last executing test programs: 2m10.156239486s ago: executing program 1 (id=15): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) 2m7.419795144s ago: executing program 1 (id=20): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)='|') r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001540)={r0, r0, 0x400, 0x0, 0x0, 0x8, 0x73, 0x0, 0x6, 0x5, 0xae0784e67be8d338, 0xffff, 'syz1\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xd, 0x0, 0x0, 0xb, 0x1, 0x15c2, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0x400, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0xc7, &(0x7f0000000200)=""/199, 0x41100, 0x1c, '\x00', r4, @fallback, r5, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x10, 0x2, 0x5c43}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x1, 0x12, 0x8}, {0x2, 0x3, 0x10, 0xc}, {0x1, 0x1, 0x2, 0x6}, {0x3, 0x5, 0x8, 0x6}, {0x1, 0xffffffff, 0x6, 0xc}, {0x40000001, 0x3, 0x2, 0x1}, {0x0, 0x1, 0xb, 0x3}], 0x10, 0x10000}, 0x94) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 2m4.74164486s ago: executing program 1 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) 2m3.355334807s ago: executing program 1 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x2aa}) 2m2.392099597s ago: executing program 1 (id=30): fsopen(0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x8aa83, 0x83) vmsplice(r1, 0x0, 0x0, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x130, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf4, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xac, 0x2, "0598d9a5b1a6abc05c6ef25f61c023b8161f5ae6cc1e4b6d713ff08ee971a3aff5d7bfdd260df2f45d8d276e1d4fba5ccfee22974907c47369a685095b383750270a68dd1b2f7368467fe14cfc1c8096471d20457f706464de6ee4c125b499cbda00a33ceb0c8e5e174a2ebf869542b95554d2e5c42c498f5cc849c10d623e81450e204536d0363851c5c49e52e8387e095382ed621e79b3a17d211dbe28aa9c58d57544996e58b7"}}, {0x40, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x3b, 0x1, "76a9d9351928dfe7b7c95dcc08292ef38be4491e97c835c9a0d9fee9f294f12427900248fa66053c32b785329b4bd522df22d1e0a8f423"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x6487b9556a6ff2cf}, 0x20000800) 1m58.044742331s ago: executing program 1 (id=36): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000080)='^\x00', 0x200000, &(0x7f00000000c0)={@align, {0x40, 0x4, 0x4, 0x8000000000000001}}, 0xfffffffa, 0x0, &(0x7f0000000140)=0x4}, {[0xa, 0x9, 0x10001, 0x7f]}, 0x1, 0x0, &(0x7f0000000180)}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x8000000000003ff, 0x6, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x80000006, 0x3a08}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r6, r7, 0x5, 0x200, 0x4, 0x5, {0x200007, 0x9, 0x5, 0xa, 0x8000, 0x9, 0x5, 0x5, 0x0, 0xfffc, 0x7, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) write(0xffffffffffffffff, &(0x7f0000001000)='A', 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x852}, 0x4) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000680)={0x2, &(0x7f0000000400)=[{}, {}]}) 1m42.123669782s ago: executing program 32 (id=36): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000080)='^\x00', 0x200000, &(0x7f00000000c0)={@align, {0x40, 0x4, 0x4, 0x8000000000000001}}, 0xfffffffa, 0x0, &(0x7f0000000140)=0x4}, {[0xa, 0x9, 0x10001, 0x7f]}, 0x1, 0x0, &(0x7f0000000180)}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x8000000000003ff, 0x6, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x80000006, 0x3a08}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r6, r7, 0x5, 0x200, 0x4, 0x5, {0x200007, 0x9, 0x5, 0xa, 0x8000, 0x9, 0x5, 0x5, 0x0, 0xfffc, 0x7, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) write(0xffffffffffffffff, &(0x7f0000001000)='A', 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x852}, 0x4) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000680)={0x2, &(0x7f0000000400)=[{}, {}]}) 21.740706684s ago: executing program 4 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000200)) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='stacktrace', 0xa) 20.287334994s ago: executing program 4 (id=202): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 16.18042637s ago: executing program 4 (id=205): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.57818878s ago: executing program 4 (id=211): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) socket(0x10, 0x803, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), 0x0}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 8.846722237s ago: executing program 0 (id=215): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r1, @ANYBLOB="05005b"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, 0x0, 0x4000004) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_to_bond\x00', {0x3}, 0xfffe}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) 8.716573064s ago: executing program 3 (id=216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001040)=[0x9, 0x4, 0x40]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5000000010003704b80010000000000000000000", @ANYRESDEC=r1, @ANYRES16=r1], 0x50}, 0x1, 0x0, 0x0, 0x24008080}, 0x40020) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {0x6, 0x9}, {0xf, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xa90a}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = socket(0x80000000000000a, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0xa0000001}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) r7 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x0, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f00000025c0)=@ublk_io_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x8b1f, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x1, 0x849, 0xc, 0x0}}) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000000380)=@ublk_end_user_recovery_sqe={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207511, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) io_uring_enter(r7, 0x20, 0xd9db, 0x8, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)=@RTM_DELMDB={0x58, 0x55, 0x200, 0x70bd29, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x2, 0x4, {@in6_addr=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x3, 0x3, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$netlink(0x10, 0x3, 0x0) 8.606742822s ago: executing program 2 (id=217): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a0000000500"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) 8.40861612s ago: executing program 4 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000200)) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='stacktrace', 0xa) 6.389714294s ago: executing program 2 (id=219): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x80802, 0x6) getpeername$l2tp6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x5, {{0xa, 0x4e22, 0x3ff, @empty, 0x6}}, {{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfaa4}}}, 0x108) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) close(0x4) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) 6.099837165s ago: executing program 0 (id=220): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.178839116s ago: executing program 4 (id=221): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) socket(0x10, 0x803, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), 0x0}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 5.153171505s ago: executing program 2 (id=222): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 5.083587472s ago: executing program 0 (id=223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001040)=[0x9, 0x4, 0x40]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5000000010003704b80010000000000000000000", @ANYRESDEC=r1, @ANYRES16=r1], 0x50}, 0x1, 0x0, 0x0, 0x24008080}, 0x40020) socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.886779396s ago: executing program 3 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x8000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='1', 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000000), 0x0) r8 = fanotify_init(0x1, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000100)={0x75, @local, 0x4e20, 0xfffffffc, 'lblcr\x00', 0x5, 0x0, 0x5}, 0x2c) 4.61051627s ago: executing program 2 (id=225): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) 4.363278805s ago: executing program 0 (id=226): semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x18, 0x2}, 0x457, 0xffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="1d", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) socket$inet6(0xa, 0x5, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) userfaultfd(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) 3.324947019s ago: executing program 3 (id=227): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='m', 0x1) 3.259115351s ago: executing program 0 (id=228): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "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"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x9, 0x40}, @ringbuf_query, @ringbuf_query, @ldst={0x0, 0x0, 0x2, 0x3, 0x0, 0x18, 0x10}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 3.162156079s ago: executing program 2 (id=229): semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x18, 0x2}, 0x457, 0xffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="1d", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) socket$inet6(0xa, 0x5, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) userfaultfd(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 3.013727235s ago: executing program 3 (id=230): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a901", 0x10}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2.823373723s ago: executing program 3 (id=231): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x80802, 0x6) getpeername$l2tp6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x5, {{0xa, 0x4e22, 0x3ff, @empty, 0x6}}, {{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfaa4}}}, 0x108) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) close(0x4) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) 627.420689ms ago: executing program 2 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x8000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='1', 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) r8 = fanotify_init(0x1, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000100)={0x75, @local, 0x4e20, 0xfffffffc, 'lblcr\x00', 0x5, 0x0, 0x5}, 0x2c) 119.996992ms ago: executing program 0 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r0, 0x1000000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='./backing_file\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) 0s ago: executing program 3 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 78.465848][ T5581] cgroup: Unknown subsys name 'net' [ 78.707430][ T5581] cgroup: Unknown subsys name 'cpuset' [ 78.762086][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.379296][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.878490][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.921933][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.940982][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.946971][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.957661][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.961609][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.966957][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.970417][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.995345][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.995361][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.009101][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.010786][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.013242][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.014985][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.016671][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.016902][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.017958][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.018231][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.018988][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.024610][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.052446][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.105179][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.148633][ T4910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.166715][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.168668][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.095206][ T5603] Bluetooth: hci2: command tx timeout [ 85.095401][ T5601] Bluetooth: hci4: command tx timeout [ 85.171606][ T5601] Bluetooth: hci3: command tx timeout [ 85.331523][ T5601] Bluetooth: hci0: command tx timeout [ 85.331705][ T5601] Bluetooth: hci1: command tx timeout [ 85.366106][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.367385][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.367573][ T5593] bridge_slave_0: entered allmulticast mode [ 85.369104][ T5593] bridge_slave_0: entered promiscuous mode [ 85.423412][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.423507][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.423664][ T5593] bridge_slave_1: entered allmulticast mode [ 85.425109][ T5593] bridge_slave_1: entered promiscuous mode [ 85.591670][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.604996][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.605693][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.605851][ T5595] bridge_slave_0: entered allmulticast mode [ 85.609794][ T5595] bridge_slave_0: entered promiscuous mode [ 85.646712][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.649239][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.649304][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.649614][ T5594] bridge_slave_0: entered allmulticast mode [ 85.650964][ T5594] bridge_slave_0: entered promiscuous mode [ 85.658178][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.659658][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.659891][ T5595] bridge_slave_1: entered allmulticast mode [ 85.663305][ T5595] bridge_slave_1: entered promiscuous mode [ 85.723987][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.724094][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.724211][ T5594] bridge_slave_1: entered allmulticast mode [ 85.725625][ T5594] bridge_slave_1: entered promiscuous mode [ 85.743143][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.743255][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.744307][ T5597] bridge_slave_0: entered allmulticast mode [ 85.747168][ T5597] bridge_slave_0: entered promiscuous mode [ 85.755854][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.755966][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.756161][ T5596] bridge_slave_0: entered allmulticast mode [ 85.759617][ T5596] bridge_slave_0: entered promiscuous mode [ 85.872511][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.872598][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.872722][ T5597] bridge_slave_1: entered allmulticast mode [ 85.875604][ T5597] bridge_slave_1: entered promiscuous mode [ 85.876836][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.876942][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.877044][ T5596] bridge_slave_1: entered allmulticast mode [ 85.878384][ T5596] bridge_slave_1: entered promiscuous mode [ 85.880986][ T5593] team0: Port device team_slave_0 added [ 85.956539][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.985955][ T5593] team0: Port device team_slave_1 added [ 85.988650][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.997058][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.045572][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.065655][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.068809][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.116459][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.118651][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.119641][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.119650][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.119663][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.159135][ T5595] team0: Port device team_slave_0 added [ 86.196769][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.196783][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.196796][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.198688][ T5594] team0: Port device team_slave_0 added [ 86.222669][ T5595] team0: Port device team_slave_1 added [ 86.287149][ T5594] team0: Port device team_slave_1 added [ 86.302817][ T5597] team0: Port device team_slave_0 added [ 86.304785][ T5596] team0: