0 [ 1643.920679][T19147] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1643.920705][T19147] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.987200][T19147] usb 7-1: MBOX3: Invalid descriptor size=18. [ 1645.448095][ T61] Bluetooth: hci0: command tx timeout [ 1647.233280][T20036] usb 7-1: USB disconnect, device number 11 [ 1647.443094][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1647.443127][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1647.443163][ T61] Tainted: [L]=SOFTLOCKUP [ 1647.443172][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1647.443194][ T61] Workqueue: hci1 hci_rx_work [ 1647.443226][ T61] Call Trace: [ 1647.443238][ T61] [ 1647.443251][ T61] dump_stack_lvl+0xe8/0x150 [ 1647.443291][ T61] sysfs_create_dir_ns+0x259/0x280 [ 1647.443325][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1647.443372][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1647.443411][ T61] ? rt_spin_unlock+0x161/0x200 [ 1647.443447][ T61] kobject_add_internal+0x6b1/0xcd0 [ 1647.443488][ T61] kobject_add+0x155/0x220 [ 1647.443522][ T61] ? __pfx_kobject_add+0x10/0x10 [ 1647.443558][ T61] ? get_device_parent+0x370/0x3a0 [ 1647.443592][ T61] device_add+0x408/0xb80 [ 1647.443624][ T61] hci_conn_add_sysfs+0xd5/0x210 [ 1647.443665][ T61] le_conn_complete_evt+0xf1d/0x1420 [ 1647.443695][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 1647.443729][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1647.443778][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 1647.443815][ T61] hci_event_packet+0x78f/0x1260 [ 1647.443844][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1647.443876][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 1647.443898][ T61] ? preempt_schedule_common+0x83/0xd0 [ 1647.443922][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 1647.443953][ T61] ? hci_send_to_monitor+0xe2/0x590 [ 1647.443989][ T61] hci_rx_work+0x3ee/0x1060 [ 1647.444015][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 1647.444044][ T61] ? process_scheduled_works+0x9ef/0x1770 [ 1647.444075][ T61] process_scheduled_works+0xad1/0x1770 [ 1647.444133][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 1647.444157][ T61] ? do_raw_spin_lock+0x121/0x290 [ 1647.444202][ T61] worker_thread+0x8a0/0xda0 [ 1647.444260][ T61] kthread+0x711/0x8a0 [ 1647.444296][ T61] ? __pfx_worker_thread+0x10/0x10 [ 1647.444323][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.444359][ T61] ? rt_spin_unlock+0x150/0x200 [ 1647.444396][ T61] ? rt_spin_unlock+0x161/0x200 [ 1647.444424][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.444458][ T61] ret_from_fork+0x510/0xa50 [ 1647.444487][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 1647.444510][ T61] ? __switch_to+0xc9e/0x1480 [ 1647.444549][ T61] ? __pfx_kthread+0x10/0x1[ 1647.444549][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.444583][ T61] ret_from_fork_asm+0x1a/0x30 [ 1647.444638][ T61] [ 1647.470662][ T61] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1647.471013][ T61] Bluetooth: hci1: failed to register connection device [ 1647.951818][ T61] ================================================================== [ 1647.951843][ T61] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1647.951964][ T61] Read of size 8 at addr ffff88805c0ea7b0 by task kworker/u9:0/61 [ 1647.951984][ T61] [ 1647.952002][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1647.952045][ T61] Tainted: [L]=SOFTLOCKUP [ 1647.952055][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1647.952072][ T61] Workqueue: hci1 hci_rx_work [ 1647.952095][ T61] Call Trace: [ 1647.952103][ T61] [ 1647.952113][ T61] dump_stack_lvl+0xe8/0x150 [ 1647.952139][ T61] print_report+0xca/0x240 [ 1647.952173][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1647.952201][ T61] kasan_report+0x118/0x150 [ 1647.952244][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1647.952279][ T61] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1647.952310][ T61] l2cap_connect_cfm+0x367/0x10e0 [ 1647.952340][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1647.952365][ T61] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1647.952416][ T61] ? mutex_lock_nested+0x154/0x1d0 [ 1647.952439][ T61] ? hci_connect_cfm+0x2c/0x140 [ 1647.952460][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1647.952485][ T61] hci_connect_cfm+0x95/0x140 [ 1647.952508][ T61] le_conn_complete_evt+0xf65/0x1420 [ 1647.952531][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 