last executing test programs: 12m33.094378528s ago: executing program 3 (id=145): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0xa, 0x81, 0x1000, 0x0, 0xff, 0x0, 0x8, 'syz1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000029c0)={0xa, {"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", 0x1000}}, 0x1006) 12m31.799367881s ago: executing program 3 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 12m31.594391006s ago: executing program 3 (id=149): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x5}) 12m31.380926691s ago: executing program 3 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write$dsp(r0, &(0x7f00000004c0)="5e4a9e958f3bcbbbd41a28aa9c65e77818329a3cea96f38de0a80634208833ba15af93c006b3f6c42c0326e6910b7dc5a083b4fbc2cce2d8e53db05201964b8e7d1015ab9fa9c58fd7035370137e4789cdecfab2a60c11b546a9aad3b154f800f743756cd9f40d042e5a757ab3083694b1686e97", 0x74) 12m31.286251824s ago: executing program 3 (id=152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m28.348498606s ago: executing program 3 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18030000000000000000000000000080851000000600000018000000000000000000000000020000660002000000000018000000000000000000000000000000950000000000000087030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1tu', 0x3) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x400000) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000001700)={{0x3, 0x100, 0x0, 0x2, 0x2, 0x2}, 0x1af, [0x6, 0x3, 0x5, 0x0, 0x90, 0x2290, 0xb, 0x2, 0x107, 0x1, 0x0, 0x1000, 0x0, 0x8e, 0x0, 0x2, 0x4, 0x8, 0x1, 0x10, 0xfffff801, 0x6, 0x7, 0xffffff81, 0x2, 0x1000, 0x3, 0x8, 0x1, 0x8, 0x1, 0x6, 0xd, 0x7, 0x3, 0x5, 0x7, 0x5, 0x0, 0x3ff, 0xff, 0x3f, 0x9, 0x1bb, 0x2, 0x3, 0x2, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1, 0x0, 0x3, 0x374, 0x9, 0x1, 0xfffffff8, 0x67a, 0x2, 0x6, 0x9, 0x6, 0x10001, 0x18f0, 0x5, 0x4, 0x5, 0x60de162a, 0x401, 0x6ce, 0xd, 0x6, 0xb, 0x2, 0x4, 0x10, 0x7ff, 0x3, 0x4, 0x5, 0x0, 0x8, 0x0, 0x6, 0x3, 0x6, 0x0, 0x101, 0x7, 0x3, 0x5, 0x0, 0x0, 0x1000000, 0x2, 0x7, 0x2, 0x2, 0x7, 0x2, 0x80000000, 0x81, 0x7fffffff, 0x5, 0x998, 0x8, 0x3b76, 0x2, 0x6, 0xbd21, 0x7, 0x5, 0xfff, 0x5, 0x10001, 0x8001, 0x8, 0x100, 0x921b, 0x3, 0x80000001, 0x9, 0x81, 0xf0c, 0xd87, 0x10, 0x4c, 0x7fffffff, 0xfffffe01, 0xfffffffe, 0x7, 0xd, 0x2, 0x6, 0x243a, 0x2, 0x6, 0x3, 0x0, 0x2, 0x6, 0x2, 0x6, 0x6, 0xb, 0x0, 0x6, 0x2, 0x2, 0x2, 0x6, 0xfff, 0x6, 0xffff, 0x8825, 0x6, 0xe62c, 0x5, 0x4, 0x115, 0x40, 0xe4, 0xff, 0x37c, 0x8, 0xf3, 0x3, 0x2, 0x9, 0x877, 0x9, 0x2, 0x4, 0x7ff, 0xffff828b, 0x5, 0x15a, 0x8, 0x8, 0x5, 0x8, 0xd95, 0x0, 0xfffffff3, 0x80000000, 0x2, 0x101, 0x4, 0x2, 0x2, 0x9, 0x0, 0xc67, 0xfffffffc, 0x8b, 0x57, 0xfffffff8, 0x8000, 0x4, 0xf, 0x4, 0x8cbc, 0x9, 0x9, 0x4, 0x1, 0x6, 0x2ae, 0x0, 0xca5, 0x7, 0x6, 0x18, 0x200000, 0x3, 0xffffffff, 0x2, 0xffff, 0x5, 0x4, 0x3, 0x9, 0x80000001, 0x7ff, 0x7ed8, 0xfff, 0x2, 0x4, 0x8a, 0x7fff, 0x0, 0x9, 0x6, 0x0, 0x80, 0xe9f4, 0x1, 0x2, 0x4, 0x8000, 0x40, 0xfffffffe, 0x3, 0x2, 0x5e, 0xca, 0x6, 0xfffff000, 0x5, 0x8000, 0x8, 0x10, 0xfffff6dd, 0x2, 0x2, 0x0, 0x2, 0x8000, 0x0, 0x8ba9, 0x2, 0x7, 0x5, 0x1, 0xe73f, 0x9, 0x4, 0x7, 0x2, 0x6, 0x6, 0x6, 0x3, 0x35fc, 0x3, 0x454, 0x6, 0x6, 0xc75, 0x9, 0x9, 0xea75, 0x2, 0x9, 0x1, 0x5, 0x8, 0x6, 0xc, 0x0, 0x3db, 0x899a, 0x50, 0x10001, 0x9, 0x4, 0xa5, 0xb0, 0x4, 0xfffffff7, 0x9, 0x1, 0x0, 0xbd79dc, 0x1ff, 0x4, 0x5, 0x9, 0xe, 0x7, 0x8, 0x10001, 0x5790225a, 0x5, 0x1ff, 0x8, 0x919, 0x6910, 0x0, 0xff, 0x9, 0x9, 0x7, 0x5, 0x2b5, 0xb01, 0x9, 0xfffffffe, 0x4, 0xffff, 0x5, 0x8000, 0xdc, 0x3, 0x5, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x70, 0x5, 0x8000, 0x8, 0x8000, 0xffffffff, 0x0, 0x1000, 0xe4, 0x1, 0x0, 0x0, 0x31, 0x6, 0xb7f, 0x1, 0x4, 0x7fff, 0x101, 0xb86, 0x7, 0x3, 0x1, 0x0, 0x1, 0x4, 0xc, 0x4, 0x400, 0xffffffff, 0x0, 0x1, 0x8, 0x5, 0x3, 0x2, 0x1ed, 0x101, 0x3, 0x6d4f, 0x373a, 0x3ff, 0x7, 0x1, 0x4, 0x4, 0xe, 0x1bb, 0x4, 0x9023, 0x4, 0x1, 0x3, 0x401, 0x4, 0x1, 0xb, 0xb, 0x42d7, 0x300000, 0x7, 0x9, 0x9, 0xc8b, 0x4, 0x10, 0x6, 0x200, 0xd, 0xc, 0x4, 0xd46, 0x8, 0x9, 0x9, 0x1, 0x7, 0x100, 0x2, 0xfffffff7, 0xfffffff7, 0x0, 0x2e00, 0x80, 0x6, 0x5f1c8e65, 0xe51, 0x0, 0x6, 0x9a9, 0xe87, 0x5, 0x6, 0x7, 0x8, 0x10000, 0x200, 0xfffff365, 0x800, 0xffffffff, 0x6, 0xfffffe01, 0x8, 0x40, 0x1000, 0x5, 0x1fffc, 0x9, 0x1, 0x800, 0x1, 0x6, 0x2e2, 0x1, 0x0, 0xef, 0x4e2, 0x4, 0x1, 0x5, 0x7, 0x0, 0x3, 0x4, 0x7, 0x44a, 0x8, 0x400000, 0x8, 0x7, 0x1, 0x7fff, 0x1, 0x814, 0x8, 0x6, 0xd, 0x8001, 0x8, 0x2, 0x9, 0x3, 0xffff092d, 0xffffffc0, 0x5, 0x8, 0x4059, 0x8, 0x5d45, 0x7, 0x7fffffff, 0x7fff, 0x59, 0x7, 0x8, 0xb, 0x2, 0x3, 0x6, 0xffff, 0x40, 0x5, 0xad, 0x7fff, 0x400, 0xfffffff8, 0x1, 0xd02d, 0xffffffff, 0x7f, 0x0, 0x7f, 0x8, 0x3, 0xff, 0x8, 0x7d, 0x6, 0x40, 0xffffffff, 0x4, 0xb, 0x9, 0x6, 0x1, 0x266, 0xfff, 0x1, 0x4, 0x1ff, 0x7ec, 0x6, 0x7, 0xffffffff, 0x3, 0x7, 0x7, 0xa, 0xfffffff8, 0x0, 0xfd74, 0x80000001, 0x2, 0x8, 0x4f0, 0x1, 0x4, 0x8, 0x9, 0x80000001, 0x6, 0x6, 0x2, 0x88000000, 0x7000, 0x7b, 0x0, 0x3ff, 0x1, 0x8, 0x2, 0x3, 0x2, 0xf, 0x81, 0x80000001, 0x7, 0x3, 0xfffffff0, 0x2, 0x78, 0x2, 0xfffffeff, 0x2, 0xc, 0xc8d, 0x22dd, 0x5fe1, 0x800, 0x6, 0x488, 0x2, 0x5, 0x8000, 0x4, 0x2, 0xfffffff7, 0x0, 0xda, 0xde, 0x6, 0x80, 0x200, 0x6, 0x6, 0xd, 0x1, 0x1ff, 0x0, 0x8, 0xab, 0x6, 0x19722852, 0x7, 0x9503, 0x1, 0x0, 0x5, 0x7, 0xfffffffe, 0xd, 0x101, 0x0, 0xef, 0x40, 0x4000000, 0xfffffffb, 0x6, 0x3, 0x3, 0x4, 0xc, 0x10001, 0x9, 0x9, 0xfbe, 0x7, 0x5d58, 0x8000, 0x8000, 0xfffffffc, 0x73ca, 0x6, 0x401, 0x3, 0xc, 0xffffd725, 0x5, 0x800, 0x3, 0x7, 0x7, 0x400, 0x3, 0x30, 0x3, 0x3, 0xed8, 0x8, 0x8001, 0x3, 0x1d3f, 0x7, 0xfcf4, 0xffffff7f, 0x6, 0x8, 0x8, 0x1e90, 0x401, 0x0, 0x100, 0x6, 0xfdf5, 0x7, 0xf, 0x8, 0x7ff, 0x8, 0x7, 0xffffff6a, 0x9, 0x8, 0xc, 0x2, 0x4, 0x100, 0xffff, 0x1000, 0x5, 0x997, 0x1000, 0x2, 0x4, 0x436e, 0x2, 0x9ffe, 0x7, 0x4, 0x7, 0x4, 0x9, 0x101, 0x8, 0xb0, 0x400, 0x3, 0x2, 0xfffffff3, 0x6, 0x4, 0xfd4, 0xfffffffe, 0x895, 0x7, 0x8, 0x10, 0x0, 0xf8e, 0x401, 0x8, 0x1, 0x200, 0xffffec2f, 0x6, 0x47, 0x40, 0x6d, 0xf992, 0x0, 0x0, 0x2, 0x7f, 0x1d1, 0x8, 0x3, 0x1, 0x9, 0x4, 0x5, 0x85f7, 0x8, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x5, 0x8, 0x0, 0x3254, 0x5, 0x7, 0x8000, 0x5, 0xfffffffa, 0x5, 0x0, 0x3, 0x100, 0xd763, 0xfffffff2, 0x1000, 0x1, 0x7, 0x6de, 0x44, 0x3, 0x935, 0xffffffff, 0x0, 0x5, 0x8, 0x1, 0xfffffff9, 0x0, 0x6, 0x0, 0x0, 0x8, 0x6, 0x80, 0x0, 0x5, 0x200, 0xa4df, 0x2, 0x9, 0x6, 0x9f2, 0x1, 0x58000000, 0xfffffffe, 0x8, 0x9, 0xfff, 0x9, 0x85, 0x4, 0xcf02, 0x4, 0x6, 0xfff, 0x1, 0x0, 0xf46e, 0xfff, 0xc36, 0x9, 0xc4000000, 0x9cc7, 0x2, 0x40, 0x7, 0x4dbd, 0x7, 0x8, 0x80, 0xb, 0x1, 0x5, 0x9, 0x3, 0x9349, 0xf, 0x8, 0x1, 0x7fff, 0x6, 0x7f, 0x7, 0x10001, 0x1c, 0x3f, 0x2, 0x73, 0x7f, 0xfffffffc, 0x7, 0x5, 0x0, 0x27, 0x0, 0x3, 0x3, 0x8, 0x8, 0x6, 0x4, 0xfffffffc, 0xffffffff, 0x7f, 0x6, 0xfffffff4, 0xb, 0xfffffe01, 0x9, 0x4c, 0x4, 0x1, 0xae, 0x29, 0x4, 0x8001, 0x3, 0x5, 0x2, 0x1, 0x3, 0x0, 0x6, 0x1, 0x2400, 0xd, 0x2, 0x10001, 0xa3, 0xffffffff, 0x1, 0x6, 0x7, 0x2, 0x4, 0x0, 0x401, 0x8, 0x5, 0x6, 0xb27, 0x100, 0x2, 0x6, 0x81, 0x0, 0xb1, 0xfff, 0x8, 0x2, 0x5, 0xfffff800, 0x5, 0xbe3, 0x5, 0x1000, 0x6f, 0x9, 0x5ce9, 0x2, 0x10001, 0x6, 0x7fff, 0x3, 0x887, 0x401, 0xff, 0x1, 0x2, 0x7, 0xffffffff, 0x9, 0x9, 0x3e, 0x6, 0x7fffffff, 0xfff, 0x3ff, 0x1, 0x4, 0x6, 0x800, 0xffffffff, 0x100, 0x6, 0x8, 0x7fff, 0x9, 0x400, 0x3, 0x8001, 0xb9, 0x7, 0x7, 0x4, 0x80000001, 0x6, 0x2, 0x7f, 0x7fff, 0x9, 0x7fff, 0x5, 0x8, 0x5, 0x8, 0x159, 0x1000, 0x7, 0xe, 0x4d, 0x8, 0x80000001, 0x887b, 0x8, 0xfa3, 0x9, 0x8, 0x9, 0x0, 0x6, 0x5, 0x6, 0x105, 0xff, 0xfe0, 0x7ff, 0xb, 0x3, 0x63, 0x1, 0x7, 0x1, 0xb677, 0x5, 0x3, 0x551d, 0x3, 0x4, 0xe47b, 0xfffffffe, 0x4, 0x101, 0x7, 0x9, 0x401, 0xb, 0x9, 0x1, 0xfffffff9, 0x80000000, 0xc, 0x0, 0x2, 0x75f04fe0, 0xfff, 0x40, 0xb, 0x2, 0x401, 0x7fff, 0x5, 0xff, 0x7fff, 0x80, 0x3, 0x2, 0xd, 0xb433, 0x5, 0x2, 0x3ff, 0xf02, 0x5, 0xf419, 0x2b, 0x6, 0x7, 0x8, 0x1, 0x5, 0x6]}) 12m13.317579516s ago: executing program 32 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18030000000000000000000000000080851000000600000018000000000000000000000000020000660002000000000018000000000000000000000000000000950000000000000087030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1tu', 0x3) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x400000) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000001700)={{0x3, 0x100, 0x0, 0x2, 0x2, 0x2}, 0x1af, [0x6, 0x3, 0x5, 0x0, 0x90, 0x2290, 0xb, 0x2, 0x107, 0x1, 0x0, 0x1000, 0x0, 0x8e, 0x0, 0x2, 0x4, 0x8, 0x1, 0x10, 0xfffff801, 0x6, 0x7, 0xffffff81, 0x2, 0x1000, 0x3, 0x8, 0x1, 0x8, 0x1, 0x6, 0xd, 0x7, 0x3, 0x5, 0x7, 0x5, 0x0, 0x3ff, 0xff, 0x3f, 0x9, 0x1bb, 0x2, 0x3, 0x2, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1, 0x0, 0x3, 0x374, 0x9, 0x1, 0xfffffff8, 0x67a, 0x2, 0x6, 0x9, 0x6, 0x10001, 0x18f0, 0x5, 0x4, 0x5, 0x60de162a, 0x401, 0x6ce, 0xd, 0x6, 0xb, 0x2, 0x4, 0x10, 0x7ff, 0x3, 0x4, 0x5, 0x0, 0x8, 0x0, 0x6, 0x3, 0x6, 0x0, 0x101, 0x7, 0x3, 0x5, 0x0, 0x0, 0x1000000, 0x2, 0x7, 0x2, 0x2, 0x7, 0x2, 0x80000000, 0x81, 0x7fffffff, 0x5, 0x998, 0x8, 0x3b76, 0x2, 0x6, 0xbd21, 0x7, 0x5, 0xfff, 0x5, 0x10001, 0x8001, 0x8, 0x100, 0x921b, 0x3, 0x80000001, 0x9, 0x81, 0xf0c, 0xd87, 0x10, 0x4c, 0x7fffffff, 0xfffffe01, 0xfffffffe, 0x7, 0xd, 0x2, 0x6, 0x243a, 0x2, 0x6, 0x3, 0x0, 0x2, 0x6, 0x2, 0x6, 0x6, 0xb, 0x0, 0x6, 0x2, 0x2, 0x2, 0x6, 0xfff, 0x6, 0xffff, 0x8825, 0x6, 0xe62c, 0x5, 0x4, 0x115, 0x40, 0xe4, 0xff, 0x37c, 0x8, 0xf3, 0x3, 0x2, 0x9, 0x877, 0x9, 0x2, 0x4, 0x7ff, 0xffff828b, 0x5, 0x15a, 0x8, 0x8, 0x5, 0x8, 0xd95, 0x0, 0xfffffff3, 0x80000000, 0x2, 0x101, 0x4, 0x2, 0x2, 0x9, 0x0, 0xc67, 0xfffffffc, 0x8b, 0x57, 0xfffffff8, 0x8000, 0x4, 0xf, 0x4, 0x8cbc, 0x9, 0x9, 0x4, 0x1, 0x6, 0x2ae, 0x0, 0xca5, 0x7, 0x6, 0x18, 0x200000, 0x3, 0xffffffff, 0x2, 0xffff, 0x5, 0x4, 0x3, 0x9, 0x80000001, 0x7ff, 0x7ed8, 0xfff, 0x2, 0x4, 0x8a, 0x7fff, 0x0, 0x9, 0x6, 0x0, 0x80, 0xe9f4, 0x1, 0x2, 0x4, 0x8000, 0x40, 0xfffffffe, 0x3, 0x2, 0x5e, 0xca, 0x6, 0xfffff000, 0x5, 0x8000, 0x8, 0x10, 0xfffff6dd, 0x2, 0x2, 0x0, 0x2, 0x8000, 0x0, 0x8ba9, 0x2, 0x7, 0x5, 0x1, 0xe73f, 0x9, 0x4, 0x7, 0x2, 0x6, 0x6, 0x6, 0x3, 0x35fc, 0x3, 0x454, 0x6, 0x6, 0xc75, 0x9, 0x9, 0xea75, 0x2, 0x9, 0x1, 0x5, 0x8, 0x6, 0xc, 0x0, 0x3db, 0x899a, 0x50, 0x10001, 0x9, 0x4, 0xa5, 0xb0, 0x4, 0xfffffff7, 0x9, 0x1, 0x0, 0xbd79dc, 0x1ff, 0x4, 0x5, 0x9, 0xe, 0x7, 0x8, 0x10001, 0x5790225a, 0x5, 0x1ff, 0x8, 0x919, 0x6910, 0x0, 0xff, 0x9, 0x9, 0x7, 0x5, 0x2b5, 0xb01, 0x9, 0xfffffffe, 0x4, 0xffff, 0x5, 0x8000, 0xdc, 0x3, 0x5, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x70, 0x5, 0x8000, 0x8, 0x8000, 0xffffffff, 0x0, 0x1000, 0xe4, 0x1, 0x0, 0x0, 0x31, 0x6, 0xb7f, 0x1, 0x4, 0x7fff, 0x101, 0xb86, 0x7, 0x3, 0x1, 0x0, 0x1, 0x4, 0xc, 0x4, 0x400, 0xffffffff, 0x0, 0x1, 0x8, 0x5, 0x3, 0x2, 0x1ed, 0x101, 0x3, 0x6d4f, 0x373a, 0x3ff, 0x7, 0x1, 0x4, 0x4, 0xe, 0x1bb, 0x4, 0x9023, 0x4, 0x1, 0x3, 0x401, 0x4, 0x1, 0xb, 0xb, 0x42d7, 0x300000, 0x7, 0x9, 0x9, 0xc8b, 0x4, 0x10, 0x6, 0x200, 0xd, 0xc, 0x4, 0xd46, 0x8, 0x9, 0x9, 0x1, 0x7, 0x100, 0x2, 0xfffffff7, 0xfffffff7, 0x0, 0x2e00, 0x80, 0x6, 0x5f1c8e65, 0xe51, 0x0, 0x6, 0x9a9, 0xe87, 0x5, 0x6, 0x7, 0x8, 0x10000, 