Port device team_slave_0 added [ 86.342476][ T5597] team0: Port device team_slave_1 added [ 86.344110][ T5596] team0: Port device team_slave_1 added [ 86.363700][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.363714][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.363735][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.436283][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.436296][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.436309][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.437346][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.437359][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.437382][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.519978][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.519993][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.520017][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.538427][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.538442][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.538464][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.547269][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.547284][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.547314][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.588955][ T5593] hsr_slave_0: entered promiscuous mode [ 86.594555][ T5593] hsr_slave_1: entered promiscuous mode [ 86.610631][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.610646][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.610670][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.614749][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.614763][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.614786][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.809318][ T5595] hsr_slave_0: entered promiscuous mode [ 86.810045][ T5595] hsr_slave_1: entered promiscuous mode [ 86.810672][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 86.810749][ T5595] Cannot create hsr debugfs directory [ 86.819465][ T5594] hsr_slave_0: entered promiscuous mode [ 86.820587][ T5594] hsr_slave_1: entered promiscuous mode [ 86.822088][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 86.822110][ T5594] Cannot create hsr debugfs directory [ 86.928972][ T870] cfg80211: failed to load regulatory.db [ 87.171632][ T5603] Bluetooth: hci4: command tx timeout [ 87.171664][ T5603] Bluetooth: hci2: command tx timeout [ 87.251699][ T5601] Bluetooth: hci3: command tx timeout [ 87.391827][ T5596] hsr_slave_0: entered promiscuous mode [ 87.393122][ T5596] hsr_slave_1: entered promiscuous mode [ 87.393627][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 87.393644][ T5596] Cannot create hsr debugfs directory [ 87.399101][ T5597] hsr_slave_0: entered promiscuous mode [ 87.399828][ T5597] hsr_slave_1: entered promiscuous mode [ 87.400323][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 87.400342][ T5597] Cannot create hsr debugfs directory [ 87.411479][ T5601] Bluetooth: hci1: command tx timeout [ 87.411508][ T5601] Bluetooth: hci0: command tx timeout [ 88.070059][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.114422][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.119671][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.156291][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.158679][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.195120][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.218551][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.244769][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.330609][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.367229][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.388341][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.408256][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.413542][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.430108][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.455880][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.485073][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.612419][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.656970][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.670595][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.696389][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.712902][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.756567][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.787643][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.817700][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.928430][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.958890][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.979494][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.016818][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.032405][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.070447][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.097681][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.134600][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.260176][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.262093][ T5603] Bluetooth: hci2: command tx timeout [ 89.262121][ T5603] Bluetooth: hci4: command tx timeout [ 89.304350][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.308004][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.331497][ T5601] Bluetooth: hci3: command tx timeout [ 89.334408][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.337735][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.387824][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.405375][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.409289][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.446195][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.501815][ T5601] Bluetooth: hci0: command tx timeout [ 89.501844][ T5601] Bluetooth: hci1: command tx timeout [ 89.552092][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.554730][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.600892][ T1459] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.601044][ T1459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.664413][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.664511][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.696440][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.720526][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.749126][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.749256][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.796030][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.796149][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.863449][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.898372][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.900516][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.900640][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.946762][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.946885][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.039685][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.134098][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.134223][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.160387][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.230431][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.231093][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.354234][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.461666][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.461804][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.605022][ T857] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.605161][ T857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.041116][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.332930][ T5603] Bluetooth: hci4: command tx timeout [ 91.332963][ T5603] Bluetooth: hci2: command tx timeout [ 91.378888][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.412642][ T5601] Bluetooth: hci3: command tx timeout [ 91.572380][ T5601] Bluetooth: hci1: command tx timeout [ 91.572411][ T5601] Bluetooth: hci0: command tx timeout [ 91.578942][ T5593] veth0_vlan: entered promiscuous mode [ 91.697852][ T5593] veth1_vlan: entered promiscuous mode [ 91.847144][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.927016][ T5595] veth0_vlan: entered promiscuous mode [ 91.940569][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.024472][ T5593] veth0_macvtap: entered promiscuous mode [ 92.039476][ T5595] veth1_vlan: entered promiscuous mode [ 92.080854][ T5593] veth1_macvtap: entered promiscuous mode [ 92.186041][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.215799][ T5594] veth0_vlan: entered promiscuous mode [ 92.233257][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.270168][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.310666][ T5595] veth0_macvtap: entered promiscuous mode [ 92.317244][ T5594] veth1_vlan: entered promiscuous mode [ 92.347406][ T5595] veth1_macvtap: entered promiscuous mode [ 92.686819][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.762559][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.819162][ T5594] veth0_macvtap: entered promiscuous mode [ 92.883068][ T5594] veth1_macvtap: entered promiscuous mode [ 92.887509][ T5596] veth0_vlan: entered promiscuous mode [ 92.897083][ T857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.897108][ T857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.993515][ T5597] veth0_vlan: entered promiscuous mode [ 93.156404][ T5596] veth1_vlan: entered promiscuous mode [ 93.214151][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.214168][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.218118][ T5597] veth1_vlan: entered promiscuous mode [ 93.381036][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.442421][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.511960][ T1459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.511980][ T1459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.725471][ T5596] veth0_macvtap: entered promiscuous mode [ 93.844504][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.844524][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.868294][ T5597] veth0_macvtap: entered promiscuous mode [ 93.887679][ T5596] veth1_macvtap: entered promiscuous mode [ 94.038291][ T5597] veth1_macvtap: entered promiscuous mode [ 94.282510][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.294499][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.414656][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.434504][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.445236][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.445254][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.637244][ T5796] Bluetooth: MGMT ver 1.23 [ 94.657973][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.657990][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.542053][ T5808] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.022249][ T5805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 99.082356][ T857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.422022][ T1459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.812165][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.812179][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.330633][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.330655][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.341783][ T1139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342283][ T1139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342320][ T1139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342353][ T1139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342386][ T1139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342419][ T1139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342452][ T1139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342485][ T1139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342519][ T1139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342552][ T1139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342585][ T1139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342618][ T1139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342651][ T1139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342684][ T1139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.476501][ T1139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.476542][ T1139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.476577][ T1139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.821364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.081366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.091374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.101400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.161370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.171391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.181370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.191403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.201367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.211375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.936251][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.407949][ T5835] netlink: zone id is out of range [ 103.407995][ T5835] netlink: zone id is out of range [ 103.408003][ T5835] netlink: zone id is out of range [ 103.408010][ T5835] netlink: zone id is out of range [ 103.408016][ T5835] netlink: zone id is out of range [ 103.408023][ T5835] netlink: zone id is out of range [ 103.408030][ T5835] netlink: zone id is out of range [ 103.408037][ T5835] netlink: zone id is out of range [ 103.408044][ T5835] netlink: zone id is out of range [ 103.408052][ T5835] netlink: set zone limit has 4 unknown bytes [ 103.701546][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.701564][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.906732][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.906753][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.439557][ T5838] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17'. [ 107.904162][ T5862] syzkaller0: entered promiscuous mode [ 107.904190][ T5862] syzkaller0: entered allmulticast mode [ 108.118491][ T5871] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 108.736364][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.808154][ T36] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 109.808249][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.808276][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.808297][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.808341][ T36] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.808363][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.923030][ T5886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.24'. [ 110.022598][ T36] usb 1-1: config 0 descriptor?? [ 110.870864][ T36] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 111.768360][ T36] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 111.895477][ T5904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.895632][ T5904] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.953479][ T36] usb 1-1: USB disconnect, device number 2 [ 112.499511][ T5904] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.563234][ T5914] fido_id[5914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 112.648577][ T5904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.648663][ T5904] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.720610][ T5918] FAULT_INJECTION: forcing a failure. [ 112.720610][ T5918] name fail_futex, interval 1, probability 0, space 0, times 1 [ 112.720659][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: syz.4.32 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.720682][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.720698][ T5918] Call Trace: [ 112.720704][ T5918] [ 112.720711][ T5918] dump_stack_lvl+0xe8/0x150 [ 112.720750][ T5918] should_fail_ex+0x467/0x600 [ 112.720785][ T5918] get_futex_key+0x1b3/0x1580 [ 112.720813][ T5918] ? lockdep_unlock+0x5d/0xd0 [ 112.720834][ T5918] ? __pfx_get_futex_key+0x10/0x10 [ 112.720868][ T5918] futex_wait_setup+0x4a/0x590 [ 112.720906][ T5918] ? __futex_wait+0xe1/0x410 [ 112.720940][ T5918] __futex_wait+0x161/0x410 [ 112.720972][ T5918] ? __pfx___futex_wait+0x10/0x10 [ 112.721004][ T5918] ? __pfx_futex_wake_mark+0x10/0x10 [ 112.721036][ T5918] ? futex_hash+0x4e/0x2b0 [ 112.721057][ T5918] ? futex_hash+0x4e/0x2b0 [ 112.721077][ T5918] ? futex_hash+0x275/0x2b0 [ 112.721103][ T5918] futex_wait+0x121/0x390 [ 112.721135][ T5918] ? __pfx_futex_wait+0x10/0x10 [ 112.721182][ T5918] do_futex+0x3e7/0x4e0 [ 