last executing test programs: 10.170672535s ago: executing program 3 (id=92): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3545, 0xa, 0x2, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e32, 0x4e24, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r3, 0x7}, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000540)=[0x0]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x1) shutdown(0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 10.077208182s ago: executing program 3 (id=93): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="01000000000000000a004e2000a40000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008"], 0x490) 9.960240541s ago: executing program 3 (id=94): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) shutdown(r0, 0x1) 9.907210926s ago: executing program 3 (id=95): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000010104000000000008000001000002069e32953f0c6b68024a42c890ad613dce6332b8b7deb4beb7ce62a27c04b089d76f686d8201b9685e3de7db97386dc990382ba87365a9df299bc9e00e94170f3f1a9725d8715fa4715c3b798c3d64f2ffa791e84d5779746fa05f59570f122dd173289f8295d83f56beeaa86a2319bfcab5bbfdbf4bca1c2f44b113af2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r7 = openat(r6, &(0x7f00000002c0)='./bus\x00', 0x40000, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000002400010400000004000000000000000057f02afb45bd5ad86f14ce5f0c724cae992f5375a7e95fd21594d4d9b920956b5525bc566616243fccc9026ed558504e5f379e4e4c35169e090000000000000089e981feafcf971b31c568a29a8c494f7dffa7848c14b99f", @ANYRES32=0x0, @ANYBLOB="1e02040000000000280012800b00010067656e657665000018000280080001000100000005000c0001000000040006001400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r11, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r10, 0x0}]) 9.026395674s ago: executing program 4 (id=97): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@overlay={0xc71, 0x1, 0x4, 0x430, 0x5, {}, {0x3, 0x2, 0x49, 0xe8, 0x8, 0x4, "b2d48872"}, 0x6, 0x3, {}, 0x3737, 0x0, r0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0xfffffff7}, 0x8) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) fallocate(r3, 0x40, 0x5, 0x80000001) r4 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000180)={0x6, 0xe, 0x4, 0x0, 0x6, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x8, 0x9, 0x9, "d95a818c"}, 0x2, 0x4, {}, 0xfffffffb}) r5 = io_uring_setup(0x6151, &(0x7f0000000580)={0x0, 0xcaea, 0x40, 0x0, 0x3}) io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0xfffffff, 0x8, 0x7, r1, 0x0, &(0x7f0000000040)={0x9a0911, 0x8001, '\x00', @ptr=0xf9}}) 8.656113112s ago: executing program 4 (id=98): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000010104000000000008000001000002069e32953f0c6b68024a42c890ad613dce6332b8b7deb4beb7ce62a27c04b089d76f686d8201b9685e3de7db97386dc990382ba87365a9df299bc9e00e94170f3f1a9725d8715fa4715c3b798c3d64f2ffa791e84d5779746fa05f59570f122dd173289f8295d83f56beeaa86a2319bfcab5bbfdbf4bca1c2f44b113af2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r7 = openat(r6, &(0x7f00000002c0)='./bus\x00', 0x40000, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000002400010400000004000000000000000057f02afb45bd5ad86f14ce5f0c724cae992f5375a7e95fd21594d4d9b920956b5525bc566616243fccc9026ed558504e5f379e4e4c35169e090000000000000089e981feafcf971b31c568a29a8c494f7dffa7848c14b99f", @ANYRES32=0x0, @ANYBLOB="1e02040000000000280012800b00010067656e657665000018000280080001000100000005000c0001000000040006001400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r11, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r10, 0x0}]) 7.903753327s ago: executing program 1 (id=102): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r0, 0x1, 0x2, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x20, 0x0, 0x5d5fdab5e9f49753, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) connect$unix(r4, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8, {0x2, 0x0, @empty}, 'team_slave_1\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 7.49140587s ago: executing program 3 (id=104): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_io_uring_setup(0x230f, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x1c}}, 0x40000000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.364702377s ago: executing program 0 (id=105): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) shutdown(r0, 0x1) 7.188253083s ago: executing program 0 (id=106): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2000000}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x20, @in6=@private1, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) 7.098226145s ago: executing program 4 (id=107): set_mempolicy(0x3, &(0x7f0000000140)=0xd, 0x96e) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[]) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4008020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[], 0x2e) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x15) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe, 0x2}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000010000000000000006000000000000000100000000000000feffffffffffffff00"/112], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x40) 7.051965943s ago: executing program 0 (id=109): r0 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x34, 0x0, &(0x7f0000001000)) 6.963632169s ago: executing program 0 (id=110): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c08090501"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0xa) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4008800) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x3) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\r'], 0x50) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x1, 0xfbff, 0xa0, 0x2, 0xfff, 0xfffffffe}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40400d5}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff038}, {0x6}]}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x280601, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000100)=r7, 0x1) sendmmsg(r2, &(0x7f0000000100), 0x0, 0x84) 6.962252796s ago: executing program 1 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000001340)=""/4085, 0xff5}], 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x7, 0x0, 0x36, 0x100, 0x2, 0x8, 0x4, 0x1}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x7, 0x7, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x6, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r5, 0x8}, {r10, 0x4}, {r0, 0x8}, {r1}, {r2, 0x6082}, {0xffffffffffffffff, 0xc394}, {r11, 0x10}, {r9, 0x18}], 0x8, &(0x7f0000000400)={r12, r13+10000000}, &(0x7f0000000440)={[0x7]}, 0x8) unshare(0x20000400) r14 = io_uring_setup(0x665c, &(0x7f0000000240)={0x0, 0xc1b, 0x10, 0x1, 0x5d}) r15 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r15, &(0x7f0000000240), 0xfffffecc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x2c0000, 0x0) io_uring_setup(0x2c9f, &(0x7f00000002c0)={0x0, 0x3de4, 0x24, 0x2, 0x311, 0x0, r14}) 6.932132548s ago: executing program 2 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0xdd86, r3, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 6.580279057s ago: executing program 2 (id=113): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 6.458872015s ago: executing program 3 (id=114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000010104000000000008000001000002069e32953f0c6b68024a42c890ad613dce6332b8b7deb4beb7ce62a27c04b089d76f686d8201b9685e3de7db97386dc990382ba87365a9df299bc9e00e94170f3f1a9725d8715fa4715c3b798c3d64f2ffa791e84d5779746fa05f59570f122dd173289f8295d83f56beeaa86a2319bfcab5bbfdbf4bca1c2f44b113af2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r7 = openat(r6, &(0x7f00000002c0)='./bus\x00', 0x40000, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000002400010400000004000000000000000057f02afb45bd5ad86f14ce5f0c724cae992f5375a7e95fd21594d4d9b920956b5525bc566616243fccc9026ed558504e5f379e4e4c35169e090000000000000089e981feafcf971b31c568a29a8c494f7dffa7848c14b99f", @ANYRES32=0x0, @ANYBLOB="1e02040000000000280012800b00010067656e657665000018000280080001000100000005000c0001000000040006001400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r11, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r10, 0x0}]) 6.035944979s ago: executing program 2 (id=115): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x5bcc2247d494497}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x842a}}) (async) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x8, r0, 0x31, {0x5, 0x10001}, 0x16}, 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302"], 0x0) 5.580567666s ago: executing program 1 (id=116): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) shutdown(r0, 0x1) 4.561848213s ago: executing program 1 (id=117): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x20000000, 0x40000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7a02}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x20000000, 0x40000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7a02}, 0x94) unshare(0x10000000) (async) unshare(0x10000000) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x18, 0x6, 0x2d, 0x40, 0x5ac, 0xb231, 0x8500, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb0, 0x1, 0x60, 0x49}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="f7ef"]}, {0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="160500000000000000418669f57a3a110d9d80e94d8e60318e6803678c515a"]}]}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x50) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x50) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) io_uring_setup(0xac5, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0, 0x201003}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f0000000100)=[{0x3, 0xfffe}], 0x1, 0x0) semop(r4, &(0x7f0000000180)=[{0x3, 0xffff, 0x1000}, {0x4, 0x4, 0x800}], 0x2) (async) semop(r4, &(0x7f0000000180)=[{0x3, 0xffff, 0x1000}, {0x4, 0x4, 0x800}], 0x2) semctl$GETNCNT(r4, 0x3, 0xe, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r3, 0x0, 0x43) (async) read$midi(r3, 0x0, 0x43) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000080)="bcc9b155", 0x4}], 0x2}, 0x24040001) (async) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000080)="bcc9b155", 0x4}], 0x2}, 0x24040001) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0xe1c, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r6, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000840)={0x2, 0x0, {&(0x7f0000000200)=""/242, 0xf2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000d00)={0x2, 0x0, {&(0x7f0000000c40)=""/162, 0xa2, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r6, &(0x7f0000000d00)={0x2, 0x0, {&(0x7f0000000c40)=""/162, 0xa2, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x5) 4.179870974s ago: executing program 4 (id=118): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) r4 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x2, 0x9e}, &(0x7f00000002c0), &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x14, &(0x7f00000003c0), 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) unshare(0x2c020400) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000) getsockname(r1, &(0x7f0000000140)=@alg, &(0x7f00000000c0)=0x80) 4.132353062s ago: executing program 0 (id=119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0xf2ff0000}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.098475904s ago: executing program 2 (id=120): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x0, 0x0, 0x9, 0x10000000}, 0x20) 3.023111476s ago: executing program 4 (id=121): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r0, 0x1, 0x2, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x20, 0x0, 0x5d5fdab5e9f49753, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8, {0x2, 0x0, @empty}, 'team_slave_1\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1.959563668s ago: executing program 2 (id=122): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x102}}, 0x1c) 1.959319242s ago: executing program 1 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @private2, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) (fail_nth: 5) 911.217085ms ago: executing program 1 (id=124): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x4000000a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x65) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xb40, 0x4}}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='yeah', 0x4) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 908.943833ms ago: executing program 4 (id=125): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702000000"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 200.263291ms ago: executing program 2 (id=126): unshare(0x4a000000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x34000, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'veth1_to_batadv\x00', 0x200}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fe80000000000000000000000000002600000000000000009601000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b007f000000"], 0x140}}, 0x844) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYBLOB="0000000042000000240012800900010069706970000000001400028005000500c00000000500040006000000"], 0x44}, 0x1, 0xba01}, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r9, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) 0s ago: executing program 0 (id=127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000010104000000000008000001000002069e32953f0c6b68024a42c890ad613dce6332b8b7deb4beb7ce62a27c04b089d76f686d8201b9685e3de7db97386dc990382ba87365a9df299bc9e00e94170f3f1a9725d8715fa4715c3b798c3d64f2ffa791e84d5779746fa05f59570f122dd173289f8295d83f56beeaa86a2319bfcab5bbfdbf4bca1c2f44b113af2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r7 = openat(r6, &(0x7f00000002c0)='./bus\x00', 0x40000, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000002400010400000004000000000000000057f02afb45bd5ad86f14ce5f0c724cae992f5375a7e95fd21594d4d9b920956b5525bc566616243fccc9026ed558504e5f379e4e4c35169e090000000000000089e981feafcf971b31c568a29a8c494f7dffa7848c14b99f", @ANYRES32=0x0, @ANYBLOB="1e02040000000000280012800b00010067656e657665000018000280080001000100000005000c0001000000040006001400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 63.997596][ T5805] cgroup: Unknown subsys name 'net' [ 64.103302][ T5805] cgroup: Unknown subsys name 'cpuset' [ 64.112893][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.494918][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.361902][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.371242][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.381114][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.388410][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.397474][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.398838][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.405857][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.414404][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.421972][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.434793][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.437807][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.444002][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.451195][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.457390][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.467373][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.472585][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.486735][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.487094][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.494966][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.510762][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.518202][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.525542][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.526991][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.533259][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.558203][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.122439][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 68.235760][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 68.256813][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 68.341098][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 68.352619][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 68.477422][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.485217][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.492464][ T5833] bridge_slave_0: entered allmulticast mode [ 68.499531][ T5833] bridge_slave_0: entered promiscuous mode [ 68.536579][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.543966][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.551674][ T5833] bridge_slave_1: entered allmulticast mode [ 68.558697][ T5833] bridge_slave_1: entered promiscuous mode [ 68.621139][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.628360][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.635780][ T5832] bridge_slave_0: entered allmulticast mode [ 68.642998][ T5832] bridge_slave_0: entered promiscuous mode [ 68.687114][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.695616][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.703186][ T5832] bridge_slave_1: entered allmulticast