last executing test programs: 4m14.476782339s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515) 4m12.277090644s ago: executing program 0 (id=6): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100), 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x10d040) write$sndseq(r3, &(0x7f0000000400)=[{0x19, 0x3, 0x1, 0x0, @time={0x5}, {0x3, 0xdc}, {0x5, 0x9}, @control={0x8, 0x3ff, 0x6}}, {0x3, 0xa0, 0x7, 0x3, @tick=0x100, {0x4, 0xf4}, {0x2, 0x2}, @connect={{0x5, 0x3}, {0x3, 0x10}}}, {0x40, 0x4, 0x9, 0x14, @tick=0x40, {0xe, 0x6}, {0xe7, 0x8}, @connect={{0x4}, {0x8, 0x2}}}, {0x0, 0x6, 0x6, 0x15, @tick=0x7, {0x7f, 0xd}, {0x8, 0xac}, @note={0x7f, 0x5, 0x5b, 0xf9}}, {0x8, 0x6, 0xcf, 0x0, @time={0x4800000, 0x7fffffff}, {0x6}, {0x81, 0x6}, @raw32={[0x6c, 0x8, 0x5]}}, {0x0, 0x81, 0x6, 0x7, @tick=0x4, {0x0, 0x4}, {0x2, 0x40}, @queue={0xa, {0xa, 0x88fe}}}, {0x7, 0x2, 0x3, 0xf6, @time={0x4cd7, 0x4}, {0xfb, 0x53}, {0x5, 0xa1}, @queue={0x57, {0x71d, 0x4}}}, {0x3f, 0xd, 0x7, 0x7f, @time={0x5eeb, 0x9}, {0x9, 0x9}, {0x8, 0x7}, @result={0x5dc8, 0x4}}, {0x0, 0x6, 0x53, 0x7, @time={0x4c6, 0x2}, {0x2, 0x9}, {0x9, 0x39}, @addr={0x4, 0x7}}], 0xfc) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b703000000080000850000000600", @ANYRES32=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x8, 0x0, &(0x7f00000006c0)="0000000005000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000340)=0x1) 4m10.912241516s ago: executing program 0 (id=8): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10040, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c0000007a006bcd9e3fe3dc6e08000007aa0004000000007ea60864162cf36504005425198bc3488bc3a0e69e94003651f668c366682fb6e27bbfa83b5cae0300c9fcd193", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r1, 0xf9000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3m55.457544262s ago: executing program 32 (id=8): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10040, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c0000007a006bcd9e3fe3dc6e08000007aa0004000000007ea60864162cf36504005425198bc3488bc3a0e69e94003651f668c366682fb6e27bbfa83b5cae0300c9fcd193", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r1, 0xf9000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3m11.166524469s ago: executing program 1 (id=86): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0x80, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) ptrace(0x10, 0x0) sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) open_by_handle_at(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10000) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffedb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048903faaeae1ada280eff2f20e9a9d0d99794f5a0762842d07e5693d2e3d824c", 0x6c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a47", 0x43}], 0x2, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x5e}], 0x18, 0x10}], 0x1, 0x20040082) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/91, 0x5b}], 0x1}, 0x0) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) 3m5.686341333s ago: executing program 1 (id=90): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0x80, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) ptrace(0x10, 0x0) sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) open_by_handle_at(r0, 0x0, 0x10000) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffedb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048903faaeae1ada280eff2f20e9a9d0d99794f5a0762842d07e5693d2e3d824c", 0x6c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x5e}], 0x18, 0x10}], 0x1, 0x20040082) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/91, 0x5b}], 0x1}, 0x0) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) 3m3.91982484s ago: executing program 1 (id=94): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) io_setup(0x3ff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x110, 0xd, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m2.791525228s ago: executing program 1 (id=97): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 3m0.7672734s ago: executing program 1 (id=99): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0x80, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) ptrace(0x10, 0x0) sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) open_by_handle_at(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10000) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffedb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048903faaeae1ada280eff2f20e9a9d0d99794f5a0762842d07e5693d2e3d824c", 0x6c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a47", 0x43}], 0x2, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x5e}], 0x18, 0x10}], 0x1, 0x20040082) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/91, 0x5b}], 0x1}, 0x0) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) 2m59.684129193s ago: executing program 1 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000720000009500000000000000493566ebe464989b3aa7cd169d2e51d5b8990c96a6a162bce20099a3d34b696fe47e6372a12493945c671755c125ae2d80da811d188395c488c946c9a7633d235671f3a28f10d1feacdfc1555df8030e11a1e3b56e0f361c274e"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_pidfd_open(0x0, 0x0) 2m44.198757241s ago: executing program 33 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000720000009500000000000000493566ebe464989b3aa7cd169d2e51d5b8990c96a6a162bce20099a3d34b696fe47e6372a12493945c671755c125ae2d80da811d188395c488c946c9a7633d235671f3a28f10d1feacdfc1555df8030e11a1e3b56e0f361c274e"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_pidfd_open(0x0, 0x0) 1m19.454033485s ago: executing program 4 (id=232): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000204000000020000000000001302000000020000007400000e090000000000000000006100"], 0x0, 0x54}, 0x28) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1"], 0x0) 1m18.132463367s ago: executing program 4 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="020000000400000004000000020000"], 0x50) pwrite64(r0, 0x0, 0x0, 0x4) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x4f41, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES8], 0xa8}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x20080) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) 1m15.25769607s ago: executing program 4 (id=237): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/225, &(0x7f0000000140)=0xe1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0xf}, 0xff}}}, 0x7) lseek(0xffffffffffffffff, 0x4, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000700)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) 1m13.531063987s ago: executing program 4 (id=239): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "001863714ab99043"}}}}}, 0x0) 1m12.727603301s ago: executing program 4 (id=240): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xd0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000019", @ANYRES16=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000000)=""/103) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) close(0x4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, &(0x7f0000000340)) pipe(&(0x7f0000000600)) close(0x3) 1m10.159262283s ago: executing program 4 (id=245): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 54.845008874s ago: executing program 34 (id=245): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 15.014520436s ago: executing program 2 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515) 13.641470128s ago: executing program 2 (id=285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 11.536851538s ago: executing program 2 (id=286): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(0xffffffffffffffff, &(0x7f00000002c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000000000000000000001000000ff000056df27bb76a0c4c02a354f90106d3a0000000000140000000000000000000000020000005702000000000000140000000000000000000000020000000900000000000000110000000000000000000000010000000100", @ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f000001000002"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.065767207s ago: executing program 3 (id=288): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000b7080000000000007b8af8ff00000000b708000078b500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000204000000020000000000001302000000020000007400000e090000000000000000006100"], 0x0, 0x54}, 0x28) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1"], 0x0) 8.215259178s ago: executing program 2 (id=289): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0x80, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) ptrace(0x10, 0x0) sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) open_by_handle_at(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="280000004e000000020000000000000060040000000000000200000300ffffffffffff7fbc000000f8fbffffffffffffb5e706eed5bcbbb99928dadbf56767b4a2be36ff908ea77ae560f54099b26d387fa06138ff3a9e64a9c86f9de854ab5ce0f12661999f7a0f636dfd15739e46873679133423290bcb7a5818b429b08f258c495c2f212bde93e5ef9a8cdeac1803ade2e597bb1c4841aec219c939aeb695c2e1a8365cca949b2696d34ec231aed030d9091b739512ea09491c7b68"], 0x10000) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffedb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048903faaeae1ada280eff2f20e9a9d0d99794f5a0762842d07e5693d2e3d824c", 0x6c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x5e}], 0x18, 0x10}], 0x1, 0x20040082) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/91, 0x5b}], 0x1}, 0x0) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) 7.646826355s ago: executing program 3 (id=290): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x4, {0x1, 0x9, 0x4d0, 0x40d, 0xa, 0x0, 0xed1, 0x2, 0x7fff, 0xc000, 0x7ff, r5, r6, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.635375446s ago: executing program 3 (id=291): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x2200) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x88902) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0xffffd000) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c000700060020000040"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e80)=ANY=[@ANYBLOB, @ANYBLOB="00022dbd7000fddbdf2567000000080001006c00000008000300", @ANYRES32=0x0], 0x1120}, 0x1, 0x0, 0x0, 0x800}, 0x800) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x3, 0x5, 0x0, 'queue1\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) 5.403508771s ago: executing program 2 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="020000000400000004000000020000"], 0x50) pwrite64(r0, 0x0, 0x0, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_io_uring_setup(0x4f41, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES8=r3], 0xa8}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r4, 0x708, 0x2) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) 3.041643764s ago: executing program 3 (id=293): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) socket$igmp6(0xa, 0x3, 0x2) keyctl$revoke(0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f00000002c0)) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xffff, 0x6, 0xff}, 0x3a, [0x8000, 0x0, 0x13, 0x4, 0x80, 0x2, 0x0, 0x10007c, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0x7, 0xffffff01, 0x6, 0x43, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5d, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x8c, 0x6, 0x8, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x1000, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x4bd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0xe00000, 0xac8, 0xc4, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x7, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x105, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x100, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x10000, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.406206654s ago: executing program 3 (id=294): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) socket$igmp6(0xa, 0x3, 0x2) keyctl$revoke(0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f00000002c0)) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xffff, 0x6, 0xff}, 0x3a, [0x8000, 0x0, 0x13, 0x4, 0x80, 0x2, 0x0, 0x10007c, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0x7, 0xffffff01, 0x6, 0x43, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5d, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x8c, 0x6, 0x8, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x1000, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x4bd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0xe00000, 0xac8, 0xc4, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x7, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x105, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x100, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x10000, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.155415332s ago: executing program 2 (id=295): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902241654030310000904140002a024260009050602ff0300000009058202"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001ac0)=ANY=[], 0x1440}, 0x1, 0x0, 0x0, 0x20008010}, 0xc001) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0xfc, r0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}}, 0x1) syz_usb_connect(0x0, 0x230, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0xa3, 0x4f, 0x1e, 0x20, 0x19d2, 0xffcc, 0x8b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21e, 0x1, 0x1, 0x5, 0x40, 0x8, "", [{{0x9, 0x4, 0x52, 0x2, 0xf, 0xff, 0xff, 0xff, 0x1, [@uac_as], [{{0x9, 0x5, 0x1, 0x3, 0x400, 0x9, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x800}]}}, {{0x9, 0x5, 0xe, 0xc, 0x24, 0x8, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1c, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xfff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x6, 0xf5, 0x7, [@generic={0x7, 0x7, "66a97e5942"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x401}]}}, {{0x9, 0x5, 0xa, 0x58ee493e5029cdaa, 0x3ff, 0x3, 0xf3, 0x5}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x8, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xdf, 0x3}, @generic={0xf, 0x4, "e90b3f779f0b42d92bc9e1193f"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x2, 0x6, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x2, 0x1, 0x1, [@generic={0x3, 0x6, '1'}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x54, 0x16}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0x6, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x1}, @generic={0x37, 0x21, "d29310e55101a28dde168d2a37195cf9e8b4a33b0ca37527711288f6029ba30372fb88ac51117868e1599f354eda525e14196ee86c"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x0, 0x7, 0x4, [@generic={0xc, 0xf, "1df60980e33b424534e1"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x1, 0x3, 0xff}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x4, 0xd, 0x23, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x5}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x5, 0x3, 0x4}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x58, 0x80, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe}, @generic={0xe3, 0x46121edc1a667303, "560d79afba8fad38c27208d5da93903b30d7893bf4df4897a05b99c14346c0cbb6bb892bc12bf237c6d09d172d320f24b3c3bf7b627ed98d29eb2a444961fae449374fbffd2a0473957d7949aa1fce5d0b06fefeaafb716be03516df76ef12f582af7a39c935c3c51cbe7a596cecb511e2524272b876eb2959862bf30ec7f9715a4396707fd5e666af6a56d278a58a2e49b978d49fa9ba536ce0250a5a2910f10fd0af4052122ef1e8b0af9da6faf7aef5a1c086ceba63ee091924736502635340f3b589de57ea9d49e3ed9d7b6ab73a65c6901ef77f60871464417af173ff0b12"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xff, 0x3, 0xa}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x4, 0x4, 0x7, 0x8, 0x6}, 0x19, &(0x7f0000000900)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e16f657af174d22696ee7e1a149f007a"}]}, 0x2, [{0x43, &(0x7f0000000940)=@string={0x43, 0x3, "0768e847919b61056fddb9c99e119e2d92dfdbaa5729cde9827eaa7d12ea7b7ab0b94884b52f46392956c79ea02a2f8c449f85666a13856e2de7a64c5efbcced72"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41c}}]}) 0s ago: executing program 3 (id=296): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 75.218520][ T5582] cgroup: Unknown subsys name 'net' [ 75.460584][ T5582] cgroup: Unknown subsys name 'cpuset' [ 75.534880][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.133909][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.341382][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.351907][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.359189][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.370120][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.370727][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.386686][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.387467][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.388841][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.389914][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.394625][ T4910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.400407][ T4910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.452163][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.456814][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.457268][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.479692][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.573549][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.584663][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.592977][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.600311][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.615191][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.619356][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.620100][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.623620][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.661710][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.662360][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.435371][ T5607] Bluetooth: hci1: command tx timeout [ 81.515308][ T5607] Bluetooth: hci2: command tx timeout [ 81.515325][ T5598] Bluetooth: hci0: command tx timeout [ 81.571330][ T9] cfg80211: failed to load regulatory.db [ 81.675515][ T5607] Bluetooth: hci3: command tx timeout [ 81.754775][ T5607] Bluetooth: hci4: command tx timeout [ 81.914631][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.914717][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.914817][ T5595] bridge_slave_0: entered allmulticast mode [ 81.916988][ T5595] bridge_slave_0: entered promiscuous mode [ 81.973278][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.973373][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.973506][ T5595] bridge_slave_1: entered allmulticast mode [ 81.977139][ T5595] bridge_slave_1: entered promiscuous mode [ 81.997685][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.998962][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.999104][ T5609] bridge_slave_0: entered allmulticast mode [ 82.001341][ T5609] bridge_slave_0: entered promiscuous mode [ 82.025955][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.026066][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.026208][ T5610] bridge_slave_0: entered allmulticast mode [ 82.031085][ T5610] bridge_slave_0: entered promiscuous mode [ 82.066871][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.066966][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.067057][ T5604] bridge_slave_0: entered allmulticast mode [ 82.068398][ T5604] bridge_slave_0: entered promiscuous mode [ 82.070351][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.070463][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.070607][ T5609] bridge_slave_1: entered allmulticast mode [ 82.072502][ T5609] bridge_slave_1: entered promiscuous mode [ 