112.721207][ T5918] ? lockdep_hardirqs_on+0x7a/0x110 [ 112.721239][ T5918] ? __pfx_do_futex+0x10/0x10 [ 112.721265][ T5918] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 112.721301][ T5918] __se_sys_futex+0x3a8/0x450 [ 112.721329][ T5918] ? ksys_write+0x248/0x270 [ 112.721355][ T5918] ? __pfx___se_sys_futex+0x10/0x10 [ 112.721381][ T5918] ? __pfx_ksys_write+0x10/0x10 [ 112.721413][ T5918] ? __x64_sys_futex+0x21/0xf0 [ 112.721439][ T5918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.721461][ T5918] do_syscall_64+0x174/0x580 [ 112.721489][ T5918] ? trace_irq_disable+0x3b/0x140 [ 112.721507][ T5918] ? clear_bhb_loop+0x40/0x90 [ 112.721529][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.721548][ T5918] RIP: 0033:0x7fdcc649e0d9 [ 112.721575][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.721591][ T5918] RSP: 002b:00007fdcc46d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.721619][ T5918] RAX: ffffffffffffffda RBX: 00007fdcc6726098 RCX: 00007fdcc649e0d9 [ 112.721633][ T5918] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdcc6726098 [ 112.721645][ T5918] RBP: 00007fdcc6726090 R08: 0000000000000000 R09: 0000000000000000 [ 112.721658][ T5918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.721670][ T5918] R13: 00007fdcc6726128 R14: 00007ffe3af2d010 R15: 00007ffe3af2d0f8 [ 112.721697][ T5918] [ 114.410047][ T5904] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.560557][ T5603] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.692623][ T5603] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.973666][ T5904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.974086][ T5904] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.098510][ T5904] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.262697][ T5904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.262775][ T5904] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.466540][ T5904] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.032759][ T5603] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.032796][ T5603] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.032818][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.999868][ T5601] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.223921][ T5904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.315717][ T5904] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.620957][ T5904] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.441743][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.441780][ T5603] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.441803][ T5603] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.150549][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.328427][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.857519][ T59] Bluetooth: hci5: command 0x1003 tx timeout [ 120.858832][ T5601] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.491719][ T5601] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.208043][ T5965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.43'. [ 122.211434][ T5601] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.371479][ T5601] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.479285][ T5601] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.067275][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067742][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.133040][ T5600] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.099797][ T6012] Zero length message leads to an empty skb [ 142.094064][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.173169][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.194769][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.199644][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.219429][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.099055][ T6040] warning: `syz.4.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.381754][ T5601] Bluetooth: hci5: command tx timeout [ 146.451644][ T5601] Bluetooth: hci5: command tx timeout [ 147.502028][ T1042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.273536][ T6073] evm: overlay not supported [ 148.630189][ T5601] Bluetooth: hci5: command tx timeout [ 149.762724][ T1042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.691690][ T5601] Bluetooth: hci5: command tx timeout [ 152.323379][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.551504][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 152.553760][ T31] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 152.553785][ T31] usb 5-1: config 0 has no interface number 0 [ 152.553826][ T31] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.553849][ T31] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 152.553874][ T31] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.553899][ T31] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.553939][ T31] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 152.553961][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.856605][ T31] usb 5-1: config 0 descriptor?? [ 153.275251][ T31] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 154.903602][ T31] usb 5-1: USB disconnect, device number 3 [ 154.942237][ T1042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.207170][ T31] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 155.343213][ T6109] netlink: 48 bytes leftover after parsing attributes in process `syz.4.72'. [ 155.439503][ T6101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.439741][ T6101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.439978][ T6101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.440229][ T6101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.440491][ T6101] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 155.440596][ T6101] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 155.578030][ T6115] netlink: 48 bytes leftover after parsing attributes in process `syz.2.73'. [ 155.892364][ T6101] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 156.007046][ T1042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.023569][ T4357] Bluetooth: hci4: Frame reassembly failed (-84) [ 157.867677][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 157.883195][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.899967][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.911037][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.939599][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.988158][ T5601] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 159.040229][ T6138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.129712][ T5601] Bluetooth: hci5: command 0x0c1a tx timeout [ 162.223463][ T5603] Bluetooth: hci5: command 0x0c1a tx timeout [ 165.200581][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.200706][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.200927][ T6019] bridge_slave_0: entered allmulticast mode [ 165.230565][ T6019] bridge_slave_0: entered promiscuous mode [ 166.197965][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.198080][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.198291][ T6019] bridge_slave_1: entered allmulticast mode [ 166.322667][ T6019] bridge_slave_1: entered promiscuous mode [ 169.184450][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 171.503823][ T1042] bridge_slave_1: left allmulticast mode [ 171.504044][ T1042] bridge_slave_1: left promiscuous mode [ 171.516836][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.916977][ T1042] bridge_slave_0: left allmulticast mode [ 172.917008][ T1042] bridge_slave_0: left promiscuous mode [ 172.918171][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.051509][ T5788] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.236015][ T5788] usb 5-1: Using ep0 maxpacket: 32 [ 173.926269][ T5788] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 173.944338][ T5788] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 173.944369][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 173.944389][ T5788] usb 5-1: Product: syz [ 173.944402][ T5788] usb 5-1: Manufacturer: syz [ 173.944416][ T5788] usb 5-1: SerialNumber: syz [ 174.057396][ T5788] usb 5-1: config 0 descriptor?? [ 174.068724][ T6222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.081878][ T5788] hub 5-1:0.0: bad descriptor, ignoring hub [ 174.081901][ T5788] hub 5-1:0.0: probe