mode [ 68.710653][ T5832] bridge_slave_1: entered promiscuous mode [ 68.721628][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.731175][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.738439][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.746150][ T5836] bridge_slave_0: entered allmulticast mode [ 68.753847][ T5836] bridge_slave_0: entered promiscuous mode [ 68.771057][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.778287][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.785701][ T5835] bridge_slave_0: entered allmulticast mode [ 68.792842][ T5835] bridge_slave_0: entered promiscuous mode [ 68.811934][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.821292][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.828500][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.835856][ T5836] bridge_slave_1: entered allmulticast mode [ 68.843127][ T5836] bridge_slave_1: entered promiscuous mode [ 68.850897][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.858039][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.865409][ T5834] bridge_slave_0: entered allmulticast mode [ 68.872412][ T5834] bridge_slave_0: entered promiscuous mode [ 68.880255][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.887357][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.894894][ T5834] bridge_slave_1: entered allmulticast mode [ 68.902329][ T5834] bridge_slave_1: entered promiscuous mode [ 68.909248][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.916802][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.924125][ T5835] bridge_slave_1: entered allmulticast mode [ 68.931231][ T5835] bridge_slave_1: entered promiscuous mode [ 68.990460][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.040890][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.051532][ T5833] team0: Port device team_slave_0 added [ 69.060414][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.072484][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.084911][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.106096][ T5833] team0: Port device team_slave_1 added [ 69.114123][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.125622][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.137067][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.204194][ T5832] team0: Port device team_slave_0 added [ 69.242242][ T5835] team0: Port device team_slave_0 added [ 69.250487][ T5834] team0: Port device team_slave_0 added [ 69.257718][ T5832] team0: Port device team_slave_1 added [ 69.272515][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.279600][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.307798][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.326398][ T5836] team0: Port device team_slave_0 added [ 69.334846][ T5835] team0: Port device team_slave_1 added [ 69.353139][ T5834] team0: Port device team_slave_1 added [ 69.370109][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.377467][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.406847][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.419295][ T5836] team0: Port device team_slave_1 added [ 69.444382][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.452265][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.482756][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.511442][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.518419][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.544857][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.560346][ T5829] Bluetooth: hci0: command tx timeout [ 69.566755][ T5829] Bluetooth: hci3: command tx timeout [ 69.573351][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.573682][ T51] Bluetooth: hci4: command tx timeout [ 69.582502][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.614069][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.626502][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.634175][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.660645][ T51] Bluetooth: hci1: command tx timeout [ 69.660667][ T5829] Bluetooth: hci2: command tx timeout [ 69.672482][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.701231][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.708465][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.735522][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.747355][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.754746][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.781562][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.813526][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.820853][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.847301][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.893889][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.901468][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.927905][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.955498][ T5833] hsr_slave_0: entered promiscuous mode [ 69.961865][ T5833] hsr_slave_1: entered promiscuous mode [ 69.972983][ T5834] hsr_slave_0: entered promiscuous mode [ 69.980583][ T5834] hsr_slave_1: entered promiscuous mode [ 69.986725][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 69.992931][ T5834] Cannot create hsr debugfs directory [ 70.025718][ T5832] hsr_slave_0: entered promiscuous mode [ 70.032402][ T5832] hsr_slave_1: entered promiscuous mode [ 70.039020][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 70.045120][ T5832] Cannot create hsr debugfs directory [ 70.127948][ T5835] hsr_slave_0: entered promiscuous mode [ 70.134781][ T5835] hsr_slave_1: entered promiscuous mode [ 70.141362][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 70.147092][ T5835] Cannot create hsr debugfs directory [ 70.187784][ T5836] hsr_slave_0: entered promiscuous mode [ 70.194321][ T5836] hsr_slave_1: entered promiscuous mode [ 70.200919][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 70.206754][ T5836] Cannot create hsr debugfs directory [ 70.681662][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.693449][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.703594][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.715066][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.797808][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.814670][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.825655][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.850742][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.916934][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.934287][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.944455][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.954676][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.044821][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.057125][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.083979][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.093774][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.105934][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.188982][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.224432][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.232265][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.255194][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.268770][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.283992][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.291177][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.310685][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.323182][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.366267][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.418651][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.421876][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.432993][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.449391][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.478760][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.485909][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.495823][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.503097][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.571502][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.587519][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.604753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.611903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.640358][ T51] Bluetooth: hci4: command tx timeout [ 71.640573][ T5829] Bluetooth: hci3: command tx timeout [ 71.646316][ T5819] Bluetooth: hci0: command tx timeout [ 