last executing test programs: 18.631427848s ago: executing program 3 (id=74): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000600)='9', 0x1, 0x12) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) signalfd4(r1, &(0x7f0000000280)={[0x5]}, 0x8, 0x80800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000"], 0x11c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x20000810) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x248, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x358, 0x3a8, 0x3a8, 0x358, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x33, 0xfd, 0x0, 0x19}, 0x0, 0x200, 0x220, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x103, 0x26, 0x871004, 0x5, 0x80007, 0x3, 0x0, 0x18, 0xe0}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0xff, 0x4, 0x104, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 15.685786008s ago: executing program 1 (id=80): r0 = gettid() migrate_pages(r0, 0x3, &(0x7f0000000100)=0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_dump={0x47, 0x1ff, 0x7}}) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 14.30657846s ago: executing program 1 (id=83): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') close_range(0xffffffffffffffff, r1, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) setgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r5) r6 = memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8\x85\xa5\xf4r\xd8\xe5!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6V_\xe5b\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xd4\xb5\f\xf0\xee\x92^\x1a\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS\x00'/125, 0x0) write(r6, &(0x7f0000000380)="69672505bde5d1853a384e3deec6fcb4391f745de504000000feffffff7090ba2b6d59c8958d6f1500000000c4677b000900ffffffffffffff200000f8bf54da331979df33226e02beb8bfb7cdb52558975e1e63c58d102c0c", 0x59) 14.205394023s ago: executing program 3 (id=84): socket$nl_netfilter(0x10, 0x3, 0xc) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f0000000340)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000500)=""/182, &(0x7f00000005c0)=0xb6) 13.988467738s ago: executing program 4 (id=85): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x300040c0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3e1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x39, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x2, 0x2ed, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x29}}}, 0xfffffffffffffffe) 13.138347488s ago: executing program 3 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3, 0x4}, 0x38) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 13.088185909s ago: executing program 2 (id=88): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r8}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 12.147767322s ago: executing program 4 (id=89): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r8}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 12.039792704s ago: executing program 0 (id=90): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x1d) r2 = fanotify_init(0xf00, 0x800) fanotify_mark(r2, 0x1, 0x5800182b, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x6}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000030000001200000008000300", @ANYRES32=r6, @ANYBLOB="06001200000000000a0006"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 11.154832425s ago: executing program 1 (id=91): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) openat$ptp0(0xffffffffffffff9c, &(0x7f000000c2c0), 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004180)='smaps_rollup\x00') read$FUSE(r4, &(0x7f00000041c0)={0x2020}, 0x2024) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) 10.419155702s ago: executing program 2 (id=92): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20100) ioctl$EVIOCGABS3F(r1, 0x8018457f, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 9.335147989s ago: executing program 0 (id=93): r0 = syz_open_dev$vcsa(&(0x7f0000002d00), 0xb19, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010424bd7000fbdbdf252e0000000800", @ANYRES32, @ANYBLOB="0a00340002020202020200000400490008004a00"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) lseek(r0, 0x7, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x2000, 0x8, 0x2, 0x7fff, 0x0, [{0x14, 0x4b, 0x6, '\x00', 0x2b}, {0x4d, 0x2, 0x4, '\x00', 0xd8}, {0x7, 0x0, 0x9, '\x00', 0xf}, {0xcf, 0x3, 0xe4, '\x00', 0x9}, {0x4, 0x13, 0xf7, '\x00', 0x25}, {0x9, 0x2, 0x0, '\x00', 0x2e}, {0x1, 0x7, 0x1, '\x00', 0x4}, {0x8, 0x7, 0xb, '\x00', 0x4}, {0x1, 0x0, 0x1, '\x00', 0xb}, {0x7, 0x9, 0x5, '\x00', 0x7}, {0x1, 0x5, 0xd, '\x00', 0x5}, {0xe0, 0xa0, 0x2, '\x00', 0x3a}, {0x0, 0x7, 0x0, '\x00', 0x8}, {0x40, 0xfe, 0x4, '\x00', 0xd6}, {0x8, 0x1, 0x96, '\x00', 0xff}, {0x5e, 0x8, 0x7, '\x00', 0xf8}, {0x5, 0xf6, 0x2, '\x00', 0x1}, {0x7f, 0x1, 0xb, '\x00', 0x5}, {0x4, 0x6, 0x2, '\x00', 0x8}, {0x1, 0x6, 0x92, '\x00', 0x2}, {0x1, 0x20, 0x5}, {0xb, 0x6, 0x8, '\x00', 0x6}, {0x5, 0x4, 0x1, '\x00', 0x5}, {0x8, 0x8, 0x8, '\x00', 0x1}]}}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000005c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x2000c095) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffffff85}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfffffc01}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x80}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r8, &(0x7f0000000080)=""/5, 0x5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'dvmrp0\x00', 0x1000}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x430b41, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r10, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xf) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000340)={0x10004, 0x4, 0x8080000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 9.316002759s ago: executing program 3 (id=94): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x80cb, 0x10, 0x2, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003c003, 0x2b8, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8.738268922s ago: executing program 3 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 8.735562612s ago: executing program 2 (id=96): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) 7.062586122s ago: executing program 3 (id=97): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x8}, @const={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x38}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff05, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x10000) close(r5) write(r4, &(0x7f00000002c0)='snd_aloop.0', 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7d, 0x0, &(0x7f0000000000)) 7.012488333s ago: executing program 4 (id=98): socket$nl_netfilter(0x10, 0x3, 0xc) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f0000000340)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000500)=""/182, &(0x7f00000005c0)=0xb6) 6.861234947s ago: executing program 2 (id=99): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x300040c0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3e1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x39, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x2, 0x2ed, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x29}}}, 0xfffffffffffffffe) 6.661293662s ago: executing program 4 (id=100): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000480), &(0x7f00000004c0)=[{}, {{0x80000000}}]}) r6 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, &(0x7f0000000600)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000001c0)={{r8, r7, 0x1, [0x0, 0xf7df]}, {r8, r9, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000580)={{0x80000000, 0x0, 0xc, [0x4, 0x6]}, {r5, r7, 0x1, [0x7, 0x6]}, 0x2, [0xfffffff9, 0x10]}) 4.897046564s ago: executing program 2 (id=101): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') close_range(0xffffffffffffffff, r1, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) setgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r5) r6 = memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8\x85\xa5\xf4r\xd8\xe5!