82.104482][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.104623][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.104767][ T5610] bridge_slave_1: entered allmulticast mode [ 82.107165][ T5610] bridge_slave_1: entered promiscuous mode [ 82.128606][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.128727][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.128864][ T5604] bridge_slave_1: entered allmulticast mode [ 82.132473][ T5604] bridge_slave_1: entered promiscuous mode [ 82.157206][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.157323][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.157775][ T5596] bridge_slave_0: entered allmulticast mode [ 82.162647][ T5596] bridge_slave_0: entered promiscuous mode [ 82.192328][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.235795][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.235909][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.237016][ T5596] bridge_slave_1: entered allmulticast mode [ 82.238328][ T5596] bridge_slave_1: entered promiscuous mode [ 82.258397][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.282519][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.306969][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.488932][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.491064][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.512472][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.530691][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.547703][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.563578][ T5595] team0: Port device team_slave_0 added [ 82.588210][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.607753][ T5595] team0: Port device team_slave_1 added [ 82.622632][ T5609] team0: Port device team_slave_0 added [ 82.641042][ T5610] team0: Port device team_slave_0 added [ 82.662353][ T5604] team0: Port device team_slave_0 added [ 82.666544][ T5609] team0: Port device team_slave_1 added [ 82.687198][ T5610] team0: Port device team_slave_1 added [ 82.702770][ T5604] team0: Port device team_slave_1 added [ 82.717262][ T5596] team0: Port device team_slave_0 added [ 82.736841][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.736850][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.736863][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.772480][ T5596] team0: Port device team_slave_1 added [ 82.794715][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.794729][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.794752][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.807743][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.807757][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.807780][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.831124][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.831137][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.831161][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.845563][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.845576][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.845600][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.849422][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.849435][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.849459][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.870129][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.870142][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.870165][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.891391][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.891420][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.891443][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.892818][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.892829][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.892852][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.923701][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.923716][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.923739][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.009849][ T5595] hsr_slave_0: entered promiscuous mode [ 83.011206][ T5595] hsr_slave_1: entered promiscuous mode [ 83.105811][ T5609] hsr_slave_0: entered promiscuous mode [ 83.107078][ T5609] hsr_slave_1: entered promiscuous mode [ 83.107963][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 83.108485][ T5609] Cannot create hsr debugfs directory [ 83.157777][ T5610] hsr_slave_0: entered promiscuous mode [ 83.159858][ T5610] hsr_slave_1: entered promiscuous mode [ 83.160727][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 83.160747][ T5610] Cannot create hsr debugfs directory [ 83.210125][ T5604] hsr_slave_0: entered promiscuous mode [ 83.211305][ T5604] hsr_slave_1: entered promiscuous mode [ 83.212111][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 83.212131][ T5604] Cannot create hsr debugfs directory [ 83.224824][ T5596] hsr_slave_0: entered promiscuous mode [ 83.225956][ T5596] hsr_slave_1: entered promiscuous mode [ 83.226889][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 83.226910][ T5596] Cannot create hsr debugfs directory [ 83.524392][ T5607] Bluetooth: hci1: command tx timeout [ 83.595227][ T5607] Bluetooth: hci0: command tx timeout [ 83.604603][ T5607] Bluetooth: hci2: command tx timeout [ 83.754872][ T5607] Bluetooth: hci3: command tx timeout [ 83.836035][ T5607] Bluetooth: hci4: command tx timeout [ 84.339344][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.378009][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.393253][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.421131][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.423064][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.467925][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.488537][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.507775][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.621590][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.649085][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.653322][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.678603][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.699462][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.737592][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.757095][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.777824][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.897216][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.928966][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.935325][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.968085][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.972286][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.990884][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.026736][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.068078][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.193954][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.232599][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.244087][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.287568][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.291145][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.340543][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.366026][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.397071][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.488421][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.542898][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.567641][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.570941][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.594464][ T5607] Bluetooth: hci1: command tx timeout [ 85.617499][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.631887][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.660517][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.672175][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.684760][ T5598] Bluetooth: hci0: command tx timeout [ 85.684855][ T5607] Bluetooth: hci2: command tx timeout [ 85.705852][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.732112][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.767035][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.779238][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.779857][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.821224][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.822232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.834613][ T5607] Bluetooth: hci3: command tx timeout [ 85.907261][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.914963][ T5607] Bluetooth: hci4: command tx timeout [ 85.943131][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.958087][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.958205][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.000079][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.003726][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.069014][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.113119][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.113249][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.156453][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.168413][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.168532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.308187][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.339372][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.383799][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.383953][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.439689][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.439870][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.538375][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.598106][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.598300][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.643209][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.643413][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.302116][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.675299][ T5607] Bluetooth: hci1: command tx timeout [ 87.738098][ T5595] veth0_vlan: entered promiscuous mode [ 87.755969][ T5607] Bluetooth: hci2: command tx timeout [ 87.755997][ T5607] Bluetooth: hci0: command tx timeout [ 87.819688][ T5595] veth1_vlan: entered promiscuous mode [ 87.838807][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.875644][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.914629][ T5598] Bluetooth: hci3: command tx timeout [ 87.994525][ T5598] Bluetooth: hci4: command tx timeout [ 88.020305][ T5595] veth0_macvtap: entered promiscuous mode [ 88.103389][ T5595] veth1_macvtap: entered promiscuous mode [ 88.125471][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.139908][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.141192][ T5610] veth0_vlan: entered promiscuous mode [ 88.190567][ T5604] veth0_vlan: entered promiscuous mode [ 88.217386][ T5610] veth1_vlan: entered promiscuous mode [ 88.233260][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.260601][ T5604] veth1_vlan: entered promiscuous mode [ 88.281951][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.332860][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.346657][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.351978][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.379706][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.533864][ T5596] veth0_vlan: entered promiscuous mode [ 88.544187][ T5610] veth0_macvtap: entered promiscuous mode [ 88.669438][ T5604] veth0_macvtap: entered promiscuous mode [ 88.691994][ T5610] veth1_macvtap: entered promiscuous mode [ 88.726067][ T5596] veth1_vlan: entered promiscuous mode [ 88.731389][ T5604] veth1_macvtap: entered promiscuous mode [ 88.806734][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.806757][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.837060][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.886912][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.889556][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.928580][ T5609] veth0_vlan: entered promiscuous mode [ 88.933115][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.947450][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.967485][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.967501][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.969582][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.999562][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.022359][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.051070][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.058966][ T5596] veth0_macvtap: entered promiscuous mode [ 89.106963][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.107675][ T5609] veth1_vlan: entered promiscuous mode [ 89.130326][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.134156][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.139050][ T5596] veth1_macvtap: entered promiscuous mode [ 89.712794][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.767759][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.767777][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.775570][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.872491][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903466][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.904043][ T5609] veth0_macvtap: entered promiscuous mode [ 89.930496][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.930514][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.930760][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.961758][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.987804][ T5609] veth1_macvtap: entered promiscuous mode [ 90.894719][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.894739][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.342472][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.388997][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.389016][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.466822][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.562708][ T1172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.618370][ T1172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.619534][ T1172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.619865][ T1172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.698284][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.698303][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.389079][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.389092][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.706616][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.706635][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.936102][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.936119][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.913884][ T5868] tipc: Started in network mode [ 107.913910][ T5868] tipc: Node identity 4, cluster identity 4711 [ 107.913921][ T5868] tipc: Node number set to 4 [ 108.797935][ T5871] Zero length message leads to an empty skb [ 109.181107][ T37] audit: type=1804 audit(1777793648.385:2): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.19" name="/newroot/2/file0" dev="tmpfs" ino=29 res=1 errno=0 [ 109.767034][ T5886] netlink: 'syz.1.23': attribute type 10 has an invalid length. [ 109.767189][ T5886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23'. [ 109.770102][ T5886] team0: entered promiscuous mode [ 109.770163][ T5886] team_slave_0: entered promiscuous mode [ 109.773332][ T5886] team_slave_1: entered promiscuous mode [ 109.776427][ T5886] team0: entered allmulticast mode [ 109.776466][ T5886] team_slave_0: entered allmulticast mode [ 109.776637][ T5886] team_slave_1: entered allmulticast mode [ 109.790507][ T5886] bridge0: port 3(team0) entered blocking state [ 109.791494][ T5886] bridge0: port 3(team0) entered disabled state [ 109.840425][ T5886] bridge0: port 3(team0) entered blocking state [ 109.841353][ T5886] bridge0: port 3(team0) entered forwarding state [ 113.421811][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.459738][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.460815][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.468452][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.472312][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.651932][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.546432][ T5598] Bluetooth: hci5: command tx timeout [ 115.560499][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 115.560623][ T5919] openvswitch: netlink: Unknown nsh attribute 0 [ 117.614261][ T5598] Bluetooth: hci5: command tx timeout [ 117.917311][ T5598] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 117.917467][ T5598] Bluetooth: hci1: Injecting HCI hardware error event [ 117.920012][ T5598] Bluetooth: hci1: hardware error 0x00 [ 119.474335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.494350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.504343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.514338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.524340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.675920][ T5607] Bluetooth: hci5: command tx timeout [ 120.435135][ T5939] netlink: 'syz.2.35': attribute type 10 has an invalid length. [ 120.435156][ T5939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.35'. [ 121.276854][ T5598] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 121.314329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.657233][ T5939] team0: entered promiscuous mode [ 121.657254][ T5939] team_slave_0: entered promiscuous mode [ 121.657458][ T5939] team_slave_1: entered promiscuous mode [ 121.657648][ T5939] team0: entered allmulticast mode [ 121.657660][ T5939] team_slave_0: entered allmulticast mode [ 121.657680][ T5939] team_slave_1: entered allmulticast mode [ 121.658915][ T5939] bridge0: port 3(team0) entered blocking state [ 121.658978][ T5939] bridge0: port 3(team0) entered disabled state [ 121.661133][ T5939] bridge0: port 3(team0) entered blocking state [ 121.661201][ T5939] bridge0: port 3(team0) entered forwarding state [ 122.105385][ T5598] Bluetooth: hci5: command tx timeout [ 124.113157][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.187199][ T5963] netlink: 136 bytes leftover after parsing attributes in process `syz.1.38'. [ 124.602744][ T5952] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.602863][ T5952] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.844198][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 124.844338][ T5971] openvswitch: netlink: Unknown nsh attribute 0 [ 125.612597][ T5952] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.702914][ T5952] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.703007][ T5952] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.768899][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.404506][ T5598] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.667035][ T5952] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.982647][ T5952] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.982816][ T5952] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 127.216383][ T5952] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 127.556376][ T5952] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 127.558258][ T5952] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 127.847622][ T5983] ======================================================= [ 127.847622][ T5983] WARNING: The mand mount option has been deprecated and [ 127.847622][ T5983] and is ignored by this kernel. Remove the mand [ 127.847622][ T5983] option from the mount to silence this warning. [ 127.847622][ T5983] ======================================================= [ 127.885657][ T5598] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.549796][ T5598] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.394203][ T5598] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.594498][ T5598] Bluetooth: hci5: command 0x0c1a tx timeout [ 129.611908][ T5952] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 129.686339][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.968066][ T5987] netlink: 'syz.1.48': attribute type 10 has an invalid length. [ 129.968085][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.48'. [ 129.995458][ T5598] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.560696][ T5598] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.993511][ T5598] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.993548][ T5598] Bluetooth: hci5: command 0x0c1a tx timeout [ 132.074987][ T5598] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.613863][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.781779][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781871][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930056][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 132.930083][ T6015] openvswitch: netlink: Unknown nsh attribute 0 [ 133.544328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.810939][ T37] audit: type=1804 audit(1777793673.025:3): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.56" name="/newroot/10/file0" dev="tmpfs" ino=72 res=1 errno=0 [ 134.074426][ T5607] Bluetooth: hci5: command 0x0c1a tx timeout [ 134.074458][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.664326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.346677][ T37] audit: type=1804 audit(1777793675.575:4): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.58" name="/newroot/15/file0" dev="tmpfs" ino=95 res=1 errno=0 [ 137.311196][ T6038] mmap: syz.3.59 (6038) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.888517][ T12] bridge_slave_1: left allmulticast mode [ 140.888669][ T12] bridge_slave_1: left promiscuous mode [ 140.947103][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.397831][ T12] bridge_slave_0: left allmulticast mode [ 141.397864][ T12] bridge_slave_0: left promiscuous mode [ 141.398094][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.069480][ T6077] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 144.010028][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 144.010047][ T6082] openvswitch: netlink: Unknown nsh attribute 0 [ 144.533631][ T5598] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 145.458097][ T5598] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 146.775730][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.714708][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.759331][ T12] bond0 (unregistering): Released all slaves [ 148.927120][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 149.544765][ T5598] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 149.591438][ T5598] Bluetooth: hci3: Injecting HCI hardware error event [ 149.700838][ T5607] Bluetooth: hci3: hardware error 0x00 [ 150.467635][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 150.467766][ T6130] openvswitch: netlink: Unknown nsh attribute 0 [ 151.914444][ T5607] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 158.777920][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 160.705242][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.705356][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.705570][ T5891] bridge_slave_0: entered allmulticast mode [ 160.717462][ T5891] bridge_slave_0: entered promiscuous mode [ 161.394334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.523256][ T5714] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 162.662989][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.663048][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.663067][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 162.696647][ T5714] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 162.696674][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 162.696691][ T5714] usb 5-1: Product: syz [ 162.696704][ T5714] usb 5-1: Manufacturer: syz [ 162.696717][ T5714] usb 5-1: SerialNumber: syz [ 162.826272][ T5714] usb 5-1: config 0 descriptor?? [ 162.981599][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.981702][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.981897][ T5891] bridge_slave_1: entered allmulticast mode [ 163.031981][ T5891] bridge_slave_1: entered promiscuous mode [ 163.058590][ T5714] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 163.058671][ T5714] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 163.058953][ T5714] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 163.484915][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 163.748771][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.219372][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.219397][ T9] usb 3-1: config 0 has no interfaces? [ 164.222117][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 164.222132][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.222142][ T9] usb 3-1: Product: syz [ 164.222149][ T9] usb 3-1: Manufacturer: syz [ 164.222156][ T9] usb 3-1: SerialNumber: syz [ 164.268021][ T9] usb 3-1: config 0 descriptor?? [ 164.298718][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.507159][ T9] usb 3-1: USB disconnect, device number 2 [ 164.614538][ T12] hsr_slave_0: left promiscuous mode [ 164.651800][ T12] hsr_slave_1: left promiscuous mode [ 164.692200][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.692255][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.744251][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.744269][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.066808][ T12] veth1_macvtap: left promiscuous mode [ 165.066989][ T12] veth0_macvtap: left promiscuous mode [ 165.126979][ T12] veth1_vlan: left promiscuous mode [ 165.159129][ T12] veth0_vlan: left promiscuous mode [ 166.660275][ T9] usb 5-1: USB disconnect, device number 2 [ 166.886895][ T6223] netlink: 'syz.1.100': attribute type 10 has an invalid length. [ 166.886915][ T6223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.100'. [ 172.237885][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.240595][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.242799][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.305155][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.305861][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.663660][ T6258] sctp: [Deprecated]: syz.2.112 (pid 6258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.663660][ T6258] Use struct sctp_sack_info instead [ 174.404417][ T5607] Bluetooth: hci0: command tx timeout [ 174.921458][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.600628][ T12] team0 (unregistering): Port device team_slave_0 removed [ 177.374338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 177.418334][ T5607] Bluetooth: hci0: command tx timeout [ 179.110990][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 179.576465][ T5607] Bluetooth: hci0: command tx timeout [ 179.947151][ T6302] warning: `syz.4.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.594931][ T5607] Bluetooth: hci0: command tx timeout [ 183.821561][ T5598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.880113][ T5598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.906358][ T5598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.956741][ T5598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.982051][ T5598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.993913][ T5598] Bluetooth: hci6: command tx timeout [ 189.035021][ T5598] Bluetooth: hci6: command tx timeout [ 190.015943][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 191.234283][ T5598] Bluetooth: hci6: command tx timeout [ 193.366956][ T5598] Bluetooth: hci6: command tx timeout [ 194.631287][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.631355][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.112421][ T5764] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 199.957527][ T5764] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.957573][ T5764] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.957591][ T5764] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 200.241864][ T5764] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 200.241892][ T5764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 200.241910][ T5764] usb 5-1: Product: syz [ 200.241923][ T5764] usb 5-1: Manufacturer: syz [ 200.241935][ T5764] usb 5-1: SerialNumber: syz [ 200.259404][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.438511][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.145'. [ 200.444173][ T5764] usb 5-1: config 0 descriptor?? [ 200.456504][ T5598] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 200.490641][ T5764] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 200.490707][ T5764] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 200.491104][ T5764] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 202.459429][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.352908][ T4922] usb 5-1: USB disconnect, device number 3 [ 203.794424][ T5727] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 203.944512][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 203.946624][ T5727] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.946647][ T5727] usb 4-1: config 0 has no interfaces? [ 203.976856][ T5727] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 203.976883][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.976902][ T5727] usb 4-1: Product: syz [ 203.976915][ T5727] usb 4-1: Manufacturer: syz [ 203.976928][ T5727] usb 4-1: SerialNumber: syz [ 204.039089][ T5727] usb 4-1: config 0 descriptor?? [ 