71.663595][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.670726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.719762][ T51] Bluetooth: hci2: command tx timeout [ 71.725490][ T5819] Bluetooth: hci1: command tx timeout [ 71.733616][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.759150][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.766384][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.795848][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.803094][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.836039][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.852495][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.885918][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.934296][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.972605][ T5833] veth0_vlan: entered promiscuous mode [ 71.986079][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.993223][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.033044][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.040220][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.052203][ T5833] veth1_vlan: entered promiscuous mode [ 72.080951][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.132620][ T5832] veth0_vlan: entered promiscuous mode [ 72.143990][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.178111][ T5832] veth1_vlan: entered promiscuous mode [ 72.243871][ T5833] veth0_macvtap: entered promiscuous mode [ 72.262287][ T5834] veth0_vlan: entered promiscuous mode [ 72.271278][ T5833] veth1_macvtap: entered promiscuous mode [ 72.287407][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.312839][ T5832] veth0_macvtap: entered promiscuous mode [ 72.325842][ T5836] veth0_vlan: entered promiscuous mode [ 72.334146][ T5832] veth1_macvtap: entered promiscuous mode [ 72.345511][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.355561][ T5834] veth1_vlan: entered promiscuous mode [ 72.376389][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.400034][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.416010][ T5836] veth1_vlan: entered promiscuous mode [ 72.423035][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.434180][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.458416][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.467515][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.496742][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.517633][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.528194][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.547285][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.556251][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.622879][ T5834] veth0_macvtap: entered promiscuous mode [ 72.679127][ T5834] veth1_macvtap: entered promiscuous mode [ 72.686888][ T5836] veth0_macvtap: entered promiscuous mode [ 72.720070][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.728164][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.736611][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.755054][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.793605][ T5836] veth1_macvtap: entered promiscuous mode [ 72.806325][ T5835] veth0_vlan: entered promiscuous mode [ 72.827799][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.847160][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.867458][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.880818][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.889542][ T5835] veth1_vlan: entered promiscuous mode [ 72.900607][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.908459][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.914576][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.955146][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.975239][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.984198][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.997666][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.020118][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.036795][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.076303][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.087621][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.114125][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.132518][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.245102][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.274213][ T5835] veth0_macvtap: entered promiscuous mode [ 73.276490][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.330948][ T5835] veth1_macvtap: entered promiscuous mode [ 73.355729][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.376865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.443472][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.580034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.674324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.722126][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.730615][ T5819] Bluetooth: hci0: command tx timeout [ 73.731592][ T51] Bluetooth: hci4: command tx timeout [ 73.736142][ T5819] Bluetooth: hci3: command tx timeout [ 73.776654][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.788194][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.802774][ T5829] Bluetooth: hci1: command tx timeout [ 73.809605][ T5819] Bluetooth: hci2: command tx timeout [ 73.830321][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.839286][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.910916][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.943015][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.071610][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.140183][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.260122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.268828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.369319][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.387768][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.399914][ T42] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 74.467285][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.503736][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.561155][ T42] usb 4-1: Invalid ep0 maxpacket: 32 [ 74.580260][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.699543][ T42] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 74.764678][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.786158][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.823032][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.849399][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.868518][ T24] usb 2-1: SerialNumber: syz [ 74.880233][ T42] usb 4-1: Invalid ep0 maxpacket: 32 [ 74.888266][ T42] usb usb4-port1: attempt power cycle [ 75.124309][ T24] usb 2-1: 0:2 : does not exist [ 75.239570][ T42] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 75.257342][ T24] usb 2-1: USB disconnect, device number 2 [ 75.280354][ T42] usb 4-1: Invalid ep0 maxpacket: 32 [ 75.439746][ T42] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 75.484055][ T42] usb 4-1: Invalid ep0 maxpacket: 32 [ 75.491594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.509540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.521625][ T42] usb usb4-port1: unable to enumerate USB device [ 75.522194][ T5939] x_tables: duplicate underflow at hook 1 [ 75.541114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.734661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.800482][ T5819] Bluetooth: hci3: command tx timeout [ 75.806149][ T5829] Bluetooth: hci4: command tx timeout [ 75.806163][ T51] Bluetooth: hci0: command tx timeout [ 75.817590][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.826054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.888210][ T5829] Bluetooth: hci2: command tx timeout [ 75.894996][ T5819] Bluetooth: hci1: command tx timeout [ 76.072595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.079552][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 76.098891][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.098938][ T42] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.193250][ T42] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 76.193276][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.193288][ T42] usb 1-1: Product: syz [ 76.193296][ T42] usb 1-1: Manufacturer: syz [ 76.193304][ T42] usb 1-1: SerialNumber: syz [ 76.225862][ T42] usb 1-1: config 0 descriptor?? [ 76.477284][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.726745][ T5940] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.829561][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 76.838932][ T42] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 