with driver hub failed with error -5 [ 174.836835][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.007358][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.658862][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.659198][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.022036][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.082018][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.127082][ T1042] bond0 (unregistering): Released all slaves [ 176.338557][ T6203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.387849][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 176.424718][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.668416][ T6194] raw-gadget.0 gadget.4: failed to queue suspend event [ 176.722386][ T6238] raw-gadget.0 gadget.4: failed to queue disconnect event [ 176.966564][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.224239][ T6019] team0: Port device team_slave_0 added [ 177.243079][ T6019] team0: Port device team_slave_1 added [ 177.500438][ T10] usb 5-1: USB disconnect, device number 4 [ 177.612534][ T5599] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 177.722133][ T5724] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 177.746994][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 177.763730][ T5599] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.763759][ T5599] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.763797][ T5599] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 177.763820][ T5599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.884834][ T5724] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 177.884860][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.884878][ T5724] usb 1-1: config 0 has no interface number 0 [ 177.884913][ T5724] usb 1-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.933796][ T10] usb 5-1: device descriptor read/all, error -71 [ 177.943856][ T5724] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 177.943885][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.943902][ T5724] usb 1-1: Product: syz [ 177.943912][ T5724] usb 1-1: Manufacturer: syz [ 177.943922][ T5724] usb 1-1: SerialNumber: syz [ 178.044615][ T5724] usb 1-1: config 0 descriptor?? [ 178.108672][ T5724] asix 1-1:0.251: probe with driver asix failed with error -22 [ 178.278555][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'. [ 178.339046][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.339063][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.339086][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.422638][ T6257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.435811][ T5599] gud 3-1:1.0: Failed to add properties (error=-32) [ 178.435854][ T5599] gud 3-1:1.0: probe with driver gud failed with error -32 [ 178.567439][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.567456][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.567479][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.765048][ T6266] netlink: zone id is out of range [ 178.765073][ T6266] netlink: zone id is out of range [ 178.765080][ T6266] netlink: zone id is out of range [ 178.765088][ T6266] netlink: zone id is out of range [ 178.765095][ T6266] netlink: zone id is out of range [ 178.765102][ T6266] netlink: zone id is out of range [ 178.765109][ T6266] netlink: zone id is out of range [ 178.765116][ T6266] netlink: zone id is out of range [ 178.799833][ T5599] usb 3-1: USB disconnect, device number 2 [ 179.467264][ T6019] hsr_slave_0: entered promiscuous mode [ 179.470576][ T6019] hsr_slave_1: entered promiscuous mode [ 179.472523][ T6019] debugfs: 'hsr0' already exists in 'hsr' [ 179.472542][ T6019] Cannot create hsr debugfs directory [ 179.821991][ T5599] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 180.803825][ T5599] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.803853][ T5599] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 180.803890][ T5599] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 180.803911][ T5599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.052300][ T5944] usb 1-1: USB disconnect, device number 3 [ 181.119627][ T6294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.108'. [ 181.355366][ T5599] gud 3-1:1.0: probe with driver gud failed with error -71 [ 181.525699][ T5599] usb 3-1: USB disconnect, device number 3 [ 181.677870][ T6297] net_ratelimit: 2 callbacks suppressed [ 181.677890][ T6297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.679882][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 182.090385][ T6307] kernel profiling enabled (shift: 5) [ 183.502908][ T6318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.669424][ T6321] netlink: zone id is out of range [ 183.669438][ T6321] netlink: zone id is out of range [ 183.669445][ T6321] netlink: zone id is out of range [ 183.669453][ T6321] netlink: zone id is out of range [ 183.669460][ T6321] netlink: zone id is out of range [ 183.669483][ T6321] netlink: zone id is out of range [ 183.669491][ T6321] netlink: zone id is out of range [ 183.669498][ T6321] netlink: zone id is out of range [ 183.861838][ T1042] hsr_slave_0: left promiscuous mode [ 185.031642][ T1042] hsr_slave_1: left promiscuous mode [ 185.062273][ T5610] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.808805][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.808900][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.823841][ T5610] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.823872][ T5610] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 185.823909][ T5610] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 185.823931][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.817686][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.817710][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.231611][ T5610] usb 3-1: USB disconnect, device number 4 [ 187.420837][ T1042] veth1_macvtap: left promiscuous mode [ 187.421116][ T1042] veth0_macvtap: left promiscuous mode [ 187.460137][ T1042] veth1_vlan: left promiscuous mode [ 187.460572][ T1042] veth0_vlan: left promiscuous mode [ 188.573946][ T6374] netlink: 48 bytes leftover after parsing attributes in process `syz.0.132'. [ 188.811692][ T5600] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.971402][ T5600] usb 5-1: Using ep0 maxpacket: 8 [ 188.973422][ T5600] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 188.973488][ T5600] usb 5-1: config 0 has no interface number 0 [ 188.973522][ T5600] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.973542][ T5600] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 188.973563][ T5600] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.973584][ T5600] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.973620][ T5600] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 188.973639][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.077468][ T5600] usb 5-1: config 0 descriptor?? [ 189.123856][ T5600] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 189.376729][ T5600] usb 5-1: USB disconnect, device number 7 [ 189.408640][ T5600] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 189.443412][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 189.542079][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 189.766952][ T6358] net_ratelimit: 2 callbacks suppressed [ 189.766969][ T6358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.800599][ T6386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.106629][ T37] audit: type=1800 audit(1785935496.904:2): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.138" name="attr_allow_any_host" dev="configfs" ino=11442 res=0 errno=0 [ 191.175287][ T6400] nvmet: adding nsid 1 to subsystem testnqn [ 191.356968][ T37] audit: type=1800 audit(1785935497.254:3): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.138" name="device_path" dev="configfs" ino=11131 res=0 errno=0 [ 191.487867][ T6408] netlink: zone id is out of range [ 191.487890][ T6408] netlink: zone id is out of range [ 191.487897][ T6408] netlink: zone id is out of range [ 191.487904][ T6408] netlink: zone id is out of range [ 191.487911][ T6408] netlink: zone id is out of range [ 191.487921][ T6408] netlink: zone id is out of range [ 191.487948][ T6408] netlink: zone id is out of range [ 191.487962][ T6408] netlink: zone id is out of range [ 