204.267620][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.268302][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.291732][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.292300][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.474544][ T5598] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 204.474824][ T5598] Bluetooth: hci2: Injecting HCI hardware error event [ 204.477332][ T5607] Bluetooth: hci2: hardware error 0x00 [ 206.554402][ T5607] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 206.770081][ T5764] usb 4-1: USB disconnect, device number 2 [ 207.064549][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.079086][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.159557][ T37] audit: type=1804 audit(1777793749.395:5): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.161" name="/newroot/44/file0" dev="tmpfs" ino=250 res=1 errno=0 [ 214.537334][ T6548] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.170'. [ 218.470833][ T37] audit: type=1800 audit(1777793756.065:6): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.173" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 222.972631][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.972770][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.972960][ T6263] bridge_slave_0: entered allmulticast mode [ 223.002823][ T6263] bridge_slave_0: entered promiscuous mode [ 223.051005][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.051211][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.051387][ T6263] bridge_slave_1: entered allmulticast mode [ 223.084026][ T6263] bridge_slave_1: entered promiscuous mode [ 224.326212][ T37] audit: type=1804 audit(1777793763.525:7): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.177" name="/newroot/41/file0" dev="tmpfs" ino=228 res=1 errno=0 [ 225.768718][ T6618] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.180'. [ 225.782665][ T37] audit: type=1800 audit(1777793765.015:8): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.181" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 229.778779][ T12] bridge0: port 3(team0) entered disabled state [ 230.310063][ T12] bridge_slave_1: left allmulticast mode [ 230.310982][ T12] bridge_slave_1: left promiscuous mode [ 230.362293][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.950342][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.973751][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.012609][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.021454][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.022780][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.111568][ T12] bridge_slave_0: left allmulticast mode [ 231.111601][ T12] bridge_slave_0: left promiscuous mode [ 231.111830][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.314932][ T12] bridge_slave_1: left allmulticast mode [ 231.314965][ T12] bridge_slave_1: left promiscuous mode [ 231.315331][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.364350][ T6639] sctp: [Deprecated]: syz.4.186 (pid 6639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.364350][ T6639] Use struct sctp_sack_info instead [ 231.391530][ T12] bridge_slave_0: left allmulticast mode [ 231.391550][ T12] bridge_slave_0: left promiscuous mode [ 231.391691][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.484401][ T1004] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 231.635775][ T1004] usb 3-1: Using ep0 maxpacket: 16 [ 231.640020][ T1004] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.640048][ T1004] usb 3-1: config 0 has no interfaces? [ 231.642325][ T1004] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 231.642350][ T1004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.642368][ T1004] usb 3-1: Product: syz [ 231.642381][ T1004] usb 3-1: Manufacturer: syz [ 231.642393][ T1004] usb 3-1: SerialNumber: syz [ 231.653501][ T1004] usb 3-1: config 0 descriptor?? [ 231.927252][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.930936][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.941782][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.942299][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.778693][ T1004] IPVS: starting estimator thread 0... [ 232.939219][ T6656] IPVS: using max 9 ests per chain, 21600 per kthread [ 233.137283][ T5607] Bluetooth: hci4: command tx timeout [ 233.845114][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.904915][ T5764] usb 3-1: USB disconnect, device number 3 [ 234.924629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.950932][ T12] bond0 (unregistering): Released all slaves [ 234.957916][ T6670] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.193'. [ 235.194775][ T5607] Bluetooth: hci4: command tx timeout [ 237.272000][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.274433][ T5607] Bluetooth: hci4: command tx timeout [ 237.346824][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.483922][ T12] bond0 (unregistering): Released all slaves [ 238.149822][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.755532][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.755651][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.755852][ T6333] bridge_slave_0: entered allmulticast mode [ 238.801158][ T6333] bridge_slave_0: entered promiscuous mode [ 238.814211][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.818248][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.865993][ T6333] bridge_slave_1: entered allmulticast mode [ 238.903427][ T6333] bridge_slave_1: entered promiscuous mode [ 239.100706][ T12] tipc: Left network mode [ 239.182088][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.187464][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.354553][ T5607] Bluetooth: hci4: command tx timeout [ 242.719021][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.758488][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.760711][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.774589][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.779800][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.629105][ T6740] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.203'. [ 244.990530][ T5607] Bluetooth: hci0: command tx timeout [ 247.038142][ T5607] Bluetooth: hci0: command tx timeout [ 248.519866][ T6757] sctp: [Deprecated]: syz.4.207 (pid 6757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.519866][ T6757] Use struct sctp_sack_info instead [ 249.115108][ T5607] Bluetooth: hci0: command tx timeout [ 250.141431][ T37] audit: type=1804 audit(1777793789.375:9): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.210" name="/newroot/63/file0" dev="tmpfs" ino=350 res=1 errno=0 [ 250.251287][ T12] hsr_slave_0: left promiscuous mode [ 250.323287][ T12] hsr_slave_1: left promiscuous mode [ 250.334650][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.334675][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.379803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.379827][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.951853][ T12] veth1_macvtap: left promiscuous mode [ 250.951943][ T12] veth0_macvtap: left promiscuous mode [ 250.982975][ T12] veth1_vlan: left promiscuous mode [ 250.983145][ T12] veth0_vlan: left promiscuous mode [ 251.195002][ T5607] Bluetooth: hci0: command tx timeout [ 255.613675][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.616443][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.058409][ T12] team_slave_1 (unregistering): left promiscuous mode [ 258.058430][ T12] team_slave_1 (unregistering): left allmulticast mode [ 258.084928][ T12] team0 (unregistering): Port device team_slave_1 removed [ 258.096765][ T12] team_slave_0 (unregistering): left promiscuous mode [ 258.096783][ T12] team_slave_0 (unregistering): left allmulticast mode [ 258.147355][ T12] team0 (unregistering): Port device team_slave_0 removed [ 258.623871][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 263.884787][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.884853][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.884976][ T6640] bridge_slave_0: entered allmulticast mode [ 263.886365][ T6640] bridge_slave_0: entered promiscuous mode [ 263.951521][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.951586][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.951706][ T6640] bridge_slave_1: entered allmulticast mode [ 263.953198][ T6640] bridge_slave_1: entered promiscuous mode [ 264.132446][ T6877] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.134432][ T6877] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 264.147600][ T37] audit: type=1804 audit(1777793803.375:10): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.230" name="/newroot/72/file0" dev="tmpfs" ino=397 res=1 errno=0 [ 264.177011][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 264.251960][ T6877] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 264.310135][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.311258][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.311436][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.311615][ T6714] bridge_slave_0: entered allmulticast mode [ 264.322570][ T6714] bridge_slave_0: entered promiscuous mode [ 264.522790][ T6877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 264.522998][ T6877] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 265.099649][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.192579][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.231839][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.232679][ T6714] bridge_slave_1: entered allmulticast mode [ 265.364875][ T6714] bridge_slave_1: entered promiscuous mode [ 265.532978][ T6877] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 265.633920][ T6893] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.232'. [ 266.158391][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.560686][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 