0x200, 0xfffff365, 0x800, 0xffffffff, 0x6, 0xfffffe01, 0x8, 0x40, 0x1000, 0x5, 0x1fffc, 0x9, 0x1, 0x800, 0x1, 0x6, 0x2e2, 0x1, 0x0, 0xef, 0x4e2, 0x4, 0x1, 0x5, 0x7, 0x0, 0x3, 0x4, 0x7, 0x44a, 0x8, 0x400000, 0x8, 0x7, 0x1, 0x7fff, 0x1, 0x814, 0x8, 0x6, 0xd, 0x8001, 0x8, 0x2, 0x9, 0x3, 0xffff092d, 0xffffffc0, 0x5, 0x8, 0x4059, 0x8, 0x5d45, 0x7, 0x7fffffff, 0x7fff, 0x59, 0x7, 0x8, 0xb, 0x2, 0x3, 0x6, 0xffff, 0x40, 0x5, 0xad, 0x7fff, 0x400, 0xfffffff8, 0x1, 0xd02d, 0xffffffff, 0x7f, 0x0, 0x7f, 0x8, 0x3, 0xff, 0x8, 0x7d, 0x6, 0x40, 0xffffffff, 0x4, 0xb, 0x9, 0x6, 0x1, 0x266, 0xfff, 0x1, 0x4, 0x1ff, 0x7ec, 0x6, 0x7, 0xffffffff, 0x3, 0x7, 0x7, 0xa, 0xfffffff8, 0x0, 0xfd74, 0x80000001, 0x2, 0x8, 0x4f0, 0x1, 0x4, 0x8, 0x9, 0x80000001, 0x6, 0x6, 0x2, 0x88000000, 0x7000, 0x7b, 0x0, 0x3ff, 0x1, 0x8, 0x2, 0x3, 0x2, 0xf, 0x81, 0x80000001, 0x7, 0x3, 0xfffffff0, 0x2, 0x78, 0x2, 0xfffffeff, 0x2, 0xc, 0xc8d, 0x22dd, 0x5fe1, 0x800, 0x6, 0x488, 0x2, 0x5, 0x8000, 0x4, 0x2, 0xfffffff7, 0x0, 0xda, 0xde, 0x6, 0x80, 0x200, 0x6, 0x6, 0xd, 0x1, 0x1ff, 0x0, 0x8, 0xab, 0x6, 0x19722852, 0x7, 0x9503, 0x1, 0x0, 0x5, 0x7, 0xfffffffe, 0xd, 0x101, 0x0, 0xef, 0x40, 0x4000000, 0xfffffffb, 0x6, 0x3, 0x3, 0x4, 0xc, 0x10001, 0x9, 0x9, 0xfbe, 0x7, 0x5d58, 0x8000, 0x8000, 0xfffffffc, 0x73ca, 0x6, 0x401, 0x3, 0xc, 0xffffd725, 0x5, 0x800, 0x3, 0x7, 0x7, 0x400, 0x3, 0x30, 0x3, 0x3, 0xed8, 0x8, 0x8001, 0x3, 0x1d3f, 0x7, 0xfcf4, 0xffffff7f, 0x6, 0x8, 0x8, 0x1e90, 0x401, 0x0, 0x100, 0x6, 0xfdf5, 0x7, 0xf, 0x8, 0x7ff, 0x8, 0x7, 0xffffff6a, 0x9, 0x8, 0xc, 0x2, 0x4, 0x100, 0xffff, 0x1000, 0x5, 0x997, 0x1000, 0x2, 0x4, 0x436e, 0x2, 0x9ffe, 0x7, 0x4, 0x7, 0x4, 0x9, 0x101, 0x8, 0xb0, 0x400, 0x3, 0x2, 0xfffffff3, 0x6, 0x4, 0xfd4, 0xfffffffe, 0x895, 0x7, 0x8, 0x10, 0x0, 0xf8e, 0x401, 0x8, 0x1, 0x200, 0xffffec2f, 0x6, 0x47, 0x40, 0x6d, 0xf992, 0x0, 0x0, 0x2, 0x7f, 0x1d1, 0x8, 0x3, 0x1, 0x9, 0x4, 0x5, 0x85f7, 0x8, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x5, 0x8, 0x0, 0x3254, 0x5, 0x7, 0x8000, 0x5, 0xfffffffa, 0x5, 0x0, 0x3, 0x100, 0xd763, 0xfffffff2, 0x1000, 0x1, 0x7, 0x6de, 0x44, 0x3, 0x935, 0xffffffff, 0x0, 0x5, 0x8, 0x1, 0xfffffff9, 0x0, 0x6, 0x0, 0x0, 0x8, 0x6, 0x80, 0x0, 0x5, 0x200, 0xa4df, 0x2, 0x9, 0x6, 0x9f2, 0x1, 0x58000000, 0xfffffffe, 0x8, 0x9, 0xfff, 0x9, 0x85, 0x4, 0xcf02, 0x4, 0x6, 0xfff, 0x1, 0x0, 0xf46e, 0xfff, 0xc36, 0x9, 0xc4000000, 0x9cc7, 0x2, 0x40, 0x7, 0x4dbd, 0x7, 0x8, 0x80, 0xb, 0x1, 0x5, 0x9, 0x3, 0x9349, 0xf, 0x8, 0x1, 0x7fff, 0x6, 0x7f, 0x7, 0x10001, 0x1c, 0x3f, 0x2, 0x73, 0x7f, 0xfffffffc, 0x7, 0x5, 0x0, 0x27, 0x0, 0x3, 0x3, 0x8, 0x8, 0x6, 0x4, 0xfffffffc, 0xffffffff, 0x7f, 0x6, 0xfffffff4, 0xb, 0xfffffe01, 0x9, 0x4c, 0x4, 0x1, 0xae, 0x29, 0x4, 0x8001, 0x3, 0x5, 0x2, 0x1, 0x3, 0x0, 0x6, 0x1, 0x2400, 0xd, 0x2, 0x10001, 0xa3, 0xffffffff, 0x1, 0x6, 0x7, 0x2, 0x4, 0x0, 0x401, 0x8, 0x5, 0x6, 0xb27, 0x100, 0x2, 0x6, 0x81, 0x0, 0xb1, 0xfff, 0x8, 0x2, 0x5, 0xfffff800, 0x5, 0xbe3, 0x5, 0x1000, 0x6f, 0x9, 0x5ce9, 0x2, 0x10001, 0x6, 0x7fff, 0x3, 0x887, 0x401, 0xff, 0x1, 0x2, 0x7, 0xffffffff, 0x9, 0x9, 0x3e, 0x6, 0x7fffffff, 0xfff, 0x3ff, 0x1, 0x4, 0x6, 0x800, 0xffffffff, 0x100, 0x6, 0x8, 0x7fff, 0x9, 0x400, 0x3, 0x8001, 0xb9, 0x7, 0x7, 0x4, 0x80000001, 0x6, 0x2, 0x7f, 0x7fff, 0x9, 0x7fff, 0x5, 0x8, 0x5, 0x8, 0x159, 0x1000, 0x7, 0xe, 0x4d, 0x8, 0x80000001, 0x887b, 0x8, 0xfa3, 0x9, 0x8, 0x9, 0x0, 0x6, 0x5, 0x6, 0x105, 0xff, 0xfe0, 0x7ff, 0xb, 0x3, 0x63, 0x1, 0x7, 0x1, 0xb677, 0x5, 0x3, 0x551d, 0x3, 0x4, 0xe47b, 0xfffffffe, 0x4, 0x101, 0x7, 0x9, 0x401, 0xb, 0x9, 0x1, 0xfffffff9, 0x80000000, 0xc, 0x0, 0x2, 0x75f04fe0, 0xfff, 0x40, 0xb, 0x2, 0x401, 0x7fff, 0x5, 0xff, 0x7fff, 0x80, 0x3, 0x2, 0xd, 0xb433, 0x5, 0x2, 0x3ff, 0xf02, 0x5, 0xf419, 0x2b, 0x6, 0x7, 0x8, 0x1, 0x5, 0x6]}) 10m51.955331942s ago: executing program 1 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x80000000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x4c) 10m50.80632936s ago: executing program 1 (id=362): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x20, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 10m48.284117792s ago: executing program 1 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='dummy_udc.0', 0xb) 10m45.843088332s ago: executing program 1 (id=370): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r4) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x14c, 0x1d8, 0x1d8, 0x14c, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0xffffffff, 0xffffff00, 'veth0_to_bridge\x00', 'caif0\x00', {}, {}, 0x5c, 0x1, 0x6c}, 0x9400, 0x70, 0x94, 0x94}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500", @ANYRES32], 0x1c}}, 0x40000) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') chdir(0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$nci(r0, 0x0, 0x0) 10m43.218296897s ago: executing program 1 (id=375): socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003000300000000000000140000001100"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x9, 0x0, 0x0, 0x9, 0xfe, 0x10d0, 0x5, 0xf, 0x2, 0xfffffffe, 'syz0\x00'}) shutdown(r0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r2 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000180)={0x7fffffffffffffff, 0x10001}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xaa, 0xffff, 0x8, 0xa, 0xfffffb3a}, 0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x7}, 0x8) 10m39.570014227s ago: executing program 1 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x1bbc, 0x801) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000}, 0x8) close(r6) write(0xffffffffffffffff, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) 10m22.434080629s ago: executing program 33 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x1bbc, 0x801) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000}, 0x8) close(r6) write(0xffffffffffffffff, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) 10m1.018066367s ago: executing program 4 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88582, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r5, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x4c831, r3, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1f}, {0xffff, 0xc}, {0xfff1, 0xc}}, [{0x8, 0xb, 0x80}]}, 0x2c}}, 0x20004084) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10m0.786734693s ago: executing program 5 (id=429): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 9m59.69168576s ago: executing program 5 (id=430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9m59.29011239s ago: executing program 4 (id=432): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r4, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 9m58.738175193s ago: executing program 4 (id=434): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f00000000c0)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/fs/cifs/open_files\x00', 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000003c0)={{0x4, 0x1, 0x5, 0xe, 'syz1\x00', 0x67}, 0x4, 0x40, 0x8, 0x0, 0x0, 0x5, 'syz1\x00', 0x0}) read(r2, &(0x7f0000000100)=""/256, 0x100) sendto$inet6(r1, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 9m57.901496313s ago: executing program 5 (id=436): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1f, 0x0, 0x1000000}) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a310000000009000171c5797a3100000000801400008004000180080003c000000001040002801400000011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 9m56.606316356s ago: executing program 4 (id=437): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 9m56.44263401s ago: executing program 5 (id=439): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="31301f31203100", 0x7) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fa9000/0x9000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e}) socket$inet6(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) 9m51.046238363s ago: executing program 5 (id=440): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, 0x0, 0x0, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 9m51.045547423s ago: executing program 4 (id=441): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8084) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl(r4, 0x4048aecb, &(0x7f0000600100)="070000000000000001") 9m49.807321083s ago: executing program 5 (id=444): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 9m48.450581146s ago: executing program 4 (id=446): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x14c, 0x1d8, 0x1d8, 0x14c, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0xffffffff, 0xffffff00, 'veth0_to_bridge\x00', 'caif0\x00', {}, {}, 0x5c, 0x1, 0x6c}, 0x9400, 0x70, 0x94, 0x94}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500", @ANYRES32], 0x1c}}, 0x40000) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') chdir(0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$nci(r0, 0x0, 0x0) 9m34.561719209s ago: executing program 34 (id=444): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 9m33.421101577s ago: executing program 35 (id=446): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x14c, 0x1d8, 0x1d8, 0x14c, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0xffffffff, 0xffffff00, 'veth0_to_bridge\x00', 'caif0\x00', {}, {}, 0x5c, 0x1, 0x6c}, 0x9400, 0x70, 0x94, 0x94}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500", @ANYRES32], 0x1c}}, 0x40000) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') chdir(0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$nci(r0, 0x0, 0x0) 3m18.985112755s ago: executing program 8 (id=801): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m17.638757068s ago: executing program 8 (id=805): r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 3m11.8846295s ago: executing program 8 (id=807): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/73, 0x49}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x1f, 0x0, 0x1000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYRES32=0x0], 0x50) socket(0x10, 0x3, 0x0) 3m11.277747934s ago: executing program 8 (id=809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m6.649402779s ago: executing program 8 (id=816): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m1.774260819s ago: executing program 8 (id=821): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="31301f31203100", 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fa9000/0x9000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e}) socket$inet6(0x10, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) 2m44.785070058s ago: executing program 36 (id=821): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="31301f31203100", 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fa9000/0x9000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e}) socket$inet6(0x10, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) 22.618840495s ago: executing program 0 (id=1013): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="00f2ff00"/14, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e) 22.329359222s ago: executing program 0 (id=1016): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(0x0, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1f, 0x0, 