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6V_\xe5b\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xd4\xb5\f\xf0\xee\x92^\x1a\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS\x00'/125, 0x0) write(r6, &(0x7f0000000380)="69672505bde5d1853a384e3deec6fcb4391f745de504000000feffffff7090ba2b6d59c8958d6f1500000000c4677b000900ffffffffffffff200000f8bf54da331979df33226e02beb8bfb7cdb52558975e1e63c58d102c0c", 0x59) 4.772160917s ago: executing program 4 (id=102): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r8}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 3.237865053s ago: executing program 1 (id=103): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.996070579s ago: executing program 4 (id=104): landlock_create_ruleset(0x0, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="204000000001050500000000000000000a0080000c00108002403b5e5b8b7d14ab4dd05a00beb4544b3a50eda16dec17da868caa5162a0a15a682377edb7a00b81721d8923767a81eeaed5b73e1f2967a0b12465abebc548846b36d0edecfafdfcc9d50aeb3e"], 0x20}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x800, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}}, 0x108) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2.427503622s ago: executing program 0 (id=105): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.646898091s ago: executing program 2 (id=106): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20100) ioctl$EVIOCGABS3F(r1, 0x8018457f, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 1.454963225s ago: executing program 0 (id=107): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000faffffff0000000000003e7c8500000005000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe, 0x0, &(0x7f0000000000)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.412983166s ago: executing program 1 (id=108): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7ff, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r8}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x4b) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 366.476941ms ago: executing program 0 (id=109): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x4000080) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) 123.260347ms ago: executing program 1 (id=110): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 0 (id=111): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x300040c0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3e1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x39, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x2, 0x2ed, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x29}}}, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 78.676232][ T4259] cgroup: Unknown subsys name 'net' [ 78.830142][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.414305][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.976388][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.994798][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.002540][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.003929][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.013660][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.022029][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.024816][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.032675][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.041646][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.046081][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.053120][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.060038][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.072881][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.075936][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.084310][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.095201][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.096599][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.104125][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.116997][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.124541][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.126095][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.132308][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.141070][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.153589][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.154441][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.162304][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.174729][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.182150][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.216733][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.267016][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.613383][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 82.735709][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 82.761444][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 82.875167][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.882345][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.893511][ T4285] device bridge_slave_0 entered promiscuous mode [ 82.905688][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 82.926511][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.936223][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.944445][ T4285] device bridge_slave_1 entered promiscuous mode [ 82.952365][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 83.025065][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.032230][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.041094][ T4278] device bridge_slave_0 entered promiscuous mode [ 83.051155][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.067695][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.075250][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.087680][ T4278] device bridge_slave_1 entered promiscuous mode [ 83.133181][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.146439][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.153934][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.162206][ T4271] device bridge_slave_0 entered promiscuous mode [ 83.172734][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.200221][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.207715][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.216621][ T4271] device bridge_slave_1 entered promiscuous mode [ 83.225521][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.291661][ T4285] team0: Port device team_slave_0 added [ 83.306586][ T4285] team0: Port device team_slave_1 added [ 83.322213][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.339134][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.348063][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.356355][ T4272] device bridge_slave_0 entered promiscuous mode [ 83.373125][ T4278] team0: Port device team_slave_0 added [ 83.381226][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.390766][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.398260][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.407145][ T4273] device bridge_slave_0 entered promiscuous mode [ 83.415243][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.422364][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.431245][ T4272] device bridge_slave_1 entered promiscuous mode [ 83.448508][ T4278] team0: Port device team_slave_1 added [ 83.461411][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.471554][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.479721][ T4273] device bridge_slave_1 entered promiscuous mode [ 83.500552][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.507650][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.534135][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.570359][ T4271] team0: Port device team_slave_0 added [ 83.592432][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.599790][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.625809][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.646243][ T4271] team0: Port device team_slave_1 