192.020387][ T6417] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 192.812651][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.871939][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.875826][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.877384][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.878155][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.578911][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 194.378821][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378890][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.091905][ T5603] Bluetooth: hci4: command tx timeout [ 197.186019][ T5603] Bluetooth: hci4: command tx timeout [ 197.834219][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 198.964624][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 198.981612][ T6508] net_ratelimit: 4 callbacks suppressed [ 198.981631][ T6508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.332557][ T5603] Bluetooth: hci4: command tx timeout [ 199.511503][ T5724] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.632345][ T5603] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 200.504066][ T5724] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.504106][ T5724] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 200.504229][ T5724] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 200.504291][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.849314][ T37] audit: type=1800 audit(1785935506.744:4): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.161" name="attr_allow_any_host" dev="configfs" ino=12512 res=0 errno=0 [ 200.863821][ T37] audit: type=1800 audit(1785935506.754:5): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.161" name="buffered_io" dev="configfs" ino=12514 res=0 errno=0 [ 201.421417][ T5603] Bluetooth: hci4: command tx timeout [ 201.502771][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 201.504332][ T5724] gud 3-1:1.0: probe with driver gud failed with error -32 [ 201.618091][ T5724] usb 3-1: USB disconnect, device number 5 [ 202.905612][ T6534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.905887][ T6534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.906234][ T6534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.924802][ T6534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.005596][ T6534] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.005693][ T6534] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 203.059586][ T6542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.060313][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 203.142785][ T6534] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 203.195526][ T6551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.931479][ T5603] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.931527][ T5603] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.931554][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.931578][ T5603] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.941492][ T5724] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 205.218874][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.276487][ T5599] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.893370][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 205.900339][ T5724] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 205.900375][ T5724] usb 3-1: config 0 has no interface number 0 [ 205.900418][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.900431][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 205.900444][ T5724] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.900458][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.900481][ T5724] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 205.900492][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.155558][ T5724] usb 3-1: config 0 descriptor?? [ 206.223557][ T5599] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.223585][ T5599] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.223619][ T5599] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 206.223641][ T5599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.265951][ T5724] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 207.295405][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.616916][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.617100][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.617271][ T6446] bridge_slave_0: entered allmulticast mode [ 207.619960][ T6446] bridge_slave_0: entered promiscuous mode [ 207.624387][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.624574][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.624742][ T6446] bridge_slave_1: entered allmulticast mode [ 207.627168][ T6446] bridge_slave_1: entered promiscuous mode [ 207.699087][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.712760][ T5944] usb 3-1: USB disconnect, device number 6 [ 207.750618][ T5944] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 207.771163][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 207.778836][ T5599] gud 5-1:1.0: probe with driver gud failed with error -32 [ 207.805391][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.964954][ T5599] usb 5-1: USB disconnect, device number 8 [ 208.185571][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.185'. [ 208.226482][ T6446] team0: Port device team_slave_0 added [ 208.247764][ T6446] team0: Port device team_slave_1 added [ 208.624071][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.624087][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.624110][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.652158][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.652174][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.652198][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.909359][ T37] audit: type=1800 audit(1785935514.804:6): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.191" name="buffered_io" dev="configfs" ino=12650 res=0 errno=0 [ 208.965471][ T6616] netlink: zone id is out of range [ 208.965485][ T6616] netlink: zone id is out of range [ 208.965493][ T6616] netlink: zone id is out of range [ 208.965500][ T6616] netlink: zone id is out of range [ 208.965507][ T6616] netlink: zone id is out of range [ 208.965514][ T6616] netlink: zone id is out of range [ 208.965522][ T6616] netlink: zone id is out of range [ 208.965529][ T6616] netlink: zone id is out of range [ 208.965536][ T6616] netlink: zone id is out of range [ 208.965544][ T6616] netlink: set zone limit has 4 unknown bytes [ 210.297822][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.720959][ T5944] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 210.768955][ T6446] hsr_slave_0: entered promiscuous mode [ 210.781261][ T6446] hsr_slave_1: entered promiscuous mode [ 210.812473][ T6446] debugfs: 'hsr0' already exists in 'hsr' [ 210.812499][ T6446] Cannot create hsr debugfs directory [ 210.881407][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 210.883852][ T5944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 210.886658][ T5944] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 210.886690][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 210.886710][ T5944] usb 4-1: Product: syz [ 210.886724][ T5944] usb 4-1: Manufacturer: syz [ 210.886738][ T5944] usb 4-1: SerialNumber: syz [ 210.959181][ T5944] usb 4-1: config 0 descriptor?? [ 210.960149][ T6630] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.006480][ T5944] hub 4-1:0.0: bad descriptor, ignoring hub [ 211.006518][ T5944] hub 4-1:0.0: probe with driver hub failed with error -5 [ 211.641594][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.642230][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.684163][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.011183][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.697633][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.798182][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.861482][ T1042] bridge_slave_1: left allmulticast mode [ 216.861515][ T1042] bridge_slave_1: left promiscuous mode [ 216.861759][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.930756][ T5600] usb 4-1: USB disconnect, device number 2 [ 217.126213][ T1042] bridge_slave_0: left allmulticast mode [ 217.126246][ T1042] bridge_slave_0: left promiscuous mode [ 