76.854170][ T42] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 76.874625][ T42] usb 5-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 76.884239][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.929864][ T42] usb 5-1: Product: syz [ 76.934175][ T42] usb 5-1: Manufacturer: syz [ 77.070346][ T42] usb 5-1: SerialNumber: syz [ 77.484180][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 77.609232][ T5974] process 'syz.2.22' launched './file2' with NULL argv: empty string added [ 77.720542][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 77.788249][ T10] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.860039][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.866783][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.877754][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.892469][ T10] usb 4-1: config 0 descriptor?? [ 78.326767][ T10] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 78.354190][ T9] usb 1-1: USB disconnect, device number 2 [ 78.520075][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.539077][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.630740][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 78.660415][ T5978] macvtap0: entered promiscuous mode [ 78.671530][ T5978] macvtap0: left promiscuous mode [ 79.033332][ T9] usb 5-1: USB disconnect, device number 2 [ 79.091252][ T5982] Zero length message leads to an empty skb [ 80.180503][ T10] usb 4-1: USB disconnect, device number 6 [ 80.376988][ T5991] netlink: 72 bytes leftover after parsing attributes in process `syz.1.27'. [ 80.713753][ T6000] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 80.835987][ T29] audit: type=1326 audit(1773213029.328:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 80.901227][ T29] audit: type=1326 audit(1773213029.328:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 81.013112][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'. [ 81.155863][ T29] audit: type=1326 audit(1773213029.328:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 81.247730][ T29] audit: type=1326 audit(1773213029.328:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 81.311528][ T29] audit: type=1326 audit(1773213029.328:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 81.334418][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 81.425232][ T29] audit: type=1326 audit(1773213029.328:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 81.491570][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 81.519768][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.549250][ T24] usb 4-1: config 0 has no interface number 0 [ 81.570601][ T29] audit: type=1326 audit(1773213029.378:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 81.614198][ T6012] netlink: 192 bytes leftover after parsing attributes in process `syz.4.34'. [ 81.630074][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 81.639625][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 81.671305][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.679380][ T24] usb 4-1: Product: syz [ 81.691441][ T796] cfg80211: failed to load regulatory.db [ 81.719549][ T24] usb 4-1: Manufacturer: syz [ 81.724321][ T24] usb 4-1: SerialNumber: syz [ 81.729206][ T29] audit: type=1326 audit(1773213029.388:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 81.792726][ T24] usb 4-1: config 0 descriptor?? [ 81.864183][ T24] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 81.877943][ T29] audit: type=1326 audit(1773213029.388:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 81.929557][ T24] usb 4-1: selecting invalid altsetting 1 [ 81.939529][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 81.999542][ T29] audit: type=1326 audit(1773213029.388:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285099c799 code=0x7ffc0000 [ 82.024783][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.072022][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 82.105870][ T24] usb 4-1: media controller created [ 82.174122][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 82.235363][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.485946][ T6029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 82.501545][ T6029] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 82.577906][ T6031] netlink: 184 bytes leftover after parsing attributes in process `syz.0.40'. [ 82.592716][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 82.609775][ T6031] netlink: 56 bytes leftover after parsing attributes in process `syz.0.40'. [ 82.646897][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 82.979561][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 83.119837][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 83.161396][ T6004] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 83.261790][ T24] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 83.268922][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 83.280978][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 83.309683][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 83.339206][ T10] usb usb3-port1: attempt power cycle [ 83.407383][ T24] usb 4-1: USB disconnect, device number 7 [ 83.740384][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 83.770248][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 83.903792][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 83.930343][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 83.937170][ T10] usb usb3-port1: unable to enumerate USB device [ 84.649736][ T1224] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 84.891351][ T1224] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.902898][ T1224] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.022791][ T1224] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.046483][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.070933][ T1224] usb 1-1: Product: syz [ 85.109485][ T1224] usb 1-1: Manufacturer: syz [ 85.114438][ T1224] usb 1-1: SerialNumber: syz [ 85.189903][ T6065] netlink: 184 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.203227][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.217229][ T6065] netlink: 56 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.655737][ T1224] usb 1-1: 0:2 : does not exist [ 85.786505][ T1224] usb 1-1: USB disconnect, device number 3 [ 85.791142][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 86.109507][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 86.116694][ T6071] loop2: detected capacity change from 0 to 7 [ 86.131555][ T6071] Dev loop2: unable to read RDB block 7 [ 86.135291][ T6067] loop9: detected capacity change from 0 to 7 [ 86.137614][ T6071] loop2: AHDI p1 p2 [ 86.164785][ T6067] Dev loop9: unable to read RDB block 7 [ 86.171718][ T6067] loop9: AHDI p2 p3 [ 86.175684][ T6067] loop9: partition table partially beyond EOD, truncated [ 86.180070][ T6071] loop2: partition table partially beyond EOD, truncated [ 86.261083][ T6067] loop9: p2 size 1701016946 extends beyond EOD, truncated [ 86.350097][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.375540][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 86.375658][ T6071] loop2: p1 start 1818582900 is beyond EOD, [ 86.414521][ T9] usb 3-1: can't read configurations, error -71 [ 86.560300][ T6071] truncated [ 86.696538][ T5994] udevd[5994]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 86.874982][ T6081] autofs4:pid:6081:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 86.924845][ T6081] autofs4:pid:6081:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 86.971172][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.54'. [ 86.999742][ T6081] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 87.170931][ T6084] loop4: detected capacity change from 0 to 7 [ 87.215482][ T6084] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 87.221807][ T6084] loop4: partition table partially beyond EOD, truncated [ 87.250857][ T6084] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 87.449176][ T5809] udevd[5809]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 87.551072][ T24] IPVS: starting estimator thread 0... [ 87.568179][ T6094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.59'. [ 87.651061][ T6095] IPVS: using max 36 ests per chain, 86400 per kthread [ 87.728471][ T6099] netlink: 'syz.4.61': attribute type 10 has an invalid length. [ 87.825237][ T6099] team0: Port device netdevsim0 added [ 88.129022][ T6110] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.275514][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.417822][ T6117] loop2: detected capacity change from 0 to 7 [ 88.457513][ T5809] Dev loop2: unable to read RDB block 7 [ 88.467484][ T5809] loop2: AHDI p1 p2 [ 88.476114][ T5809] loop2: partition table partially beyond EOD, truncated [ 88.491899][ T5809] loop2: p1 start 1818582900 is beyond EOD, truncated [ 88.510804][ T6117] Dev loop2: unable to read RDB block 7 [ 88.524008][ T6117] loop2: AHDI p1 p2 [ 88.531895][ T6117] loop2: partition table partially beyond EOD, truncated [ 88.540266][ T6117] loop2: p1 start 1818582900 is beyond EOD, truncated [ 88.683696][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 88.851838][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.867466][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 88.879125][ T10] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 88.892051][ T10] usb 4-1: config 1 has no interface number 0 [ 88.901009][ T10] usb 4-1: config 1 interface 93 has no altsetting 0 [ 88.914117][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 88.922930][ T6129] netlink: 'syz.2.72': attribute type 24 has an invalid length. [ 88.934142][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.936794][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 88.955533][ T6129] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 88.969576][ T10] usb 4-1: Product: syz [ 88.973808][ T10] usb 4-1: Manufacturer: syz [ 88.998450][ T10] usb 4-1: SerialNumber: syz [ 89.094227][ T6133] netlink: 'syz.2.74': attribute type 4 has an invalid length. [ 89.113069][ T6133] netlink: 'syz.2.74': attribute type 2 has an invalid length. [ 89.245733][ T10] usb 4-1: USB disconnect, device number 8 [ 89.284593][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.303703][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.353070][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.372847][ T6143] syzkaller0: entered promiscuous mode [ 89.378393][ T6143] syzkaller0: entered allmulticast mode [ 89.391780][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.519566][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 89.689603][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 89.695594][ T9] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 89.707086][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 89.715524][ T9] usb 3-1: can't read configurations, error -61 [ 89.849945][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 90.013338][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 90.024504][ T9] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 90.037767][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 90.054758][ T9] usb 3-1: can't read configurations, error -61 [ 90.077772][ T9] usb usb3-port1: attempt power cycle [ 90.287727][ T6176] netlink: 104 bytes leftover after parsing attributes in process `syz.4.89'. [ 90.297605][ T1224] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.439722][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 90.464258][ T1224] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 90.474844][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.475333][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 90.500154][ T1224] usb 2-1: Product: syz [ 90.502390][ T9] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 90.513085][ T1224] usb 2-1: Manufacturer: syz [ 90.518000][ T1224] usb 2-1: SerialNumber: syz [ 90.556332][ T6180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.569270][ T6180] netlink: 104 bytes leftover after parsing attributes in process `syz.0.91'. [ 90.618631][ T1224] usb 2-1: config 0 descriptor?? [ 90.688667][ T1224] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 90.698891][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 90.714262][ T9] usb 3-1: can't read configurations, error -61 [ 90.849525][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 90.885729][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 90.891602][ T9] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 90.924762][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 90.937450][ T9] usb 3-1: can't read configurations, error -61 [ 90.966399][ T9] usb usb3-port1: unable to enumerate USB device [ 90.997628][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.132922][ T1224] sonixb 2-1:0.0: Error writing register 01: -71 [ 91.141400][ T1224] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 91.157145][ T1224] usb 2-1: USB disconnect, device number 3 [ 91.285916][ T6190] netlink: 184 bytes leftover after parsing attributes in process `syz.3.95'. [ 91.307935][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 91.325381][ T6190] netlink: 56 bytes leftover after parsing attributes in process `syz.3.95'. [ 91.824716][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 92.865007][ T6203] netlink: 184 bytes leftover after parsing attributes in process `syz.4.98'. [ 92.922681][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 92.995989][ T6212] FAULT_INJECTION: forcing a failure. [ 92.995989][ T6212] name failslab, interval 1, probability 0, space 0, times 1 [ 93.062958][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.2.99 Not tainted syzkaller #0 PREEMPT(full) [ 93.062979][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 93.062990][ T6212] Call Trace: [ 93.062995][ T6212] [ 93.063000][ T6212] dump_stack_lvl+0xe8/0x150 [ 93.063021][ T6212] should_fail_ex+0x412/0x560 [ 93.063037][ T6212] should_failslab+0xa8/0x100 [ 93.063051][ T6212] ? skb_clone+0x212/0x3a0 [ 93.063062][ T6212] kmem_cache_alloc_noprof+0x87/0x650 [ 93.063076][ T6212] skb_clone+0x212/0x3a0 [ 93.063087][ T6212] __netlink_deliver_tap+0x404/0x850 [ 93.063107][ T6212] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.063120][ T6212] netlink_deliver_tap+0x19c/0x1b0 [ 93.063133][ T6212] netlink_sendskb+0x68/0x140 [ 93.063148][ T6212] netlink_unicast+0x3a3/0x9b0 [ 93.063164][ T6212] ? __pfx_netlink_unicast+0x10/0x10 [ 93.063180][ T6212] netlink_rcv_skb+0x2b6/0x4b0 [ 93.063193][ T6212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.063207][ T6212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.063224][ T6212] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.063240][ T6212] netlink_unicast+0x80f/0x9b0 [ 93.063255][ T6212] ? __pfx_netlink_unicast+0x10/0x10 [ 93.063267][ T6212] ? netlink_sendmsg+0x650/0xb40 [ 93.063278][ T6212] ? skb_put+0x11b/0x210 [ 93.063294][ T6212] netlink_sendmsg+0x813/0xb40 [ 93.063311][ T6212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.063325][ T6212] ? aa_sock_msg_perm+0xf1/0x1b0 [ 93.063338][ T6212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.063351][ T6212] ____sys_sendmsg+0x972/0x9f0 [ 93.063365][ T6212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.063379][ T6212] ? import_iovec+0x73/0xa0 [ 93.063395][ T6212] ___sys_sendmsg+0x2a5/0x360 [ 93.063407][ T6212] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.063433][ T6212] ? __fget_files+0x2a/0x420 [ 93.063447][ T6212] ? __fget_files+0x3a0/0x420 [ 93.063465][ T6212] __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.063476][ T6212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.063490][ T6212] ? __pfx_ksys_write+0x10/0x10 [ 93.063507][ T6212] do_syscall_64+0x14d/0xf80 [ 93.063516][ T6212] ? trace_irq_disable+0x3b/0x150 [ 93.063530][ T6212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.063539][ T6212] ? clear_bhb_loop+0x40/0x90 [ 93.063551][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.063561][ T6212] RIP: 0033:0x7f2290b9c799 [ 93.063574][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.063582][ T6212] RSP: 002b:00007f2291ae1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.063594][ T6212] RAX: ffffffffffffffda RBX: 00007f2290e16180 RCX: 00007f2290b9c799 [ 93.063600][ T6212] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 93.063606][ T6212] RBP: 00007f2291ae1090 R08: 0000000000000000 R09: 0000000000000000 [ 93.063613][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.063618][ T6212] R13: 00007f2290e16218 R14: 00007f2290e16180 R15: 00007f2290f3fa48 [ 93.063633][ T6212] [ 93.602782][ T6203] netlink: 56 bytes leftover after parsing attributes in process `syz.4.98'. [ 93.869377][ T6227] netlink: 'syz.2.108': attribute type 20 has an invalid length. [ 94.016136][ T6234] netlink: 104 bytes leftover after parsing attributes in process `syz.4.107'. [ 94.307285][ T6242] loop2: detected capacity change from 0 to 7 [ 94.308139][ T6242] Dev loop2: unable to read RDB block 7 [ 94.308166][ T6242] loop2: AHDI p1 p2 [ 94.308191][ T6242] loop2: partition table partially beyond EOD, truncated [ 94.308373][ T6242] loop2: p1 start 1818582900 is beyond EOD, truncated [ 94.440986][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.635704][ T9] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 94.635724][ T9] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 94.635735][ T9] usb 1-1: config 171 has no interface number 0 [ 94.635758][ T9] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 94.635772][ T9] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64 [ 94.635786][ T9] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 94.642130][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 94.642163][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.642183][ T9] usb 1-1: Product: syz [ 94.642198][ T9] usb 1-1: Manufacturer: syz [ 94.642213][ T9] usb 1-1: SerialNumber: syz [ 94.646462][ T6237] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.712894][ T6225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.166427][ T9] ath6kl: Failed to submit usb control message: -71 [ 95.179555][ T1224] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 95.191192][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 95.231296][ T9] ath6kl: Unable to send get target info: -71 [ 95.279175][ T9] ath6kl: Failed to init ath6kl core: -71 [ 95.322897][ T9] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 95.341503][ T1224] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 95.353684][ T9] usb 1-1: USB disconnect, device number 4 [ 95.399580][ T1224] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.434445][ T1224] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.465034][ T1224] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 96.197274][ T1224] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.254314][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 96.352658][ T1224] usb 3-1: SerialNumber: syz [ 97.527215][ T1224] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 97.609546][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.873318][ T1224] usb 3-1: USB disconnect, device number 12 [ 97.882398][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.889874][ T9] usb 2-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 97.889902][ T9] usb 2-1: config 176 has 0 interfaces, different from the descriptor's value: 1 [ 97.905596][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 97.912984][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 97.913014][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.913034][ T9] usb 2-1: Product: syz [ 97.913050][ T9] usb 2-1: SerialNumber: syz [ 98.896514][ T9] usb 2-1: USB disconnect, device number 4 [ 99.183604][ T6272] FAULT_INJECTION: forcing a failure. [ 99.183604][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 99.281278][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT(full) [ 99.281304][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 99.281314][ T6272] Call Trace: [ 99.281321][ T6272] [ 99.281329][ T6272] dump_stack_lvl+0xe8/0x150 [ 99.281359][ T6272] should_fail_ex+0x412/0x560 [ 99.281387][ T6272] should_failslab+0xa8/0x100 [ 99.281411][ T6272] __kvmalloc_node_noprof+0x178/0x8a0 [ 99.281432][ T6272] ? net_generic+0x1e/0x240 [ 99.281453][ T6272] ? alloc_netdev_mqs+0xa6/0x11b0 [ 99.281480][ T6272] alloc_netdev_mqs+0xa6/0x11b0 [ 99.281498][ T6272] ? __pfx_vti6_dev_setup+0x10/0x10 [ 99.281525][ T6272] vti6_locate+0x5d4/0x780 [ 99.281554][ T6272] ? __pfx_vti6_locate+0x10/0x10 [ 99.281578][ T6272] ? vti6_siocdevprivate+0x575/0x7a0 [ 99.281605][ T6272] vti6_siocdevprivate+0x5a3/0x7a0 [ 99.281631][ T6272] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 99.281672][ T6272] ? full_name_hash+0xb0/0xe0 [ 99.281702][ T6272] dev_ifsioc+0xba6/0x1280 [ 99.281733][ T6272] dev_ioctl+0x84c/0x1150 [ 99.281760][ T6272] sock_ioctl+0x75f/0x7f0 [ 99.281782][ T6272] ? __pfx_sock_ioctl+0x10/0x10 [ 99.281803][ T6272] ? __fget_files+0x3a0/0x420 [ 99.281827][ T6272] ? __fget_files+0x2a/0x420 [ 99.281854][ T6272] ? bpf_lsm_file_ioctl+0x9/0x20 [ 99.281876][ T6272] ? __pfx_sock_ioctl+0x10/0x10 [ 99.281895][ T6272] __se_sys_ioctl+0xfc/0x170 [ 99.281918][ T6272] do_syscall_64+0x14d/0xf80 [ 99.281934][ T6272] ? trace_irq_disable+0x3b/0x150 [ 99.281958][ T6272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.281976][ T6272] ? clear_bhb_loop+0x40/0x90 [ 99.281997][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.282014][ T6272] RIP: 0033:0x7f8b7359c799 [ 99.282032][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.282046][ T6272] RSP: 002b:00007f8b743d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.282065][ T6272] RAX: ffffffffffffffda RBX: 00007f8b73815fa0 RCX: 00007f8b7359c799 [ 99.282077][ T6272] RDX: 0000200000000780 RSI: 00000000000089f1 RDI: 0000000000000004 [ 99.282088][ T6272] RBP: 00007f8b743d7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.282099][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.282109][ T6272] R13: 00007f8b73816038 R14: 00007f8b73815fa0 R15: 00007f8b7393fa48 [ 99.282138][ T6272] [ 100.826477][ T6277] loop2: detected capacity change from 0 to 7 [ 100.885300][ T6277] Dev loop2: unable to read RDB block 7 [ 100.908918][ T6277] loop2: AHDI p1 p2 p3 [ 101.111244][ T6277] loop2: partition table partially beyond EOD, truncated [ 106.409181][ T6277] loop2: p1 start 1818582900 is beyond EOD, truncated [ 109.349452][ C0] sched: DL replenish lagged too much [ 118.678813][ T6277] loop2: p3 start 335544320 is beyond EOD, truncated [ 135.215786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.236646][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.454954][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.475369][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.029448][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 241.036509][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5486/1:b..l P5815/1:b..l P6245/1:b..l [ 241.047180][ C1] rcu: (detected by 1, t=10503 jiffies, g=13213, q=1168498 ncpus=2) [ 241.055301][ C1] task:syz.3.114 state:R running task stack:25608 pid:6245 tgid:6243 ppid:5834 task_flags:0x40044c flags:0x00080001 [ 241.069967][ C1] Call Trace: [ 241.073457][ C1] [ 241.076424][ C1] __schedule+0x15dd/0x52d0 [ 241.081153][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 241.086197][ C1] ? __pfx___schedule+0x10/0x10 [ 241.091084][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 241.096480][ C1] preempt_schedule_common+0x82/0xd0 [ 241.101798][ C1] preempt_schedule_thunk+0x16/0x30 [ 241.107025][ C1] _raw_spin_unlock+0x3f/0x50 [ 241.111727][ C1] unmap_page_range+0x3b71/0x48f0 [ 241.116812][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 241.122219][ C1] ? mas_find+0xb0e/0xd30 [ 241.126944][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 241.131738][ C1] unmap_vmas+0x48f/0x6a0 [ 241.136107][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 241.141013][ C1] exit_mmap+0x280/0xa10 [ 241.145286][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 241.150062][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 241.155391][ C1] ? __pfx_exit_aio+0x10/0x10 [ 241.160099][ C1] ? uprobe_clear_state+0x27c/0x290 [ 241.165321][ C1] __mmput+0x118/0x430 [ 241.169418][ C1] exit_mm+0x168/0x220 [ 241.173497][ C1] do_exit+0x6a2/0x23c0 [ 241.177679][ C1] ? __pfx_do_exit+0x10/0x10 [ 241.182375][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 241.187604][ C1] do_group_exit+0x21b/0x2d0 [ 241.192206][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.197428][ C1] get_signal+0x1284/0x1330 [ 241.201980][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 241.207545][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 241.213755][ C1] ? __x64_sys_recvmmsg+0x198/0x250 [ 241.218981][ C1] exit_to_user_mode_loop+0x86/0x480 [ 241.224285][ C1] ? rcu_is_watching+0x15/0xb0 [ 241.229166][ C1] do_syscall_64+0x32d/0xf80 [ 241.234035][ C1] ? trace_irq_disable+0x3b/0x150 [ 241.239086][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.245166][ C1] ? clear_bhb_loop+0x40/0x90 [ 241.249906][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.255812][ C1] RIP: 0033:0x7fcda4b9c799 [ 241.260238][ C1] RSP: 002b:00007fcda5ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 241.268670][ C1] RAX: 0000000000010106 RBX: 00007fcda4e16090 RCX: 00007fcda4b9c799 [ 241.276657][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 241.284641][ C1] RBP: 00007fcda4c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 241.292649][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 241.300656][ C1] R13: 00007fcda4e16128 R14: 00007fcda4e16090 R15: 00007fcda4f3fa48 [ 241.308664][ C1] [ 241.311701][ C1] task:syz-executor state:R running task stack:23904 pid:5815 tgid:5815 ppid:5805 task_flags:0x40050c flags:0x00080002 [ 241.325205][ C1] Call Trace: [ 241.328532][ C1] [ 241.331477][ C1] __schedule+0x15dd/0x52d0 [ 241.336007][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 241.341064][ C1] ? __pfx___schedule+0x10/0x10 [ 241.345949][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 241.351438][ C1] preempt_schedule_common+0x82/0xd0 [ 241.356836][ C1] preempt_schedule_thunk+0x16/0x30 [ 241.362123][ C1] _raw_spin_unlock+0x3f/0x50 [ 241.366822][ C1] unmap_page_range+0x3b71/0x48f0 [ 241.371905][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 241.377307][ C1] ? mas_find+0xb0e/0xd30 [ 241.381680][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 241.386381][ C1] unmap_vmas+0x48f/0x6a0 [ 241.390754][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 241.395646][ C1] exit_mmap+0x280/0xa10 [ 241.399903][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 241.404697][ C1] ? __pfx_exit_aio+0x10/0x10 [ 241.409489][ C1] ? uprobe_clear_state+0x27c/0x290 [ 241.415151][ C1] __mmput+0x118/0x430 [ 241.419341][ C1] exit_mm+0x168/0x220 [ 241.423611][ C1] do_exit+0x6a2/0x23c0 [ 241.427802][ C1] ? __pfx_do_exit+0x10/0x10 [ 241.432593][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 241.437684][ C1] do_group_exit+0x21b/0x2d0 [ 241.442295][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.447527][ C1] get_signal+0x1284/0x1330 [ 241.452071][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 241.457996][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 241.463299][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 241.469498][ C1] exit_to_user_mode_loop+0x86/0x480 [ 241.474828][ C1] ? rcu_is_watching+0x15/0xb0 [ 241.479615][ C1] do_syscall_64+0x32d/0xf80 [ 241.484219][ C1] ? trace_irq_disable+0x3b/0x150 [ 241.489272][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.495360][ C1] ? clear_bhb_loop+0x40/0x90 [ 241.500065][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.505974][ C1] RIP: 0033:0x7fcda4b5cfce [ 241.510410][ C1] RSP: 002b:00007fffaa89edd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 241.518837][ C1] RAX: fffffffffffffe00 RBX: 0000555572e51500 RCX: 00007fcda4b5cfce [ 241.526822][ C1] RDX: 0000000040000000 RSI: 00007fffaa89ee4c RDI: ffffffffffffffff [ 241.534808][ C1] RBP: 00007fffaa89ee4c R08: 0000000000000000 R09: 0000000000000000 [ 241.542802][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 241.550783][ C1] R13: 0000000000000003 R14: 00007fffaa89f0a8 R15: 0000000000000000 [ 241.558965][ C1] [ 241.561995][ C1] task:dhcpcd state:R running task stack:25824 pid:5486 tgid:5486 ppid:1 task_flags:0x400140 flags:0x00080000 [ 241.575492][ C1] Call Trace: [ 241.578784][ C1] [ 241.581748][ C1] __schedule+0x15dd/0x52d0 [ 241.586298][ C1] ? __pfx___schedule+0x10/0x10 [ 241.591189][ C1] preempt_schedule_irq+0x4d/0xa0 [ 241.596230][ C1] irqentry_exit+0x599/0x620 [ 241.600826][ C1] ? trace_irq_disable+0x3b/0x150 [ 241.605881][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.611891][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 241.617204][ C1] Code: e9 30 ff ff ff e8 35 59 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 b1 46 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 16 3f 0f 0a cc 48 8d 3d 6e 56 73 [ 241.636897][ C1] RSP: 0018:ffffc9000257f0f8 EFLAGS: 00000282 [ 241.642984][ C1] RAX: 5d61f57a697fa900 RBX: 0000000000000246 RCX: 0000000000000046 [ 241.650975][ C1] RDX: 00000000d073fed0 RSI: ffffffff8e165ab8 RDI: ffffffff8c27b500 [ 241.659229][ C1] RBP: 0000000000000000 R08: ffffffff81767de5 R09: ffffffff8e75e420 [ 241.667256][ C1] R10: ffffc9000257f258 R11: ffffffff81b0bfa0 R12: 0000000000000002 [ 241.675244][ C1] R13: ffffffff8e75e420 R14: 0000000000000000 R15: 0000000000000000 [ 241.683237][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.689410][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 241.694565][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.700654][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 241.705792][ C1] unwind_next_frame+0xc2/0x23c0 [ 241.710782][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 241.715969][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 241.721198][ C1] ? do_syscall_64+0x14d/0xf80 [ 241.725978][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.732074][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.738603][ C1] arch_stack_walk+0x11b/0x150 [ 241.743404][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.749495][ C1] stack_trace_save+0xa9/0x100 [ 241.754283][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 241.759854][ C1] save_stack+0x122/0x230 [ 241.764201][ C1] ? __pfx_save_stack+0x10/0x10 [ 241.769063][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 241.774372][ C1] ? __slab_free+0x263/0x2b0 [ 241.779010][ C1] ? qlist_free_all+0x97/0x100 [ 241.783825][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 241.789481][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 241.794523][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 241.800613][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 241.805234][ C1] ? alloc_skb_with_frags+0xca/0x890 [ 241.810546][ C1] ? sock_alloc_send_pskb+0x878/0x990 [ 241.815938][ C1] ? unix_dgram_sendmsg+0x460/0x18e0 [ 241.821249][ C1] ? sock_write_iter+0x49b/0x4f0 [ 241.826292][ C1] ? vfs_write+0x61d/0xb90 [ 241.830725][ C1] ? ksys_write+0x150/0x270 [ 241.835253][ C1] ? do_syscall_64+0x14d/0xf80 [ 241.840029][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.846120][ C1] ? page_ext_put+0x97/0xc0 [ 241.850650][ C1] __reset_page_owner+0x71/0x1f0 [ 241.855614][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 241.860771][ C1] __slab_free+0x263/0x2b0 [ 241.865306][ C1] ? qlist_free_all+0x8c/0x100 [ 241.870124][ C1] qlist_free_all+0x97/0x100 [ 241.874779][ C1] kasan_quarantine_reduce+0x148/0x160 [ 241.880295][ C1] __kasan_slab_alloc+0x22/0x80 [ 241.885430][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 241.891342][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 241.895948][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 241.902035][ C1] __alloc_skb+0x1d0/0x7d0 [ 241.906476][ C1] alloc_skb_with_frags+0xca/0x890 [ 241.911618][ C1] ? sock_def_readable+0xae/0x580 [ 241.916661][ C1] sock_alloc_send_pskb+0x878/0x990 [ 241.921972][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 241.927713][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 241.933346][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 241.939432][ C1] unix_dgram_sendmsg+0x460/0x18e0 [ 241.944557][ C1] ? aa_file_perm+0x192/0x15e0 [ 241.949344][ C1] ? aa_file_perm+0x50e/0x15e0 [ 241.954122][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 241.959428][ C1] ? aa_file_perm+0x192/0x15e0 [ 241.964227][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 241.969791][ C1] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 241.976226][ C1] ? __pfx_aa_file_perm+0x10/0x10 [ 241.981399][ C1] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 241.987140][ C1] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 241.993058][ C1] sock_write_iter+0x49b/0x4f0 [ 241.997841][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 242.003245][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 242.008640][ C1] ? security_file_permission+0x75/0x260 [ 242.014299][ C1] vfs_write+0x61d/0xb90 [ 242.018576][ C1] ? __pfx_vfs_write+0x10/0x10 [ 242.023373][ C1] ksys_write+0x150/0x270 [ 242.027777][ C1] ? __pfx_ksys_write+0x10/0x10 [ 242.032711][ C1] ? __task_pid_nr_ns+0x28/0x470 [ 242.037744][ C1] ? __secure_computing+0xe1/0x2a0 [ 242.042886][ C1] do_syscall_64+0x14d/0xf80 [ 242.047503][ C1] ? trace_irq_disable+0x3b/0x150 [ 242.052560][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.058646][ C1] ? clear_bhb_loop+0x40/0x90 [ 242.063344][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.069258][ C1] RIP: 0033:0x7f289e3af407 [ 242.073691][ C1] RSP: 002b:00007ffc8d91aa70 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 242.082120][ C1] RAX: ffffffffffffffda RBX: 00007f289e325780 RCX: 00007f289e3af407 [ 242.090105][ C1] RDX: 0000000000000047 RSI: 00007ffc8d91aad0 RDI: 0000000000000005 [ 242.098086][ C1] RBP: 0000564acd4c9a48 R08: 0000000000000000 R09: 0000000000000000 [ 242.106068][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc8d91af00 [ 242.114048][ C1] R13: 000000000000f7d5 R14: 0000000000000001 R15: 0000000000000001 [ 242.122047][ C1] [ 248.648801][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 248.671604][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 248.698959][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 248.875130][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 248.898542][ T5143] Bluetooth: hci3: command 0x0406 tx timeout