added [ 83.652476][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.659715][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.686042][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.699514][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.710737][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.736113][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.743126][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.769636][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.782692][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.795207][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.839662][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.846939][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.873349][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.886258][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.893264][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.919438][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.940308][ T4272] team0: Port device team_slave_0 added [ 83.957499][ T4273] team0: Port device team_slave_0 added [ 83.976881][ T4272] team0: Port device team_slave_1 added [ 83.993691][ T4273] team0: Port device team_slave_1 added [ 84.003747][ T4285] device hsr_slave_0 entered promiscuous mode [ 84.010634][ T4285] device hsr_slave_1 entered promiscuous mode [ 84.072641][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.079914][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.105898][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.129711][ T4271] device hsr_slave_0 entered promiscuous mode [ 84.136632][ T4271] device hsr_slave_1 entered promiscuous mode [ 84.143208][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.151528][ T4271] Cannot create hsr debugfs directory [ 84.161538][ T4278] device hsr_slave_0 entered promiscuous mode [ 84.169581][ T4278] device hsr_slave_1 entered promiscuous mode [ 84.177294][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.185264][ T4278] Cannot create hsr debugfs directory [ 84.198184][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.207559][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.234046][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.245996][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.252982][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.279366][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.292343][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.299597][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.306833][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 84.326054][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 84.332488][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 84.338276][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 84.344424][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 84.352488][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.462272][ T4272] device hsr_slave_0 entered promiscuous mode [ 84.469318][ T4272] device hsr_slave_1 entered promiscuous mode [ 84.476104][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.483743][ T4272] Cannot create hsr debugfs directory [ 84.556738][ T4273] device hsr_slave_0 entered promiscuous mode [ 84.564674][ T4273] device hsr_slave_1 entered promiscuous mode [ 84.571446][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.579213][ T4273] Cannot create hsr debugfs directory [ 84.890367][ T4285] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.921724][ T4285] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.943142][ T4285] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.958098][ T4285] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.998308][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.011153][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.023325][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.036821][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.112701][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.122467][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.147392][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.175677][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.193041][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.208355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.220592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.257463][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.307151][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.318057][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.328140][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.335557][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.345793][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.372519][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.381799][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.390918][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.408029][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.415351][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.445233][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.460567][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.475549][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.490448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.499569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.525602][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.538118][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.567450][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.577196][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.586518][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.600578][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.614945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.627423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.639050][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.657536][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.683121][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.693213][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.716750][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.728578][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.743371][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.771056][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.778745][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.788446][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.842120][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.867548][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.888695][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.899826][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.907125][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.929581][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.995738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.014071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.022155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.033880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.042641][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.049851][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.059134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.068906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.082399][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.101698][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.114304][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.123074][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.132776][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.142325][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.149526][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.195927][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.215490][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.231566][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.241561][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.256272][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.267626][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.276752][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.287110][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.296109][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.306513][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.315878][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.323020][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.331236][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.348242][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.383713][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 