0x1000000}) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a310000000009000171c5797a3100000000801400008004000180080003c000000001040002801400000011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 21.286334828s ago: executing program 0 (id=1018): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x20, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x4) 16.118783824s ago: executing program 2 (id=1024): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, [0x7, 0x6, 0x1, 0x7, 0x1], [0x5, 0x9, 0x8, 0x9, 0x79, 0x0, 0x1ff, 0x1, 0xc, 0x9, 0xaec, 0x4, 0x240000000, 0x2, 0x8, 0xfff, 0x2, 0x8, 0x5db799be, 0xfffffffffffffff9, 0xf, 0x8, 0xff, 0x54f, 0x2, 0xfa9, 0x81cf, 0x5, 0x6e48, 0x30, 0xfff, 0x0, 0x8000000000000000, 0x3, 0x5, 0x7fffffffffffffff, 0x9, 0xcb2, 0x9, 0x2, 0x5, 0x72e4ca40, 0x0, 0x7, 0x3ff, 0x5, 0x9, 0x1, 0x8, 0x1, 0xff, 0xff, 0xfffffffffffffffb, 0x7fffffff, 0x4, 0x5, 0xf, 0x1e27, 0xfe7, 0x7fff, 0x7, 0xffffffff, 0x7f, 0xfffffffffffffffe, 0x30e, 0x5, 0x2, 0xcf, 0x7, 0x6, 0x4, 0x6, 0x5, 0x9, 0x6, 0x7fffffffffffffff, 0x1, 0x7, 0x2, 0xffff, 0x5, 0x0, 0x53b, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x7f, 0x80000001, 0x0, 0xe, 0x9c05, 0xa, 0xfcf800000, 0x7, 0x1, 0x5, 0x4, 0x2, 0x614, 0x4, 0xf77, 0x2, 0x9, 0x0, 0x2, 0x1, 0x0, 0x3, 0x8, 0x5, 0x73001015, 0x8, 0x8000, 0x0, 0x8000000000000001, 0x400, 0x63c, 0x3, 0xfffffffffffffffb, 0xffffffffffff8000, 0x5, 0xe]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000d40)={r1, "897ea1f8ff36bbfedfe6b210147ef87a"}) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x28c000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) 15.800030002s ago: executing program 0 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88582, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r5, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x4c831, r3, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1f}, {0xffff, 0xc}, {0xfff1, 0xc}}, [{0x8, 0xb, 0x80}]}, 0x2c}}, 0x20004084) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 15.799524632s ago: executing program 6 (id=1027): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a310000000009000171c5797a3100000000801400008004000180080003c000000001040002801400000011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 15.786301452s ago: executing program 2 (id=1028): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000740)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@flushoncommit}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") 14.735667718s ago: executing program 6 (id=1030): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x30) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f00000001c0)=[{0x5, 0x4, 0x4}]}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000) 11.891894238s ago: executing program 6 (id=1032): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) landlock_restrict_self(0xffffffffffffffff, 0xb) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) close_range(r1, r2, 0x0) 11.650010864s ago: executing program 7 (id=1033): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3a76, 0x10, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593f16430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccce2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f13132773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde070a004c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912f3fcd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5326a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x978, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 11.604147675s ago: executing program 2 (id=1034): preadv(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8009000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe1001000071101a00000000009580000012000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xfffffffffffff1d2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000fffffffff5ffffff00000000000900020073797a30000000000800410073697700140033006c6f000000ac365072ace2e050000000b50e80115300"/71], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='id_ext=0,ioc_guid=0', 0x13) 8.864881892s ago: executing program 6 (id=1035): r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 8.731251396s ago: executing program 7 (id=1036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000300), 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r5, r5, 0x0) r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0xc, 0x0, 0x5, 0x7fff7ffc}, {0x0, 0xfd, 0x11, 0x7fffffff}]}) r7 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 8.439983693s ago: executing program 0 (id=1037): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0xffffffff}) close_range(r3, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004001000050000000400000001000000", @ANYRES32, @ANYBLOB="7171ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000d000000505a0421d922d5d9000000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, r0}]) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdfef2571250008000300", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x404c800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, r2}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) 6.118250649s ago: executing program 7 (id=1038): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, [0x7, 0x6, 0x1, 0x7, 0x1], [0x5, 0x9, 0x8, 0x9, 0x79, 0x0, 0x1ff, 0x1, 0xc, 0x9, 0xaec, 0x4, 0x240000000, 0x2, 0x8, 0xfff, 0x2, 0x8, 0x5db799be, 0xfffffffffffffff9, 0xf, 0x8, 0xff, 0x54f, 0x2, 0xfa9, 0x81cf, 0x5, 0x6e48, 0x30, 0xfff, 0x0, 0x8000000000000000, 0x3, 0x5, 0x7fffffffffffffff, 0x9, 0xcb2, 0x9, 0x2, 0x5, 0x72e4ca40, 0x0, 0x7, 0x3ff, 0x5, 0x9, 0x1, 0x8, 0x1, 0xff, 0xff, 0xfffffffffffffffb, 0x7fffffff, 0x4, 0x5, 0xf, 0x1e27, 0xfe7, 0x7fff, 0x7, 0xffffffff, 0x7f, 0xfffffffffffffffe, 0x30e, 0x5, 0x2, 0xcf, 0x7, 0x6, 0x4, 0x6, 0x5, 0x9, 0x6, 0x7fffffffffffffff, 0x1, 0x7, 0x2, 0xffff, 0x5, 0x0, 0x53b, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x7f, 0x80000001, 0x0, 0xe, 0x9c05, 0xa, 0xfcf800000, 0x7, 0x1, 0x5, 0x4, 0x2, 0x614, 0x4, 0xf77, 0x2, 0x9, 0x0, 0x2, 0x1, 0x0, 0x3, 0x8, 0x5, 0x73001015, 0x8, 0x8000, 0x0, 0x8000000000000001, 0x400, 0x63c, 0x3, 0xfffffffffffffffb, 0xffffffffffff8000, 0x5, 0xe]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000d40)={r1, "897ea1f8ff36bbfedfe6b210147ef87a"}) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x28c000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) 4.879349s ago: executing program 7 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002e80)={0x2020}, 0x2020) 3.178250382s ago: executing program 7 (id=1040): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4044044) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x2, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x4, 0x1, 0x3, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0xc59, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.130355143s ago: executing program 6 (id=1041): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.108044323s ago: executing program 2 (id=1042): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.955956587s ago: executing program 0 (id=1043): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.734500063s ago: executing program 6 (id=1044): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$pptp(0x18, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.550134268s ago: executing program 2 (id=1045): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0xa, 0x2400000001, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) getrlimit(0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @none, 0x7f}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.253346549s ago: executing program 7 (id=1046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88582, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r5, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x4c831, r3, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1f}, {0xffff, 0xc}, {0xfff1, 0xc}}, [{0x8, 0xb, 0x80}]}, 0x2c}}, 0x20004084) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 0s ago: executing program 2 (id=1047): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp1250 1 [ 456.193807][ T6824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 456.207288][ T6824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 456.219114][ T6824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 456.230781][ T6824] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 456.239200][ T6824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.354991][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.362091][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.551197][ T7131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.612052][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.632987][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.704189][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.763648][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.770651][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.830485][ T7131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.868882][ T7209] lo speed is unknown, defaulting to 1000 [ 457.069957][ T7128] device hsr_slave_0 entered promiscuous mode [ 457.100566][ T7128] device hsr_slave_1 entered promiscuous mode [ 457.117430][ T7128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.138278][ T7128] Cannot create hsr debugfs directory [ 457.359007][ T7131] device hsr_slave_0 entered promiscuous mode [ 457.371012][ T7131] device hsr_slave_1 entered promiscuous mode [ 457.383824][ T7131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.397142][ T7131] Cannot create hsr debugfs directory [ 457.905269][ T7228] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 457.931393][ T7228] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 458.020457][ T7225] Invalid option length (1047276) for dns_resolver key [ 458.036904][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.588'. [ 458.056699][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.588'. [ 458.074926][ T7231] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 458.265844][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 458.311682][ T6824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 458.323170][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 458.325179][ T6824] CPU: 0 PID: 6824 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 458.337917][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.347990][ T6824] Workqueue: hci2 hci_rx_work [ 458.352829][ T6824] Call Trace: [ 458.356119][ T6824] [ 458.359061][ T6824] dump_stack_lvl+0x188/0x24e [ 458.363780][ T6824] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 458.370054][ T6824] ? show_regs_print_info+0x12/0x12 [ 458.375266][ T6824] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 458.381491][ T6824] sysfs_create_dir_ns+0x26a/0x290 [ 458.386634][ T6824] ? __lock_acquire+0x7c40/0x7c40 [ 458.391685][ T6824] ? sysfs_warn_dup+0xa0/0xa0 [ 458.396378][ T6824] ? do_raw_spin_unlock+0x11d/0x230 [ 458.401604][ T6824] kobject_add_internal+0x617/0xca0 [ 458.406835][ T6824] kobject_add+0x160/0x230 [ 458.411249][ T6824] ? kobject_init+0x1c0/0x1c0 [ 458.415942][ T6824] ? __raw_spin_lock_init+0x41/0x100 [ 458.421238][ T6824] ? klist_children_get+0x50/0x50 [ 458.426355][ T6824] ? get_device_parent+0x121/0x3e0 [ 458.431475][ T6824] device_add+0x470/0x1050 [ 458.435922][ T6824] hci_conn_add_sysfs+0xd1/0x1e0 [ 458.440987][ T6824] le_conn_complete_evt+0xfac/0x15c0 [ 458.446287][ T6824] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 458.452542][ T6824] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 458.458207][ T6824] ? mutex_unlock+0x10/0x10 [ 458.462736][ T6824] ? skb_pull_data+0xec/0x1f0 [ 458.467445][ T6824] hci_le_conn_complete_evt+0x183/0x440 [ 458.473023][ T6824] ? hci_remote_host_features_evt+0x230/0x230 [ 458.479111][ T6824] hci_event_packet+0x7b3/0x1290 [ 458.484102][ T6824] ? __lock_acquire+0x7c40/0x7c40 [ 458.489179][ T6824] ? bis_list+0x280/0x280 [ 458.493533][ T6824] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 458.499447][ T6824] ? kcov_remote_start+0x4b0/0x7e0 [ 458.504613][ T6824] ? do_machine_check+0x380/0x750 [ 458.509672][ T6824] ? hci_send_to_monitor+0x9c/0x4a0 [ 458.514897][ T6824] hci_rx_work+0x3eb/0xd40 [ 458.519336][ T6824] ? _raw_spin_unlock+0x40/0x40 [ 458.524208][ T6824] ? process_one_work+0x7b4/0x1160 [ 458.529452][ T6824] process_one_work+0x8ab/0x1160 [ 458.534411][ T6824] ? worker_detach_from_pool+0x240/0x240 [ 458.540155][ T6824] ? _raw_spin_lock_irq+0xb7/0xf0 [ 458.545181][ T6824] ? _raw_spin_lock_irqsave+0x100/0x100 [ 458.550727][ T6824] ? wq_worker_running+0x97/0x190 [ 458.555874][ T6824] worker_thread+0xaf5/0x12a0 [ 458.560602][ T6824] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 458.566563][ T6824] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 458.572478][ T6824] kthread+0x29d/0x330 [ 458.576553][ T6824] ? worker_clr_flags+0x1a0/0x1a0 [ 458.581594][ T6824] ? kthread_blkcg+0xd0/0xd0 [ 458.586181][ T6824] ret_from_fork+0x1f/0x30 [ 458.590640][ T6824] [ 458.634189][ T6824] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.647473][ T6824] Bluetooth: hci2: failed to register connection device [ 459.709291][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.731209][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.843831][ T7209] device bridge_slave_0 entered promiscuous mode [ 460.393061][ T6824] Bluetooth: hci1: command 0x041b tx timeout [ 461.231060][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.240003][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.249411][ T7209] device bridge_slave_1 entered promiscuous mode [ 461.532200][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.580140][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.831100][ T7209] team0: Port device team_slave_0 added [ 461.867893][ T7209] team0: Port device team_slave_1 added [ 462.450986][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078c85c00: rx timeout, send abort [ 462.473209][ T6824] Bluetooth: hci1: command 0x040f tx timeout [ 462.951198][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078c84400: rx timeout, send abort [ 462.961422][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078c85c00: abort rx timeout. Force session deactivation [ 463.466467][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078c84400: abort rx timeout. Force session deactivation [ 464.556462][ T6824] Bluetooth: hci1: command 0x0419 tx timeout [ 464.810883][ T6824] Bluetooth: hci2: command 0x0406 tx timeout [ 465.421073][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.463091][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.551586][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.638444][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.646644][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.693026][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.980582][ T7209] device hsr_slave_0 entered promiscuous mode [ 467.424950][ T7209] device hsr_slave_1 entered promiscuous mode [ 467.918638][ T7209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.528785][ T7209] Cannot create hsr debugfs directory [ 469.350035][ T4847] device hsr_slave_0 left promiscuous mode [ 469.363735][ T4847] device hsr_slave_1 left promiscuous mode [ 469.405645][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.460665][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.484723][ T4847] device bridge_slave_1 left promiscuous mode [ 469.522209][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.554999][ T4847] device bridge_slave_0 left promiscuous mode [ 469.588944][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.636435][ T4847] device hsr_slave_0 left promiscuous mode [ 469.637690][ T4847] device hsr_slave_1 left promiscuous mode [ 469.638271][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.638733][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.639187][ T4847] device bridge_slave_1 left promiscuous mode [ 469.639288][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.640667][ T4847] device bridge_slave_0 left promiscuous mode [ 469.640770][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.146896][ T7306] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 470.147085][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.150129][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 470.517206][ T4317] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 470.814293][ T7307] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 2 [ 470.980462][ T4835] vhci_hcd: stop threads [ 471.016605][ T4835] vhci_hcd: release socket [ 471.424284][ T4835] vhci_hcd: disconnect device [ 475.878810][ T4317] vhci_hcd: vhci_device speed not set [ 476.407246][ T4847] team0 (unregistering): Port device team_slave_1 removed [ 476.671711][ T4847] team0 (unregistering): Port device team_slave_0 removed [ 476.741678][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.807301][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.197788][ T7327] futex_wake_op: syz.2.610 tries to shift op by 144; fix this program [ 477.489264][ T4847] bond0 (unregistering): Released all slaves [ 477.813770][ T4847] team0 (unregistering): Port device team_slave_1 removed [ 477.885440][ T4847] team0 (unregistering): Port device team_slave_0 removed [ 477.940021][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.994653][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.290495][ T4847] bond0 (unregistering): Released all slaves [ 478.418506][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 478.572331][ T7131] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 478.638740][ T7131] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.735735][ T7131] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.798341][ T7131] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.924703][ T7128] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 479.106064][ T7128] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 479.172934][ T7128] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 479.497864][ T7128] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 480.770220][ T7131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.939891][ T7131] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.971831][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.894616][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.905232][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.913891][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 481.922694][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.964386][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.972657][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.034877][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.080860][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.102124][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.109904][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.204104][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.563270][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.899295][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.305729][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.673141][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.375730][ T7128] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.419550][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.455380][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.473795][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.482680][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.553806][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.578281][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.591592][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.602637][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.614756][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.624957][ T4471] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.633247][ T4471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.651873][ T7131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.679338][ T7131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.709661][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.729733][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.742140][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.757610][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.769249][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.782545][ T4471] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.789793][ T4471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.813177][ T7209] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 485.829448][ T7209] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 486.004170][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 486.028497][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.488013][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.539788][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.585616][ T7209] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 486.599419][ T7209] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.389751][ T7365] futex_wake_op: syz.2.619 tries to shift op by 144; fix this program [ 487.405878][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.432218][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.484611][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.493825][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.502535][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.891453][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 487.949255][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.034252][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.695861][ T7374] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 489.702523][ T7374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.712644][ T7374] vhci_hcd vhci_hcd.0: Device attached [ 489.729531][ T7382] vhci_hcd: connection closed [ 489.748409][ T4824] vhci_hcd: stop threads [ 490.080390][ T4824] vhci_hcd: release socket [ 490.431380][ T4824] vhci_hcd: disconnect device [ 491.572601][ T7389] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 491.619470][ T7389] Invalid option length (1047276) for dns_resolver key [ 491.646320][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 491.754728][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.622'. [ 491.795020][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.622'. [ 492.196711][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.308975][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.552269][ T4847] device hsr_slave_0 left promiscuous mode [ 492.583142][ T4847] device hsr_slave_1 left promiscuous mode [ 492.635950][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.661851][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.741404][ T4847] device bridge_slave_1 left promiscuous mode [ 492.760440][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.717052][ T4847] device bridge_slave_0 left promiscuous mode [ 493.728300][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.804495][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880556d9400: rx timeout, send abort [ 495.419925][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ef8c00: rx timeout, send abort [ 495.429507][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880556d9400: abort rx timeout. Force session deactivation [ 495.968216][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ef8c00: abort rx timeout. Force session deactivation [ 497.504795][ T4847] team0 (unregistering): Port device team_slave_1 removed [ 497.590137][ T4847] team0 (unregistering): Port device team_slave_0 removed [ 497.654090][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.365616][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.384335][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.394367][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.404030][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 500.439169][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 500.448401][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 500.473436][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 500.654095][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.664439][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.673935][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.683388][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.692501][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 500.699942][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.932464][ T4847] bond0 (unregistering): Released all slaves [ 501.001853][ T7436] ib_srp: QP creation failed for dev syz0: -22 [ 501.097481][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.112627][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.132482][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.152231][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.183056][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.194175][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.271726][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.329102][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.400461][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.407680][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.516002][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.522369][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.542142][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.585022][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.681264][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.727961][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.735199][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.810504][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 501.871431][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.017947][ T7447] lo speed is unknown, defaulting to 1000 [ 502.028775][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.076585][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.184998][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.268466][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.355420][ T7441] lo speed is unknown, defaulting to 1000 [ 502.357982][ T7209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.484035][ T7209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.557487][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.563103][ T6824] Bluetooth: hci3: command 0x0409 tx timeout [ 502.762153][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.793574][ T6824] Bluetooth: hci4: command 0x0409 tx timeout [ 502.808843][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.822238][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.837617][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.846411][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 504.633002][ T6824] Bluetooth: hci3: command 0x041b tx timeout [ 504.873884][ T6824] Bluetooth: hci4: command 0x041b tx timeout [ 506.314799][ T7498] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 506.633049][ T7447] chnl_net:caif_netlink_parms(): no params data found [ 506.723200][ T6824] Bluetooth: hci3: command 0x040f tx timeout [ 506.953756][ T6824] Bluetooth: hci4: command 0x040f tx timeout [ 507.009428][ T7441] chnl_net:caif_netlink_parms(): no params data found [ 508.803249][ T6824] Bluetooth: hci3: command 0x0419 tx timeout [ 509.033472][ T6824] Bluetooth: hci4: command 0x0419 tx timeout [ 511.574684][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.582636][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.641528][ T7447] device bridge_slave_0 entered promiscuous mode [ 511.757607][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.783102][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.791404][ T7441] device bridge_slave_0 entered promiscuous mode [ 512.020624][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.043674][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.078447][ T7447] device bridge_slave_1 entered promiscuous mode [ 512.156302][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.171000][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.206326][ T7441] device bridge_slave_1 entered promiscuous mode [ 512.641465][ T7441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.778135][ T7447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.835357][ T7441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.867657][ T7447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.119938][ T7447] team0: Port device team_slave_0 added [ 513.144522][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.163193][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.171846][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.195742][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.200348][ T7441] team0: Port device team_slave_0 added [ 513.210643][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 513.221197][ T7447] team0: Port device team_slave_1 added [ 513.227242][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 513.394550][ T7441] team0: Port device team_slave_1 added [ 513.694888][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.701896][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.816445][ T7447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.841799][ T7552] lo speed is unknown, defaulting to 1000 [ 513.971544][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.988718][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.088131][ T7447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.103330][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.110351][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.407133][ T7441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.435184][ T7556] ib_srp: QP creation failed for dev syz0: -22 [ 514.605702][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.612709][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.679700][ T7441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.892477][ T7441] device hsr_slave_0 entered promiscuous mode [ 514.939398][ T7441] device hsr_slave_1 entered promiscuous mode [ 515.044719][ T7447] device hsr_slave_0 entered promiscuous mode [ 515.074308][ T7447] device hsr_slave_1 entered promiscuous mode [ 515.100299][ T7447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.186284][ T7447] Cannot create hsr debugfs directory [ 515.275546][ T6824] Bluetooth: hci1: command 0x0409 tx timeout [ 517.363363][ T6824] Bluetooth: hci1: command 0x041b tx timeout [ 519.433767][ T6824] Bluetooth: hci1: command 0x040f tx timeout [ 521.523248][ T6824] Bluetooth: hci1: command 0x0419 tx timeout [ 522.215385][ T7552] chnl_net:caif_netlink_parms(): no params data found [ 525.653593][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.671581][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.680241][ T7552] device bridge_slave_0 entered promiscuous mode [ 525.698319][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.706599][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.715372][ T7552] device bridge_slave_1 entered promiscuous mode [ 525.741637][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.754466][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.086738][ T7552] team0: Port device team_slave_0 added [ 526.331061][ T7552] team0: Port device team_slave_1 added [ 526.810489][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.823032][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.991573][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.221266][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.230953][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.292284][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.664052][ T7552] device hsr_slave_0 entered promiscuous mode [ 527.678791][ T7552] device hsr_slave_1 entered promiscuous mode [ 527.708667][ T7552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.718698][ T7552] Cannot create hsr debugfs directory [ 527.730862][ T4847] device hsr_slave_0 left promiscuous mode [ 527.742569][ T7624] ib_srp: QP creation failed for dev syz0: -22 [ 527.759155][ T4847] device hsr_slave_1 left promiscuous mode [ 527.776379][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.792046][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.801058][ T4847] device bridge_slave_1 left promiscuous mode [ 527.831644][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.850230][ T4847] device bridge_slave_0 left promiscuous mode [ 527.867882][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.906539][ T4847] device hsr_slave_0 left promiscuous mode [ 527.932370][ T4847] device hsr_slave_1 left promiscuous mode [ 527.973032][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.004719][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.044966][ T4847] device bridge_slave_1 left promiscuous mode [ 528.052141][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.119505][ T4847] device bridge_slave_0 left promiscuous mode [ 528.127247][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.631232][ T4847] team0 (unregistering): Port device team_slave_1 removed [ 531.735389][ T4847] team0 (unregistering): Port device team_slave_0 