1647.952553][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1647.952584][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 1647.952610][ T61] hci_event_packet+0x78f/0x1260 [ 1647.952629][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1647.952651][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 1647.952668][ T61] ? preempt_schedule_common+0x83/0xd0 [ 1647.952685][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 1647.952718][ T61] ? hci_send_to_monitor+0xe2/0x590 [ 1647.952745][ T61] hci_rx_work+0x3ee/0x1060 [ 1647.952769][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 1647.952790][ T61] ? process_scheduled_works+0x9ef/0x1770 [ 1647.952812][ T61] process_scheduled_works+0xad1/0x1770 [ 1647.952846][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 1647.952865][ T61] ? do_raw_spin_lock+0x121/0x290 [ 1647.952894][ T61] worker_thread+0x8a0/0xda0 [ 1647.952929][ T61] kthread+0x711/0x8a0 [ 1647.952956][ T61] ? __pfx_worker_thread+0x10/0x10 [ 1647.952976][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.952999][ T61] ? rt_spin_unlock+0x150/0x200 [ 1647.953033][ T61] ? rt_spin_unlock+0x161/0x200 [ 1647.953056][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.953081][ T61] ret_from_fork+0x510/0xa50 [ 1647.953104][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 1647.953123][ T61] ? __switch_to+0xc9e/0x1480 [ 1647.953151][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.953176][ T61] ret_from_fork_asm+0x1a/0x30 [ 1647.953219][ T61] [ 1647.953228][ T61] [ 1647.953234][ T61] Allocated by task 61: [ 1647.953245][ T61] kasan_save_track+0x3e/0x80 [ 1647.953268][ T61] __kasan_kmalloc+0x93/0xb0 [ 1647.953292][ T61] __kmalloc_noprof+0x23e/0x7e0 [ 1647.953332][ T61] sk_prot_alloc+0xe7/0x220 [ 1647.953390][ T61] sk_alloc+0x3a/0x390 [ 1647.953408][ T61] bt_sock_alloc+0x3b/0x310 [ 1647.953450][ T61] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 1647.953476][ T61] l2cap_connect_cfm+0x367/0x10e0 [ 1647.953498][ T61] hci_connect_cfm+0x95/0x140 [ 1647.953516][ T61] le_conn_complete_evt+0xf65/0x1420 [ 1647.953538][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 1647.953557][ T61] hci_event_packet+0x78f/0x1260 [ 1647.953572][ T61] hci_rx_work+0x3ee/0x1060 [ 1647.953586][ T61] process_scheduled_works+0xad1/0x1770 [ 1647.953603][ T61] worker_thread+0x8a0/0xda0 [ 1647.953620][ T61] kthread+0x711/0x8a0 [ 1647.953641][ T61] ret_from_fork+0x510/0xa50 [ 1647.953656][ T61] ret_from_fork_asm+0x1a/0x30 [ 1647.953680][ T61] [ 1647.953684][ T61] Freed by task 22760: [ 1647.953692][ T61] kasan_save_track+0x3e/0x80 [ 1647.953713][ T61] kasan_save_free_info+0x46/0x50 [ 1647.953731][ T61] __kasan_slab_free+0x5c/0x80 [ 1647.953755][ T61] kfree+0x1bd/0x900 [ 1647.953775][ T61] __sk_destruct+0x626/0x880 [ 1647.953794][ T61] l2cap_sock_cleanup_listen+0xe0/0x450 [ 1647.953819][ T61] l2cap_sock_release+0x6e/0x270 [ 1647.953840][ T61] sock_close+0xc3/0x240 [ 1647.953890][ T61] __fput+0x45b/0xa80 [ 1647.953913][ T61] task_work_run+0x1d4/0x260 [ 1647.953937][ T61] exit_to_user_mode_loop+0xef/0x4e0 [ 1647.953961][ T61] do_syscall_64+0x2c1/0xf80 [ 1647.954002][ T61] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.954037][ T61] [ 1647.954042][ T61] The buggy address belongs to the object at ffff88805c0ea000 [ 1647.954042][ T61] which belongs to the cache kmalloc-2k of size 2048 [ 1647.954059][ T61] The buggy address is located 1968 bytes inside of [ 1647.954059][ T61] freed 2048-byte region [ffff88805c0ea000, ffff88805c0ea800) [ 1647.954078][ T61] [ 1647.954083][ T61] The buggy address belongs to the physical page: [ 1647.954102][ T61] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c0e8 [ 1647.954120][ T61] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1647.954134][ T61] flags: 0x80000000000040(head|node=0|zone=1) [ 1647.954154][ T61] page_type: f5(slab) [ 1647.954172][ T61] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1647.954188][ T61] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1647.954205][ T61] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1647.954220][ T61] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1647.954237][ T61] head: 0080000000000003 ffffea0001703a01 00000000ffffffff 00000000ffffffff [ 1647.954252][ T61] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1647.954262][ T61] page dumped because: kasan: bad access detected [ 1647.954277][ T61] page_owner tracks the page as allocated [ 1647.954284][ T61] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 993, tgid 993 (kworker/u8:5), ts 107216699714, free_ts 0 [ 1647.954314][ T61] post_alloc_hook+0x234/0x290 [ 1647.954339][ T61] get_page_from_freelist+0x28c0/0x2960 [ 1647.954356][ T61] __alloc_frozen_pages_noprof+0x181/0x370 [ 1647.954371][ T61] alloc_pages_mpol+0xd1/0x380 [ 1647.954386][ T61] allocate_slab+0x86/0x3b0 [ 1647.954405][ T61] ___slab_alloc+0xb10/0x13e0 [ 1647.954421][ T61] __slab_alloc+0xc6/0x1f0 [ 1647.954437][ T61] __kmalloc_noprof+0x15f/0x7e0 [ 1647.954459][ T61] ___neigh_create+0x722/0x2330 [ 1647.954497][ T61] ip6_finish_output2+0x1082/0x13c0 [ 1647.954554][ T61] ip6_output+0x340/0x550 [ 1647.954597][ T61] ndisc_send_skb+0xbce/0x1510 [ 1647.954652][ T61] addrconf_dad_completed+0x7c6/0xd70 [ 1647.954675][ T61] addrconf_dad_work+0xd0d/0x15a0 [ 1647.954695][ T61] process_scheduled_works+0xad1/0x1770 [ 1647.954713][ T61] worker_thread+0x8a0/0xda0 [ 1647.954730][ T61] page_owner free stack trace missing [ 1647.954737][ T61] [ 1647.954742][ T61] Memory state around the buggy address: [ 1647.954751][ T61] ffff88805c0ea680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1647.954764][ T61] ffff88805c0ea700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1647.954777][ T61] >ffff88805c0ea780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1647.954786][ T61] ^ [ 1647.954796][ T61] ffff88805c0ea800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1647.954809][ T61] ffff88805c0ea880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1647.954818][ T61] ================================================================== [ 1647.954900][ T61] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1647.954925][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1647.954955][ T61] Tainted: [L]=SOFTLOCKUP [ 1647.954964][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1647.954979][ T61] Workqueue: hci1 hci_rx_work [ 1647.955004][ T61] Call Trace: [ 1647.955012][ T61] [ 1647.955029][ T61] vpanic+0x1e0/0x670 [ 1647.955063][ T61] panic+0xb9/0xc0 [ 1647.955093][ T61] ? __pfx_panic+0x10/0x10 [ 1647.955125][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 1647.955152][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 1647.955178][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1647.955212][ T61] check_panic_on_warn+0x89/0xb0 [ 1647.955255][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1647.955296][ T61] end_report+0x6f/0x140 [ 1647.955330][ T61] kasan_report+0x129/0x150 [ 1647.955365][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1647.955404][ T61] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1647.955442][ T61] l2cap_connect_cfm+0x367/0x10e0 [ 1647.955478][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1647.955509][ T61] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1647.955533][ T61] ? mutex_lock_nested+0x154/0x1d0 [ 1647.955562][ T61] ? hci_connect_cfm+0x2c/0x140 [ 1647.955588][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1647.955619][ T61] hci_connect_cfm+0x95/0x140 [ 1647.955648][ T61] le_conn_complete_evt+0xf65/0x1420 [ 1647.955676][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 1647.955704][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1647.955742][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 1647.955774][ T61] hci_event_packet+0x78f/0x1260 [ 1647.955798][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1647.955826][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 1647.955848][ T61] ? preempt_schedule_common+0x83/0xd0 [ 1647.955869][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 1647.955896][ T61] ? hci_send_to_monitor+0xe2/0x590 [ 1647.955928][ T61] hci_rx_work+0x3ee/0x1060 [ 1647.955952][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 1647.955977][ T61] ? process_scheduled_works+0x9ef/0x1770 [ 1647.956004][ T61] process_scheduled_works+0xad1/0x1770 [ 1647.956053][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 1647.956079][ T61] ? do_raw_spin_lock+0x121/0x290 [ 1647.956115][ T61] worker_thread+0x8a0/0xda0 [ 1647.956155][ T61] kthread+0x711/0x8a0 [ 1647.956186][ T61] ? __pfx_worker_thread+0x10/0x10 [ 1647.956212][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.956240][ T61] ? rt_spin_unlock+0x150/0x200 [ 1647.956272][ T61] ? rt_spin_unlock+0x161/0x200 [ 1647.956302][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.956332][ T61] ret_from_fork+0x510/0xa50 [ 1647.956358][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 1647.956381][ T61] ? __switch_to+0xc9e/0x1480 [ 1647.956417][ T61] ? __pfx_kthread+0x10/0x10 [ 1647.956449][ T61] ret_from_fork_asm+0x1a/0x30 [ 1647.956491][ T61] [ 1647.957095][ T61] Kernel Offset: disabled