86.389806][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 86.396158][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 86.402218][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 86.408734][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 86.428927][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.451380][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.490830][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.548887][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.558139][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.574429][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.590008][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.599707][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.613354][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.622383][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.631098][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.641384][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.650347][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.668252][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.695139][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.702576][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.712581][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.726700][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.830988][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.846413][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.874926][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.901011][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.925489][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.932654][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.959154][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.985907][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.005250][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.012424][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.020496][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.030366][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.051783][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.071793][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.106567][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.122385][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.131557][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.176489][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.223645][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.233178][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.265442][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.283762][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.292585][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.302551][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.312172][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.321439][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.328630][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.338789][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.356088][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.369462][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.376712][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.391476][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.404525][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.424423][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.444003][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.461259][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.470850][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.485626][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.495939][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.507357][ T4285] device veth0_vlan entered promiscuous mode [ 87.528825][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.541748][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.555259][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.568806][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.577210][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.586357][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.595048][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.603278][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.614096][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.622887][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.633092][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.661783][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.676354][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.696934][ T4285] device veth1_vlan entered promiscuous mode [ 87.724638][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.735586][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.745970][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.755143][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.764028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.773060][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.781788][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.790463][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.805718][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.857352][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.874532][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.885892][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.895965][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.908381][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.916647][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.939015][ T4278] device veth0_vlan entered promiscuous mode [ 87.963708][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.972517][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.008079][ T4285] device veth0_macvtap entered promiscuous mode [ 88.029085][ T4278] device veth1_vlan entered promiscuous mode [ 88.060038][ T4285] device veth1_macvtap entered promiscuous mode [ 88.091282][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.101858][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.118582][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.144364][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.153263][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.259104][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.296305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.314399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.323834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.346350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.364669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.384151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.398186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.412496][ T4273] device veth0_vlan entered promiscuous mode [ 88.430702][ T4278] device veth0_macvtap entered promiscuous mode [ 88.460187][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.465093][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 88.474572][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 88.480643][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 88.487699][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 88.487801][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 