266.683254][ T6640] team0: Port device team_slave_0 added [ 266.742522][ T6640] team0: Port device team_slave_1 added [ 266.772032][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.871267][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.315396][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.644404][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 268.652995][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.653005][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.653017][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.720725][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.720735][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.720748][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.785533][ T6714] team0: Port device team_slave_0 added [ 268.896556][ T6714] team0: Port device team_slave_1 added [ 269.056123][ T6640] hsr_slave_0: entered promiscuous mode [ 269.075640][ T6640] hsr_slave_1: entered promiscuous mode [ 269.429141][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.429151][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.429164][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.383010][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.383025][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.383048][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.477030][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.720646][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 271.809927][ T6935] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.241'. [ 271.810110][ T12] bridge_slave_1: left allmulticast mode [ 271.810138][ T12] bridge_slave_1: left promiscuous mode [ 271.810352][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.888546][ T12] bridge_slave_0: left allmulticast mode [ 271.888591][ T12] bridge_slave_0: left promiscuous mode [ 271.890643][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.826116][ T12] bridge_slave_1: left allmulticast mode [ 272.826149][ T12] bridge_slave_1: left promiscuous mode [ 272.826366][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.906764][ T12] bridge_slave_0: left allmulticast mode [ 272.906793][ T12] bridge_slave_0: left promiscuous mode [ 272.907017][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.564894][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.645603][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.695732][ T12] bond0 (unregistering): Released all slaves [ 273.845888][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.905673][ T12] bond0 (unregistering): Released all slaves [ 273.939709][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 273.974785][ T6934] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.974946][ T6934] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.160494][ T6714] hsr_slave_0: entered promiscuous mode [ 274.161672][ T6714] hsr_slave_1: entered promiscuous mode [ 274.187693][ T6714] debugfs: 'hsr0' already exists in 'hsr' [ 274.187717][ T6714] Cannot create hsr debugfs directory [ 274.497641][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 274.497833][ T5781] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 274.722040][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 274.778190][ T5781] usb 3-1: Using ep0 maxpacket: 16 [ 274.917365][ T31] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.917430][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 274.917501][ T31] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 274.917522][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.237171][ T5781] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.237235][ T5781] usb 3-1: config 0 has no interfaces? [ 275.368374][ T5781] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 275.368443][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.368463][ T5781] usb 3-1: Product: syz [ 275.368476][ T5781] usb 3-1: Manufacturer: syz [ 275.368489][ T5781] usb 3-1: SerialNumber: syz [ 275.994518][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.011401][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 276.544866][ T31] usb 5-1: config 0 descriptor?? [ 276.636522][ T5781] usb 3-1: config 0 descriptor?? [ 277.219145][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.255476][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.319938][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.354096][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.186547][ T4922] usb 3-1: USB disconnect, device number 4 [ 281.682185][ T31] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 281.682225][ T31] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 281.682253][ T31] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 281.682279][ T31] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 281.682305][ T31] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 281.915296][ T6963] netlink: 136 bytes leftover after parsing attributes in process `syz.3.247'. [ 281.944586][ T31] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 284.586070][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 284.586132][ T6984] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 285.658406][ T31] usb 5-1: USB disconnect, device number 4 [ 286.578029][ T6958] syz.4.245 (6958) used greatest stack depth: 18624 bytes left [ 286.696110][ T6995] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.252'. [ 289.469867][ T5256] 8021q: adding VLAN 0 to HW filter on device eth8 [ 289.694367][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.732482][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.748330][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.764861][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.765784][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.927876][ T37] audit: type=1804 audit(1777793829.175:11): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.255" name="/newroot/80/file0" dev="tmpfs" ino=434 res=1 errno=0 [ 292.753009][ T5607] Bluetooth: hci3: command tx timeout [ 293.071522][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.126969][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.142971][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.159414][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.167682][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.817984][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 293.818052][ T7038] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 294.794436][ T5607] Bluetooth: hci3: command tx timeout [ 295.435661][ T5607] Bluetooth: hci5: command tx timeout [ 296.496847][ T7059] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.261'. [ 296.874551][ T5607] Bluetooth: hci3: command tx timeout [ 297.514431][ T5607] Bluetooth: hci5: command tx timeout [ 298.954483][ T5607] Bluetooth: hci3: command tx timeout [ 299.488216][ T6714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 299.524061][ T6714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.549793][ T6714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 299.604650][ T5607] Bluetooth: hci5: command tx timeout [ 299.645367][ T6714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.712172][ T6714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 299.785865][ T6714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.859387][ T6714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.340414][ T6714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.674970][ T5607] Bluetooth: hci5: command tx timeout [ 302.667004][ T6714] kthread_run failed with err -4 [ 302.758497][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.761443][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.776198][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.777233][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.777947][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.797533][ T5598] Bluetooth: hci4: command tx timeout [ 305.166957][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 305.167059][ T7099] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 306.563368][ T37] audit: type=1804 audit(1777793845.725:12): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.268" name="/newroot/86/file0" dev="tmpfs" ino=465 res=1 errno=0 [ 306.884756][ T5598] Bluetooth: hci4: command tx timeout [ 307.053135][ T7104] uprobe: syz.2.268:7104 failed to unregister, leaking uprobe [ 307.425459][ T37] audit: type=1804 audit(1777793846.645:13): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.266" name="/newroot/69/file0" dev="tmpfs" ino=377 res=1 errno=0 [ 308.954531][ T5598] Bluetooth: hci4: command tx timeout [ 310.471403][ T7127] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.269'. [ 311.034603][ T5598] Bluetooth: hci4: command tx timeout [ 312.247560][ T37] audit: type=1804 audit(1777793851.485:14): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.270" name="/newroot/70/file0" dev="tmpfs" ino=383 res=1 errno=0 [ 317.043407][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.043472][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.566579][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 317.566639][ T7169] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 319.523851][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.605122][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.605499][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.606226][ T7009] bridge_slave_0: entered allmulticast mode [ 320.616928][ T7009] bridge_slave_0: entered promiscuous mode [ 320.705493][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.705607][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.705780][ T7009] bridge_slave_1: entered allmulticast mode [ 320.707160][ T7009] bridge_slave_1: entered promiscuous mode [ 321.092052][ T7197] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.278'. [ 