removed [ 531.789667][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.930227][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.857020][ T4847] bond0 (unregistering): Released all slaves [ 533.226251][ T4847] team0 (unregistering): Port device team_slave_1 removed [ 533.287792][ T4847] team0 (unregistering): Port device team_slave_0 removed [ 533.348499][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.410691][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.760552][ T4847] bond0 (unregistering): Released all slaves [ 535.759702][ T7447] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 535.825046][ T7447] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 535.891664][ T7447] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 535.979779][ T7447] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 536.107937][ T7441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 536.192463][ T7441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 536.354353][ T7441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 536.378506][ T7441] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 537.104928][ T7447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.612653][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 537.633525][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.692564][ T7447] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.768048][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.840071][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.860352][ T4845] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.867574][ T4845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.957738][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 538.063924][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 538.103531][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 538.125655][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.132828][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.211377][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 538.227417][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 538.257124][ T7441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.289502][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 538.331133][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.372848][ T7441] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.416995][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 538.429813][ T7696] ib_srp: QP creation failed for dev syz0: -22 [ 538.433942][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 538.663343][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 538.730335][ T7447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.853159][ T7447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.912129][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 538.944754][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 538.975053][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 539.009169][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.884636][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.891808][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.383191][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.418143][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.439446][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.447147][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.456191][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 541.466585][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.484575][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 541.495252][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.601613][ T7552] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 541.630357][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.754942][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.766949][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.735436][ T7552] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 542.970644][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.003695][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.054572][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.084316][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.108931][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.600529][ T7552] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 545.565686][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 545.625986][ T7552] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 545.804906][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 545.837705][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 545.884686][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 545.931063][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.167355][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 547.234619][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.242419][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.296978][ T7447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.518931][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.761110][ T7552] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.804018][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.820293][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 548.379586][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 548.402772][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 548.659074][ T4845] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.667171][ T4845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.676377][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 548.725381][ T4847] device hsr_slave_0 left promiscuous mode [ 548.853693][ T4847] device hsr_slave_1 left promiscuous mode [ 548.910611][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.924682][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.044225][ T4847] device bridge_slave_1 left promiscuous mode [ 549.050499][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.400326][ T4847] device bridge_slave_0 left promiscuous mode [ 550.451118][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.480471][ T4847] team0 (unregistering): Port device team_slave_1 removed [ 551.527740][ T7788] ib_srp: QP creation failed for dev syz0: -22 [ 551.591860][ T4847] team0 (unregistering): Port device team_slave_0 removed [ 551.686547][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.794625][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.323315][ T4847] bond0 (unregistering): Released all slaves [ 555.578253][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 555.607463][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 555.653438][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.660632][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.294777][ T7441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.308845][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.345023][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.434151][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.695416][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 557.584786][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.608873][ T7811] futex_wake_op: syz.2.677 tries to shift op by 144; fix this program [ 557.643936][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.727697][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.755558][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.805390][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.879325][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.966711][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 558.056834][ T7552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.221272][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 558.284352][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 558.340876][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 558.572393][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 558.629743][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.789940][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.824385][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.884415][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.935988][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.965242][ T7447] device veth0_vlan entered promiscuous mode [ 559.069132][ T7447] device veth1_vlan entered promiscuous mode [ 560.348328][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 561.094951][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.163803][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.172345][ T6824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 561.181573][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.194498][ T6824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 561.206132][ T6824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 561.215632][ T6824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 561.226349][ T6824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 561.235783][ T6824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 561.693656][ T7854] lo speed is unknown, defaulting to 1000 [ 562.967268][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.974897][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.120449][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.143544][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.153031][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.162223][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.170299][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 563.177938][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 563.273209][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 563.486946][ T7877] lo speed is unknown, defaulting to 1000 [ 563.675861][ T7870] ib_srp: QP creation failed for dev syz0: -22 [ 564.188046][ T7854] chnl_net:caif_netlink_parms(): no params data found [ 565.283508][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 565.353067][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 566.913206][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 566.934231][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 566.993121][ T7877] chnl_net:caif_netlink_parms(): no params data found [ 567.353333][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 567.443905][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 568.133299][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 568.378248][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 568.415514][ T7912] futex_wake_op: syz.0.689 tries to shift op by 144; fix this program [ 568.430678][ T7552] device veth0_vlan entered promiscuous mode [ 569.433532][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 569.513456][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 570.423199][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.454417][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.225416][ T7552] device veth1_vlan entered promiscuous mode [ 571.446718][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.463544][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.471728][ T7854] device bridge_slave_0 entered promiscuous mode [ 571.523156][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 571.620894][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.900843][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.911086][ T7854] device bridge_slave_1 entered promiscuous mode [ 571.920314][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 571.931948][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.956411][ T7552] device veth0_macvtap entered promiscuous mode [ 572.094647][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.120450][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.184078][ T7877] device bridge_slave_0 entered promiscuous mode [ 572.273236][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.280918][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.321271][ T7877] device bridge_slave_1 entered promiscuous mode [ 572.457952][ T7854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.511291][ T7854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.526833][ T7877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.542762][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 572.585739][ T4580] device hsr_slave_0 left promiscuous mode [ 572.633353][ T4580] device hsr_slave_1 left promiscuous mode [ 572.654856][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.674589][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.697682][ T4580] device bridge_slave_1 left promiscuous mode [ 572.716202][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.753491][ T4580] device bridge_slave_0 left promiscuous mode [ 572.760791][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.652668][ T6824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 573.678457][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 573.687280][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 573.698027][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 573.705865][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 573.713329][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 573.855381][ T7935] ib_srp: QP creation failed for dev syz0: -22 [ 573.879283][ T4580] team0 (unregistering): Port device team_slave_1 removed [ 573.972543][ T4580] team0 (unregistering): Port device team_slave_0 removed [ 574.140930][ T4580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.328456][ T4580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.753194][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 577.833021][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 578.972056][ T4580] bond0 (unregistering): Released all slaves [ 579.505872][ T7877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.665867][ T7854] team0: Port device team_slave_0 added [ 579.720402][ T7877] team0: Port device team_slave_0 added [ 579.770623][ T7877] team0: Port device team_slave_1 added [ 579.819937][ T7854] team0: Port device team_slave_1 added [ 579.900032][ T7937] lo speed is unknown, defaulting to 1000 [ 579.913013][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 580.090706][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.121512][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.156144][ T7854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.189423][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.302782][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.098939][ T7877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.285994][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.293179][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.319479][ T7877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.345226][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.372261][ T7960] futex_wake_op: syz.2.700 tries to shift op by 144; fix this program [ 581.381522][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.511461][ T7854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.825943][ T7877] device hsr_slave_0 entered promiscuous mode [ 581.847569][ T7877] device hsr_slave_1 entered promiscuous mode [ 581.992934][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 582.536838][ T7854] device hsr_slave_0 entered promiscuous mode [ 582.653981][ T7854] device hsr_slave_1 entered promiscuous mode [ 582.703466][ T7854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.712312][ T7854] Cannot create hsr debugfs directory [ 588.404405][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 590.244774][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.254054][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.262476][ T7937] device bridge_slave_0 entered promiscuous mode [ 590.274409][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.287517][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.298442][ T7937] device bridge_slave_1 entered promiscuous mode [ 590.376921][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.497667][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.614358][ T7877] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 590.640335][ T7877] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 590.803511][ T7937] team0: Port device team_slave_0 added [ 590.820046][ T7877] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 590.918352][ T7877] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 591.875860][ T7937] team0: Port device team_slave_1 added [ 596.932571][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.967605][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.050650][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.070773][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.078901][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.109010][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.309358][ T8011] futex_wake_op: syz.0.713 tries to shift op by 144; fix this program [ 598.184839][ T7937] device hsr_slave_0 entered promiscuous mode [ 598.203529][ T7937] device hsr_slave_1 entered promiscuous mode [ 598.212481][ T7937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.227378][ T7937] Cannot create hsr debugfs directory [ 598.456123][ T8008] ib_srp: QP creation failed for dev syz0: -22 [ 598.562102][ T7854] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 598.615836][ T7854] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 599.083327][ T7877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.104903][ T7854] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 599.120732][ T7854] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 599.478241][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.702912][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 601.815102][ T7877] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.006884][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.073280][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.095097][ T4471] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.103025][ T4471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.114312][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.135570][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.154475][ T4471] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.162158][ T4471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.250645][ T4580] device hsr_slave_0 left promiscuous mode [ 602.258294][ T4580] device hsr_slave_1 left promiscuous mode [ 602.292442][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.329836][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.339693][ T4580] device bridge_slave_1 left promiscuous mode [ 604.564404][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.699699][ T4580] device bridge_slave_0 left promiscuous mode [ 604.723310][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.749393][ T4580] device hsr_slave_0 left promiscuous mode [ 604.763708][ T4580] device hsr_slave_1 left promiscuous mode [ 604.779943][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.793026][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.813704][ T4580] device bridge_slave_1 left promiscuous mode [ 604.819954][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.874569][ T4580] device bridge_slave_0 left promiscuous mode [ 604.880844][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.925500][ T4580] device veth0_macvtap left promiscuous mode [ 605.932668][ T4580] device veth1_vlan left promiscuous mode [ 605.943362][ T4580] device veth0_vlan left promiscuous mode [ 605.964099][ T4580] device veth1_vlan left promiscuous mode [ 605.970749][ T4580] device veth0_vlan left promiscuous mode [ 608.188046][ T8047] futex_wake_op: syz.0.722 tries to shift op by 144; fix this program [ 609.556219][ T4580] team0 (unregistering): Port device team_slave_1 removed [ 609.613185][ T4580] team0 (unregistering): Port device team_slave_0 removed [ 609.669662][ T4580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.725146][ T4580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.095559][ T4580] bond0 (unregistering): Released all slaves [ 610.549835][ T4580] team0 (unregistering): Port device team_slave_1 removed [ 610.613991][ T4580] team0 (unregistering): Port device team_slave_0 removed [ 610.670582][ T4580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.732521][ T4580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.099888][ T4580] bond0 (unregistering): Released all slaves [ 611.212416][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 611.221857][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.238088][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.315447][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.335470][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.355627][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.387082][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.490898][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.515953][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.536520][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.561095][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.835484][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.900332][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.437102][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.542683][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.637222][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 613.663960][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 613.749076][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 613.771348][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 613.791104][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.798325][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.875541][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 613.913429][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 613.953249][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.970274][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.977524][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.053429][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 