88.501121][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.510330][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.526035][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.536516][ T4278] device veth1_macvtap entered promiscuous mode [ 88.592328][ T4273] device veth1_vlan entered promiscuous mode [ 88.605692][ T4285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.621959][ T4285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.631543][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.644681][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.660007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.672965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.695357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.705375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.745697][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.755429][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.766002][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.779257][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.794642][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.807454][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.839062][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.853007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.862282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.876458][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.888200][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.900568][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.937847][ T4273] device veth0_macvtap entered promiscuous mode [ 88.947624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.958510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.968895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.984601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.010197][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.021293][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.041776][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.051006][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.060341][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.081153][ T4273] device veth1_macvtap entered promiscuous mode [ 89.102825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.114776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.123075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.131523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.187590][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.199792][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.210658][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.225074][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.238470][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.274850][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.284746][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.312664][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.323787][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.334016][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.346190][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.358444][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.415942][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.427158][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.437698][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.446997][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.456236][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.465169][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.507756][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.517896][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.535816][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.543916][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.552681][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.562611][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.579640][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.592802][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.605863][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.614789][ T4272] device veth0_vlan entered promiscuous mode [ 89.674984][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.682874][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.709854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.728526][ T4272] device veth1_vlan entered promiscuous mode [ 89.739193][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.767315][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.779290][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.787494][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.815872][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.829825][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.879222][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.946634][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.965899][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.040699][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.079609][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.089602][ T4272] device veth0_macvtap entered promiscuous mode [ 90.096794][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.112471][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.140139][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.152207][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.160896][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.181807][ T4272] device veth1_macvtap entered promiscuous mode [ 90.212172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.242474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.264482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.275117][ T4363] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.349958][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.366853][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.388230][ T4271] device veth0_vlan entered promiscuous mode [ 90.407554][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.421145][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.452804][ T4271] device veth1_vlan entered promiscuous mode [ 90.478098][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.496199][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.519625][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.531563][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.541928][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.552806][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 90.553976][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 90.559051][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 90.573506][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 90.574184][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 90.594592][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.618321][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.660244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.674547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.682908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.695612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.712748][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.744302][ T4370] Zero length message leads to an empty skb [ 90.748113][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.766911][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.784844][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.807222][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.833042][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.855290][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.880535][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.900289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.917026][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.932790][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.944049][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.953216][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.986584][ T4271] device veth0_macvtap entered promiscuous mode [ 90.995590][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.008347][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.032186][ T4271] device veth1_macvtap entered promiscuous mode [ 91.057979][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.068094][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.101794][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.118818][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.131150][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.142735][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.155669][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.168239][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.178843][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.190055][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.227701][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.260204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.282344][ T4381] process 'syz.2.8' launched './file0' with NULL argv: empty string added [ 91.299675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.319380][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.335574][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.351204][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.365803][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.383130][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.434626][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.478842][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.506856][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.608776][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.287286][ T4387] sched: RT throttling activated [ 93.313614][ T126] cfg80211: failed to load regulatory.db [ 93.326528][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.882273][ T4385] Bluetooth: MGMT ver 1.22 [ 93.899965][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.951752][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.971414][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.980771][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.998431][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.179755][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.211524][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.235426][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.803475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 95.133432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 95.163438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.173449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.183452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.193441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.203454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.395619][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.795492][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.839642][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.924294][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.006735][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.182728][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.448821][ T4325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.734997][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.794946][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.910668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.485417][ T4325] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.545590][ T4325] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 100.575629][ T4325] usb 1-1: can't read configurations, error -71 [ 100.783449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.793455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.803440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.192728][ T4429] size and base must be multiples of 4 kiB [ 102.199201][ T4429] CPU: 0 PID: 4429 Comm: syz.1.2 Not tainted syzkaller #0 [ 102.206367][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.216446][ T4429] Call Trace: [ 102.219733][ T4429] [ 102.222669][ T4429] dump_stack_lvl+0x188/0x24e [ 102.227377][ T4429] ? __might_fault+0xa6/0x120 [ 102.232068][ T4429] ? show_regs_print_info+0x12/0x12 [ 102.237287][ T4429] ? load_image+0x410/0x410 [ 102.241807][ T4429] ? tomoyo_path_number_perm+0x5a4/0x650 [ 102.247472][ T4429] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.252993][ T4429] ? __might_fault+0xa6/0x120 [ 102.257726][ T4429] ? __might_fault+0xc2/0x120 [ 102.262460][ T4429] ? __might_fault+0xa6/0x120 [ 102.267200][ T4429] mtrr_add+0x8e/0xc0 [ 102.271244][ T4429] mtrr_ioctl+0x9bf/0x1140 [ 102.275734][ T4429] ? mtrr_close+0x1f0/0x1f0 [ 102.280300][ T4429] ? __fget_files+0x28/0x460 [ 102.284962][ T4429] ? mtrr_close+0x1f0/0x1f0 [ 102.289525][ T4429] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 102.295050][ T4429] ? proc_reg_poll+0x280/0x280 [ 102.299880][ T4429] __se_sys_ioctl+0xfa/0x170 [ 102.304302][ T4430] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 102.304519][ T4429] do_syscall_64+0x4c/0xa0 [ 102.316461][ T4429] ? clear_bhb_loop+0x60/0xb0 [ 102.321200][ T4429] ? clear_bhb_loop+0x60/0xb0 [ 102.325941][ T4429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.331895][ T4429] RIP: 0033:0x7fcd65d9e0d9 [ 102.336345][ T4429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.355990][ T4429] RSP: 002b:00007fcd63fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.364461][ T4429] RAX: ffffffffffffffda RBX: 00007fcd66026090 RCX: 00007fcd65d9e0d9 [ 102.372478][ T4429] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 102.380501][ T4429] RBP: 00007fcd65e35024 R08: 0000000000000000 R09: 0000000000000000 [ 102.388529][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.396547][ T4429] R13: 00007fcd66026128 R14: 00007fcd66026090 R15: 00007ffc61104a18 [ 102.404622][ T4429] [ 106.363334][ T4451] loop2: detected capacity change from 0 to 4095 [ 106.478316][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 106.488120][ C1] I/O error, dev loop2, sector 1392 op 0x0:(READ) flags 0x80700 phys_seg 91 prio class 2 [ 106.512375][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.521799][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 106.541226][ C1] I/O error, dev loop2, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.733969][ C1] I/O error, dev loop2, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.743464][ C1] Buffer I/O error on dev loop2, logical block 480, async page read [ 107.293723][ T4320] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 107.715579][ T4464] ======================================================= [ 107.715579][ T4464] WARNING: The mand mount option has been deprecated and [ 107.715579][ T4464] and is ignored by this kernel. Remove the mand [ 107.715579][ T4464] option from the mount to silence this warning. [ 107.715579][ T4464] ======================================================= [ 107.912879][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.593626][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.602648][ T4320] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 108.636655][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.725909][ T4320] usb 3-1: config 0 descriptor?? [ 108.757243][ T4320] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 108.804460][ T4320] dvb-usb: bulk message failed: -22 (3/0) [ 108.835273][ T4320] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 108.862282][ T4320] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 108.940299][ T4459] dibusb: i2c wr: len=61 is too big! [ 108.940299][ T4459] [ 109.070755][ T4320] usb 3-1: media controller created [ 109.078557][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.093156][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 109.099438][ T4320] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 109.126928][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 109.499727][ T4320] dvb-usb: schedule remote query interval to 150 