321.104558][ T7192] sctp: [Deprecated]: syz.2.277 (pid 7192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.104558][ T7192] Use struct sctp_sack_info instead [ 322.867175][ T37] audit: type=1804 audit(1777793862.105:15): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.279" name="/newroot/92/file0" dev="tmpfs" ino=498 res=1 errno=0 [ 323.414102][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.289300][ T7211] tipc: Started in network mode [ 324.289370][ T7211] tipc: Node identity 4, cluster identity 4711 [ 324.289383][ T7211] tipc: Node number set to 4 [ 324.514700][ T7214] fuse: Unknown parameter 'grou00000000000000000000' [ 324.971168][ T7009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.138914][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.139028][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.139218][ T7021] bridge_slave_0: entered allmulticast mode [ 325.141739][ T7021] bridge_slave_0: entered promiscuous mode [ 325.176676][ T7009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.221737][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.221849][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.222008][ T7021] bridge_slave_1: entered allmulticast mode [ 325.225689][ T7021] bridge_slave_1: entered promiscuous mode [ 328.462075][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'. [ 328.462135][ T7227] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 329.286010][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.010571][ T7009] team0: Port device team_slave_0 added [ 332.775989][ T7021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.787366][ T7009] team0: Port device team_slave_1 added [ 334.033291][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.179761][ T7021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.275834][ T7257] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.288'. [ 337.257675][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.257690][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.257713][ T7009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.770463][ T7274] fuse: Unknown parameter 'grou00000000000000000000' [ 338.590938][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.590953][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.590977][ T7009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.630382][ T7021] team0: Port device team_slave_0 added [ 338.683073][ T7021] team0: Port device team_slave_1 added [ 338.904525][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.904540][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.904563][ T7021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.136964][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.136974][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.136987][ T7021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.193976][ T7009] hsr_slave_0: entered promiscuous mode [ 339.202300][ T7009] hsr_slave_1: entered promiscuous mode [ 339.203232][ T7009] debugfs: 'hsr0' already exists in 'hsr' [ 339.203255][ T7009] Cannot create hsr debugfs directory [ 339.991192][ T7021] hsr_slave_0: entered promiscuous mode [ 340.000540][ T7021] hsr_slave_1: entered promiscuous mode [ 340.001075][ T7021] debugfs: 'hsr0' already exists in 'hsr' [ 340.001090][ T7021] Cannot create hsr debugfs directory [ 340.001293][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.001433][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.001536][ T7079] bridge_slave_0: entered allmulticast mode [ 340.017199][ T7079] bridge_slave_0: entered promiscuous mode [ 340.053686][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.053768][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.053869][ T7079] bridge_slave_1: entered allmulticast mode [ 340.061681][ T7079] bridge_slave_1: entered promiscuous mode [ 340.453117][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 340.453186][ T7295] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 341.325790][ T12] bridge_slave_1: left allmulticast mode [ 341.326988][ T12] bridge_slave_1: left promiscuous mode [ 341.327266][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.058369][ T12] bridge_slave_0: left allmulticast mode [ 342.058719][ T12] bridge_slave_0: left promiscuous mode [ 342.120126][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.514591][ T819] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 343.609584][ T12] bridge_slave_1: left allmulticast mode [ 343.609645][ T12] bridge_slave_1: left promiscuous mode [ 343.610642][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.762916][ T819] usb 3-1: config index 0 descriptor too short (expected 5668, got 36) [ 343.762997][ T819] usb 3-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 343.763053][ T819] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 343.763109][ T819] usb 3-1: config 3 has no interface number 0 [ 343.763443][ T819] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 343.763510][ T819] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 343.963348][ T819] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 343.963376][ T819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.963432][ T819] usb 3-1: Product: syz [ 343.963483][ T819] usb 3-1: Manufacturer: syz [ 343.963498][ T819] usb 3-1: SerialNumber: syz [ 343.967145][ T12] bridge_slave_0: left allmulticast mode [ 343.967209][ T12] bridge_slave_0: left promiscuous mode [ 343.976653][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.163115][ T7312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.385952][ T7312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.390472][ T7312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.396454][ T819] usb-storage 3-1:3.20: USB Mass Storage device detected [ 344.436423][ T5781] 1024-page vmalloc region starting at 0xffffc9001262f000 allocated at kcov_ioctl+0x58/0x640 [ 344.436478][ T5781] list_del corruption. next->prev should be ffffc9001b64c000, but was 0000000000000000. (next=ffffc9001262f000) [ 344.436952][ T5781] ------------[ cut here ]------------ [ 344.436961][ T5781] kernel BUG at lib/list_debug.c:67! [ 344.437009][ T5781] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 344.437042][ T5781] CPU: 1 UID: 0 PID: 5781 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 344.437062][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.437073][ T5781] Workqueue: usb_hub_wq hub_event [ 344.437096][ T5781] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 344.437134][ T5781] Code: dc 95 5f fd 43 80 3c 2c 00 74 08 4c 89 ff e8 1d a3 7f fd 49 8b 56 08 48 c7 c7 a0 52 a7 8b 48 89 de 4c 89 f1 e8 77 7c 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 344.437149][ T5781] RSP: 0018:ffffc90005927798 EFLAGS: 00010246 [ 344.437162][ T5781] RAX: 000000000000006d RBX: ffffc9001b64c000 RCX: e103003f2638cc00 [ 344.437176][ T5781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.437186][ T5781] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 344.437196][ T5781] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff920024c5e01 [ 344.437210][ T5781] R13: dffffc0000000000 R14: ffffc9001262f000 R15: ffffc9001262f008 [ 344.437223][ T5781] FS: 0000000000000000(0000) GS:ffff888126279000(0000) knlGS:0000000000000000 [ 344.437237][ T5781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.437248][ T5781] CR2: 00007fff174cbb28 CR3: 0000000038488000 CR4: 00000000003526f0 [ 344.437263][ T5781] Call Trace: [ 344.437269][ T5781] [ 344.437277][ T5781] kcov_remote_start+0x2af/0x710 [ 344.437300][ T5781] hub_event+0x150/0x4f60 [ 344.437321][ T5781] ? __lock_acquire+0x6b5/0x2cf0 [ 344.437343][ T5781] ? look_up_lock_class+0x57/0x110 [ 344.437363][ T5781] ? __lock_acquire+0x6b5/0x2cf0 [ 344.437389][ T5781] ? lock_acquire+0x106/0x350 [ 344.437411][ T5781] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.437432][ T5781] ? __pfx_hub_event+0x10/0x10 [ 344.437448][ T5781] ? process_scheduled_works+0xa70/0x1860 [ 344.437469][ T5781] ? process_scheduled_works+0xa70/0x1860 [ 344.437486][ T5781] ? process_scheduled_works+0xa70/0x1860 [ 344.437504][ T5781] process_scheduled_works+0xb5d/0x1860 [ 344.437531][ T5781] ? __pfx_process_scheduled_works+0x10/0x10 [ 344.437550][ T5781] ? assign_work+0x3d5/0x5e0 [ 344.437568][ T5781] worker_thread+0xa53/0xfc0 [ 344.437596][ T5781] kthread+0x388/0x470 [ 344.437620][ T5781] ? __pfx_worker_thread+0x10/0x10 [ 344.437639][ T5781] ? __pfx_kthread+0x10/0x10 [ 344.437663][ T5781] ret_from_fork+0x514/0xb70 [ 344.437683][ T5781] ? __pfx_ret_from_fork+0x10/0x10 [ 344.437701][ T5781] ? __switch_to+0xc79/0x1410 [ 344.437728][ T5781] ? __pfx_kthread+0x10/0x10 [ 344.437749][ T5781] ret_from_fork_asm+0x1a/0x30 [ 344.437775][ T5781] [ 344.437781][ T5781] Modules linked in: [ 344.437800][ T5781] ---[ end trace 0000000000000000 ]--- [ 344.437813][ T5781] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 344.437842][ T5781] Code: dc 95 5f fd 43 80 3c 2c 00 74 08 4c 89 ff e8 1d a3 7f fd 49 8b 56 08 48 c7 c7 a0 52 a7 8b 48 89 de 4c 89 f1 e8 77 7c 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 344.437857][ T5781] RSP: 0018:ffffc90005927798 EFLAGS: 00010246 [ 344.437870][ T5781] RAX: 000000000000006d RBX: ffffc9001b64c000 RCX: e103003f2638cc00 [ 344.437884][ T5781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.437894][ T5781] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 344.437906][ T5781] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff920024c5e01 [ 344.437919][ T5781] R13: dffffc0000000000 R14: ffffc9001262f000 R15: ffffc9001262f008 [ 344.437933][ T5781] FS: 0000000000000000(0000) GS:ffff888126279000(0000) knlGS:0000000000000000 [ 344.437948][ T5781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.437960][ T5781] CR2: 00007fff174cbb28 CR3: 0000000038488000 CR4: 00000000003526f0 [ 344.437977][ T5781] Kernel panic - not syncing: Fatal exception [ 344.438328][ T5781] Kernel Offset: disabled