217.126495][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.521682][ T5600] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 218.134033][ T6669] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.205'. [ 218.181408][ T5600] usb 4-1: Using ep0 maxpacket: 8 [ 218.184539][ T5600] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 218.184566][ T5600] usb 4-1: config 0 has no interface number 0 [ 218.184609][ T5600] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 218.184632][ T5600] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 218.184657][ T5600] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.184691][ T5600] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.184733][ T5600] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 218.184755][ T5600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.310954][ T5600] usb 4-1: config 0 descriptor?? [ 218.374896][ T5600] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 218.704248][ T5724] usb 4-1: USB disconnect, device number 3 [ 219.232870][ T5724] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 219.987832][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.198051][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.262915][ T1042] bond0 (unregistering): Released all slaves [ 221.233381][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 224.691447][ T1042] hsr_slave_0: left promiscuous mode [ 224.733616][ T1042] hsr_slave_1: left promiscuous mode [ 224.735244][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.773240][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.825263][ T6726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.216'. [ 226.633622][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 226.692175][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 227.121020][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 227.268746][ T6760] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.220'. [ 228.318864][ T6771] netlink: 48 bytes leftover after parsing attributes in process `syz.0.223'. [ 228.338104][ T6766] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.222'. [ 229.175497][ T6775] net_ratelimit: 2 callbacks suppressed [ 229.175597][ T6775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.940067][ T6781] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.940189][ T6781] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.940295][ T6781] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.940397][ T6781] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.941117][ T6781] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.114605][ T5603] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.114650][ T5603] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.114676][ T5603] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.114689][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.114701][ T5603] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.429388][ T37] audit: type=1800 audit(1785935539.324:7): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.233" name="attr_allow_any_host" dev="configfs" ino=12987 res=0 errno=0 [ 233.473701][ T37] audit: type=1800 audit(1785935539.374:8): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.233" name="device_path" dev="configfs" ino=12989 res=0 errno=0 [ 233.532574][ T37] audit: type=1800 audit(1785935539.414:9): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.233" name="buffered_io" dev="configfs" ino=12990 res=0 errno=0 [ 233.579348][ T37] audit: type=1800 audit(1785935539.474:10): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.233" name="enable" dev="configfs" ino=12276 res=0 errno=0 [ 233.579348][ T37] audit: type=1800 audit(1785935539.474:10): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.233" name="enable" dev="configfs" ino=12276 res=0 errno=0 [ 233.590472][ T6819] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 233.590496][ T6819] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 233.590515][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.0.233 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.590537][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.590549][ T6819] RIP: 0010:strlen+0x29/0x70 [ 233.590586][ T6819] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 233.590602][ T6819] RSP: 0018:ffffc9000523f978 EFLAGS: 00010246 [ 233.590620][ T6819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 233.590640][ T6819] RDX: ffffc90004721000 RSI: 0000000000000041 RDI: 0000000000000000 [ 233.590653][ T6819] RBP: ffffc9000523fab8 R08: 0000000000000000 R09: 0000000000000000 [ 233.590666][ T6819] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: 1ffff92000a47f40 [ 233.590681][ T6819] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 233.590696][ T6819] FS: 00007fc6cbbc66c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 233.590713][ T6819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.590726][ T6819] CR2: 0000001b32612ff8 CR3: 000000006d368000 CR4: 00000000003526f0 [ 233.590744][ T6819] Call Trace: [ 233.590751][ T6819] [ 233.590759][ T6819] do_getname_kernel+0x1d/0x230 [ 233.590779][ T6819] ? getname_kernel+0xd/0x20 [ 233.590798][ T6819] filp_open+0x87/0x1d0 [ 233.590816][ T6819] ? lock_acquire+0x106/0x350 [ 233.590837][ T6819] ? __pfx_filp_open+0x10/0x10 [ 233.590858][ T6819] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 233.590886][ T6819] nvmet_file_ns_enable+0x74/0x360 [ 233.590906][ T6819] ? nvmet_ns_enable+0x4d/0x780 [ 233.590934][ T6819] nvmet_ns_enable+0xaa/0x780 [ 233.590958][ T6819] ? rwbase_write_lock+0x550/0x720 [ 233.590991][ T6819] nvmet_ns_enable_store+0xd7/0x170 [ 233.591015][ T6819] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 233.591037][ T6819] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 233.591063][ T6819] ? configfs_write_iter+0x81/0x430 [ 233.591085][ T6819] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 233.591107][ T6819] configfs_write_iter+0x33a/0x430 [ 233.591131][ T6819] vfs_write+0x61e/0xbb0 [ 233.591157][ T6819] ? __pfx_vfs_write+0x10/0x10 [ 233.591182][ T6819] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 233.591208][ T6819] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.591234][ T6819] ? mutex_lock_nested+0x152/0x1d0 [ 233.591252][ T6819] ? fdget_pos+0x252/0x320 [ 233.591276][ T6819] ksys_write+0x156/0x270 [ 233.591299][ T6819] ? __pfx_ksys_write+0x10/0x10 [ 233.591323][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.591341][ T6819] do_syscall_64+0x174/0x580 [ 233.591367][ T6819] ? trace_irq_disable+0x3b/0x140 [ 233.591386][ T6819] ? clear_bhb_loop+0x40/0x90 [ 233.591408][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.591427][ T6819] RIP: 0033:0x7fc6cd96e0d9 [ 233.591445][ T6819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.591461][ T6819] RSP: 002b:00007fc6cbbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.591480][ T6819] RAX: ffffffffffffffda RBX: 00007fc6cdbf5fa0 RCX: 00007fc6cd96e0d9 [ 233.591494][ T6819] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 233.591506][ T6819] RBP: 00007fc6cda05024 R08: 0000000000000000 R09: 0000000000000000 [ 233.591518][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.591530][ T6819] R13: 00007fc6cdbf6038 R14: 00007fc6cdbf5fa0 R15: 00007ffded59ebd8 [ 233.591552][ T6819] [ 233.591558][ T6819] Modules linked in: [ 233.591614][ T6819] ---[ end trace 0000000000000000 ]--- [ 233.600729][ T6819] RIP: 0010:strlen+0x29/0x70 [ 233.600773][ T6819] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 233.600801][ T6819] RSP: 0018:ffffc9000523f978 EFLAGS: 00010246 [ 233.600820][ T6819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 233.600834][ T6819] RDX: ffffc90004721000 RSI: 0000000000000041 RDI: 0000000000000000 [ 233.600847][ T6819] RBP: ffffc9000523fab8 R08: 0000000000000000 R09: 0000000000000000 [ 233.600859][ T6819] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: 1ffff92000a47f40 [ 233.600874][ T6819] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 233.600890][ T6819] FS: 00007fc6cbbc66c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 233.600907][ T6819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.600921][ T6819] CR2: 0000001b32815ff8 CR3: 000000006d368000 CR4: 00000000003526f0 [ 233.600941][ T6819] Kernel panic - not syncing: Fatal exception [ 233.601091][ T6819] Kernel Offset: disabled