msecs. [ 109.672755][ T4320] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 109.926546][ T4320] usb 3-1: USB disconnect, device number 2 [ 110.030344][ T4320] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.568585][ T4506] binder: 4505:4506 ioctl 4018620d 0 returned -22 [ 113.998706][ T4513] kAFS: unparsable volume name [ 114.199321][ T4509] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.273485][ T2192] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 115.014070][ T4509] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 115.184422][ T2192] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.991999][ T2192] usb 3-1: not running at top speed; connect to a high speed hub [ 116.001386][ T2192] usb 3-1: config 6 has an invalid descriptor of length 108, skipping remainder of the config [ 116.013593][ T2192] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 116.035979][ T2192] usb 3-1: string descriptor 0 read error: -22 [ 116.063790][ T2192] usb 3-1: New USB device found, idVendor=0f11, idProduct=10a0, bcdDevice=d2.eb [ 116.103460][ T2192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.186957][ T1046] block nbd0: Attempted send on invalid socket [ 116.194472][ T1046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.206877][ T4524] befs: (nbd0): unable to read superblock [ 116.522522][ T4274] usb 3-1: USB disconnect, device number 3 [ 116.562718][ T4524] can0: slcan on ttyS3. [ 116.761250][ T4533] using random self ethernet address [ 116.767353][ T4533] using random host ethernet address [ 117.310754][ T26] audit: type=1800 audit(1787744167.673:2): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="idVendor" dev="configfs" ino=61136 res=0 errno=0 [ 117.339640][ T26] audit: type=1800 audit(1787744167.693:3): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="idProduct" dev="configfs" ino=61137 res=0 errno=0 [ 117.413544][ T26] audit: type=1800 audit(1787744167.693:4): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="max_speed" dev="configfs" ino=61138 res=0 errno=0 [ 117.495774][ T4523] can0 (unregistered): slcan off ttyS3. [ 117.533116][ T26] audit: type=1800 audit(1787744167.703:5): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="UDC" dev="configfs" ino=61139 res=0 errno=0 [ 117.856717][ T4543] binder: 4541:4543 ioctl 4018620d 0 returned -22 [ 118.403521][ T4320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.644816][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 118.664457][ T4320] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 118.731341][ T4320] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 118.760751][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 118.772493][ T4320] usb 4-1: Product: syz [ 118.779148][ T4320] usb 4-1: Manufacturer: syz [ 118.796648][ T4320] usb 4-1: SerialNumber: syz [ 118.863359][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 118.951487][ T4320] usb 4-1: config 0 descriptor?? [ 119.043256][ T4558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.343098][ T4592] binder: BINDER_SET_CONTEXT_MGR already set [ 121.364400][ T4592] binder: 4591:4592 ioctl 4018620d 200000000040 returned -16 [ 121.832373][ T4274] usb 4-1: USB disconnect, device number 2 [ 123.574071][ T4618] sctp: failed to load transform for md5: -2 [ 124.288749][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 124.602787][ T4595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.113664][ T2192] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.362962][ T2192] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 125.385554][ T2192] usb 4-1: config 0 has no interface number 0 [ 125.391708][ T2192] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.514951][ T2192] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 125.537101][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 125.664885][ T2192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.627428][ T2192] usb 4-1: Product: syz [ 126.631689][ T2192] usb 4-1: Manufacturer: syz [ 126.653358][ T2192] usb 4-1: SerialNumber: syz [ 126.694402][ T2192] usb 4-1: config 0 descriptor?? [ 126.804269][ T2192] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 126.827774][ T4658] binder: BINDER_SET_CONTEXT_MGR already set [ 126.873447][ T4658] binder: 4657:4658 ioctl 4018620d 200000000040 returned -16 [ 126.953684][ T4320] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 127.000310][ T4663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 127.028037][ T4274] usb 4-1: USB disconnect, device number 3 [ 127.155813][ T4320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.173704][ T4320] usb 1-1: not running at top speed; connect to a high speed hub [ 127.185678][ T4320] usb 1-1: config 6 has an invalid descriptor of length 108, skipping remainder of the config [ 127.217204][ T4320] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 127.276618][ T4320] usb 1-1: string descriptor 0 read error: -22 [ 127.297837][ T4320] usb 1-1: New USB device found, idVendor=0f11, idProduct=10a0, bcdDevice=d2.eb [ 127.329538][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.296484][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 128.306732][ T4274] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 128.834391][ T2192] usb 1-1: USB disconnect, device number 4 [ 129.610940][ T26] audit: type=1800 audit(1787744179.973:6): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.84" name="idVendor" dev="configfs" ino=61600 res=0 errno=0 [ 129.694683][ T26] audit: type=1800 audit(1787744179.973:7): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.84" name="idProduct" dev="configfs" ino=61601 res=0 errno=0 [ 129.725848][ T26] audit: type=1800 audit(1787744179.973:8): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.84" name="max_speed" dev="configfs" ino=61602 res=0 errno=0 [ 129.831097][ T26] audit: type=1800 audit(1787744179.973:9): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.84" name="UDC" dev="configfs" ino=61603 res=0 errno=0 [ 130.854983][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 131.117913][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 133.225240][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.232041][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.727438][ T1046] block nbd1: Attempted send on invalid socket [ 133.733830][ T1046] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.745350][ T4721] befs: (nbd1): unable to read superblock [ 133.957742][ T4721] can0: slcan on ttyS3. [ 134.685492][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.706299][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.715016][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.007829][ T4720] can0 (unregistered): slcan off ttyS3. [ 136.028636][ T26] audit: type=1800 audit(1787744186.393:10): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.98" name="idVendor" dev="configfs" ino=61727 res=0 errno=0 [ 136.102169][ T26] audit: type=1800 audit(1787744186.423:11): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.98" name="idProduct" dev="configfs" ino=61730 res=0 errno=0 [ 136.202291][ T26] audit: type=1800 audit(1787744186.423:12): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.98" name="max_speed" dev="configfs" ino=61731 res=0 errno=0 [ 137.051846][ T26] audit: type=1800 audit(1787744186.423:13): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.98" name="UDC" dev="configfs" ino=61732 res=0 errno=0 [ 137.315467][ T4743] ubi0: attaching mtd0 [ 137.329698][ T4743] ubi0: scanning is finished [ 137.334536][ T4743] ubi0: empty MTD device detected [ 137.889112][ T4743] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 138.170535][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 140.055761][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 140.365979][ T4769] mmap: syz.3.97 (4769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.460466][ T4778] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 141.663595][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 142.063644][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.070135][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 142.903219][ T4769] ================================================================== [ 142.911358][ T4769] BUG: KASAN: use-after-free in release_card_device+0x192/0x1a0 [ 142.919033][ T4769] Read of size 1 at addr ffff88802ebacd11 by task syz.3.97/4769 [ 142.926671][ T4769] [ 142.929008][ T4769] CPU: 0 PID: 4769 Comm: syz.3.97 Not tainted syzkaller #0 [ 142.936208][ T4769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.946280][ T4769] Call Trace: [ 142.949567][ T4769] [ 142.952519][ T4769] dump_stack_lvl+0x188/0x24e [ 142.957259][ T4769] ? __lock_acquire+0x7c40/0x7c40 [ 142.962324][ T4769] ? show_regs_print_info+0x12/0x12 [ 142.967544][ T4769] ? load_image+0x410/0x410 [ 142.972062][ T4769] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 142.977546][ T4769] ? __virt_addr_valid+0x188/0x540 [ 142.982696][ T4769] ? __virt_addr_valid+0x467/0x540 [ 142.987842][ T4769] ? release_card_device+0x192/0x1a0 [ 142.993162][ T4769] print_report+0xa8/0x210 [ 142.997607][ T4769] kasan_report+0x10b/0x140 [ 143.002147][ T4769] ? release_card_device+0x192/0x1a0 [ 143.007469][ T4769] release_card_device+0x192/0x1a0 [ 143.012627][ T4769] ? snd_power_wait+0x90/0x90 [ 143.017331][ T4769] device_release+0x92/0x1c0 [ 143.021952][ T4769] kobject_put+0x217/0x450 [ 143.026396][ T4769] snd_card_file_remove+0x32d/0x380 [ 143.031621][ T4769] snd_pcm_oss_release+0x1fd/0x240 [ 143.036767][ T4769] ? snd_disconnect_mmap+0x10/0x10 [ 143.041907][ T4769] __fput+0x20a/0x8b0 [ 143.045941][ T4769] task_work_run+0x1d0/0x260 [ 143.050566][ T4769] ? task_work_cancel+0x220/0x220 [ 143.055622][ T4769] ? __might_fault+0xc2/0x120 [ 143.060363][ T4769] ? exit_to_user_mode_loop+0x3b/0x110 [ 143.065864][ T4769] exit_to_user_mode_loop+0xe6/0x110 [ 143.071179][ T4769] exit_to_user_mode_prepare+0xee/0x180 [ 143.076798][ T4769] syscall_exit_to_user_mode+0x16/0x40 [ 143.082282][ T4769] do_syscall_64+0x58/0xa0 [ 143.086731][ T4769] ? clear_bhb_loop+0x60/0xb0 [ 143.091544][ T4769] ? clear_bhb_loop+0x60/0xb0 [ 143.096264][ T4769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.102187][ T4769] RIP: 0033:0x7fc82599e0d9 [ 143.106652][ T4769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.126282][ T4769] RSP: 002b:00007fc82678a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.134732][ T4769] RAX: ffffffffffffffb3 RBX: 00007fc825c26090 RCX: 00007fc82599e0d9 [ 143.142741][ T4769] RDX: 0000200000000080 RSI: 00000000c0045005 RDI: 0000000000000007 [ 143.150741][ T4769] RBP: 00007fc825a35024 R08: 0000000000000000 R09: 0000000000000000 [ 143.158736][ T4769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.166723][ T4769] R13: 00007fc825c26128 R14: 00007fc825c26090 R15: 00007ffcd53e6a58 [ 143.174719][ T4769] [ 143.177754][ T4769] [ 143.180094][ T4769] The buggy address belongs to the physical page: [ 143.186537][ T4769] page:ffffea0000baeb00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ebac [ 143.196705][ T4769] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 143.203837][ T4769] raw: 00fff00000000000 ffffea0001fd2c08 ffff8880b8e415f0 0000000000000000 [ 143.212435][ T4769] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 143.221027][ T4769] page dumped because: kasan: bad access detected [ 143.227466][ T4769] page_owner tracks the page as freed [ 143.232846][ T4769] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x102800(GFP_NOWAIT|__GFP_NOWARN|__GFP_HARDWALL), pid 4773, tgid 4767 (syz.3.97), ts 142901623456, free_ts 142901661084 [ 143.251185][ T4769] post_alloc_hook+0x173/0x1a0 [ 143.255990][ T4769] get_page_from_freelist+0x206b/0x2180 [ 143.261564][ T4769] __alloc_pages+0x1ec/0x4f0 [ 143.266185][ T4769] __stack_depot_save+0x375/0x480 [ 143.271247][ T4769] kasan_save_stack+0x4c/0x60 [ 143.275952][ T4769] __kasan_record_aux_stack+0xb2/0xc0 [ 143.281345][ T4769] task_work_add+0x7f/0x330 [ 143.285875][ T4769] fput+0xd9/0x1a0 [ 143.289622][ T4769] ksys_write+0x1fd/0x260 [ 143.294004][ T4769] do_syscall_64+0x4c/0xa0 [ 143.298469][ T4769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.304406][ T4769] page last free stack trace: [ 143.309091][ T4769] free_unref_page_prepare+0x8e5/0x9e0 [ 143.314594][ T4769] free_unref_page+0x2e/0x3f0 [ 143.319299][ T4769] __stack_depot_save+0x44d/0x480 [ 143.324347][ T4769] kasan_save_stack+0x4c/0x60 [ 143.329046][ T4769] __kasan_record_aux_stack+0xb2/0xc0 [ 143.334436][ T4769] task_work_add+0x7f/0x330 [ 143.338967][ T4769] fput+0xd9/0x1a0 [ 143.342706][ T4769] ksys_write+0x1fd/0x260 [ 143.347065][ T4769] do_syscall_64+0x4c/0xa0 [ 143.351508][ T4769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.357431][ T4769] [ 143.359768][ T4769] Memory state around the buggy address: [ 143.365415][ T4769] ffff88802ebacc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 143.373502][ T4769] ffff88802ebacc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 143.381582][ T4769] >ffff88802ebacd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 143.389668][ T4769] ^ [ 143.394269][ T4769] ffff88802ebacd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 143.402349][ T4769] ffff88802ebace00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 143.410427][ T4769] ================================================================== [ 143.434503][ T4769] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.441746][ T4769] CPU: 0 PID: 4769 Comm: syz.3.97 Not tainted syzkaller #0 [ 143.448970][ T4769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.459034][ T4769] Call Trace: [ 143.462323][ T4769] [ 143.465269][ T4769] dump_stack_lvl+0x188/0x24e [ 143.469988][ T4769] ? memcpy+0x3c/0x60 [ 143.473979][ T4769] ? show_regs_print_info+0x12/0x12 [ 143.479216][ T4769] ? load_image+0x410/0x410 [ 143.483735][ T4769] panic+0x2d3/0x710 [ 143.487652][ T4769] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.493851][ T4769] ? bpf_jit_dump+0xd0/0xd0 [ 143.498363][ T4769] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 143.504351][ T4769] ? _raw_spin_unlock+0x40/0x40 [ 143.509234][ T4769] check_panic_on_warn+0x80/0xa0 [ 143.514188][ T4769] ? release_card_device+0x192/0x1a0 [ 143.519485][ T4769] end_report+0x66/0x110 [ 143.523752][ T4769] kasan_report+0x118/0x140 [ 143.528328][ T4769] ? release_card_device+0x192/0x1a0 [ 143.533635][ T4769] release_card_device+0x192/0x1a0 [ 143.538781][ T4769] ? snd_power_wait+0x90/0x90 [ 143.543476][ T4769] device_release+0x92/0x1c0 [ 143.548128][ T4769] kobject_put+0x217/0x450 [ 143.552560][ T4769] snd_card_file_remove+0x32d/0x380 [ 143.557770][ T4769] snd_pcm_oss_release+0x1fd/0x240 [ 143.562894][ T4769] ? snd_disconnect_mmap+0x10/0x10 [ 143.568025][ T4769] __fput+0x20a/0x8b0 [ 143.572062][ T4769] task_work_run+0x1d0/0x260 [ 143.576668][ T4769] ? task_work_cancel+0x220/0x220 [ 143.581726][ T4769] ? __might_fault+0xc2/0x120 [ 143.586437][ T4769] ? exit_to_user_mode_loop+0x3b/0x110 [ 143.591918][ T4769] exit_to_user_mode_loop+0xe6/0x110 [ 143.597223][ T4769] exit_to_user_mode_prepare+0xee/0x180 [ 143.602791][ T4769] syscall_exit_to_user_mode+0x16/0x40 [ 143.608273][ T4769] do_syscall_64+0x58/0xa0 [ 143.612707][ T4769] ? clear_bhb_loop+0x60/0xb0 [ 143.617485][ T4769] ? clear_bhb_loop+0x60/0xb0 [ 143.622178][ T4769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.628111][ T4769] RIP: 0033:0x7fc82599e0d9 [ 143.632533][ T4769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.652170][ T4769] RSP: 002b:00007fc82678a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.660617][ T4769] RAX: ffffffffffffffb3 RBX: 00007fc825c26090 RCX: 00007fc82599e0d9 [ 143.668627][ T4769] RDX: 0000200000000080 RSI: 00000000c0045005 RDI: 0000000000000007 [ 143.676653][ T4769] RBP: 00007fc825a35024 R08: 0000000000000000 R09: 0000000000000000 [ 143.684636][ T4769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.692619][ T4769] R13: 00007fc825c26128 R14: 00007fc825c26090 R15: 00007ffcd53e6a58 [ 143.700613][ T4769] [ 143.704246][ T4769] Kernel Offset: disabled [ 143.708584][ T4769] Rebooting in 86400 seconds..