614.119328][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.670156][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 617.045948][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 617.081889][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 617.090879][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 617.101643][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 617.110521][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 617.120198][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 617.146843][ T7854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.163367][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 617.172817][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 617.197923][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 617.378192][ T7937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 617.466499][ T7937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 620.644412][ T7937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 620.744627][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 620.764544][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.849929][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.908734][ T7937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 622.632215][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.784620][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.791706][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.803677][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.903290][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.963226][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.033156][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.040416][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.158882][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.223536][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.267596][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.274908][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.570819][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.678638][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.690181][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 623.699471][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 623.784649][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 623.806274][ T6824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 623.816650][ T6824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 623.830287][ T6824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 623.831761][ T8120] futex_wake_op: syz.0.733 tries to shift op by 144; fix this program [ 623.844991][ T6824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 623.853635][ T8119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 623.855829][ T8119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 623.874550][ T6824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 623.882528][ T8119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 624.402727][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.410293][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.869783][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.904871][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.965897][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.987391][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.999543][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.312597][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.373275][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.446195][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.490333][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.545400][ T8116] lo speed is unknown, defaulting to 1000 [ 625.923359][ T8119] Bluetooth: hci4: command 0x0409 tx timeout [ 625.930241][ T8119] Bluetooth: hci3: command 0x0409 tx timeout [ 626.629015][ T8114] lo speed is unknown, defaulting to 1000 [ 626.639180][ T7937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.650985][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 626.674920][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 626.706709][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 627.520511][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 627.568762][ T8114] chnl_net:caif_netlink_parms(): no params data found [ 627.675542][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 627.685566][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 627.699891][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.920409][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.929245][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.940173][ T8116] device bridge_slave_0 entered promiscuous mode [ 627.993222][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.000016][ T8119] Bluetooth: hci3: command 0x041b tx timeout [ 628.001336][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.006430][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 628.027890][ T8116] device bridge_slave_1 entered promiscuous mode [ 628.105329][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.118528][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.130590][ T8114] device bridge_slave_0 entered promiscuous mode [ 628.160472][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.170899][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.181576][ T8114] device bridge_slave_1 entered promiscuous mode [ 628.195964][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.277125][ T8114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.291187][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.325708][ T8114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.421545][ T8116] team0: Port device team_slave_0 added [ 628.440385][ T8114] team0: Port device team_slave_0 added [ 628.453856][ T8116] team0: Port device team_slave_1 added [ 628.488195][ T4580] device hsr_slave_0 left promiscuous mode [ 628.501572][ T4580] device hsr_slave_1 left promiscuous mode [ 628.508762][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.526712][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.569718][ T4580] device bridge_slave_1 left promiscuous mode [ 628.581228][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.602549][ T4580] device bridge_slave_0 left promiscuous mode [ 628.610942][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.929811][ T4580] team0 (unregistering): Port device team_slave_1 removed [ 628.987768][ T4580] team0 (unregistering): Port device team_slave_0 removed [ 629.046001][ T4580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.104892][ T4580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.384685][ T4580] bond0 (unregistering): Released all slaves [ 629.512024][ T8114] team0: Port device team_slave_1 added [ 629.536751][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.543993][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.570552][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.627141][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.637664][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.702892][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.739926][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.748948][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.778272][ T8114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.792351][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.800692][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.831547][ T8114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.915331][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.941957][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.982206][ T8116] device hsr_slave_0 entered promiscuous mode [ 629.993753][ T8116] device hsr_slave_1 entered promiscuous mode [ 630.000608][ T8116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.009134][ T8116] Cannot create hsr debugfs directory [ 630.025590][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.042412][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 630.077244][ T8119] Bluetooth: hci3: command 0x040f tx timeout [ 630.083370][ T8119] Bluetooth: hci4: command 0x040f tx timeout [ 630.118346][ T8114] device hsr_slave_0 entered promiscuous mode [ 630.128094][ T8114] device hsr_slave_1 entered promiscuous mode [ 630.138642][ T8114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.146648][ T8114] Cannot create hsr debugfs directory [ 630.154624][ T7937] device veth0_vlan entered promiscuous mode [ 630.178393][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.196338][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.272624][ T7937] device veth1_vlan entered promiscuous mode [ 630.483500][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 630.498050][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 630.507640][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 630.518151][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 630.530719][ T7937] device veth0_macvtap entered promiscuous mode [ 630.594900][ T7937] device veth1_macvtap entered promiscuous mode [ 630.605136][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 630.630037][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 630.819774][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.831022][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.846327][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.871143][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 630.890047][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 630.929617][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.942001][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.964746][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.972650][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.982566][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 631.010386][ T7937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.033328][ T7937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.042085][ T7937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.071573][ T7937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.347442][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.371044][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.427027][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.524879][ T4847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.532755][ T4847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.569352][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.110843][ T8206] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 632.153259][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 632.159576][ T8119] Bluetooth: hci3: command 0x0419 tx timeout [ 632.181766][ T8206] Invalid option length (1047276) for dns_resolver key [ 632.817473][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.6.736'. [ 632.856123][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.6.736'. [ 637.463794][ T8116] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 638.310592][ T8116] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 638.320603][ T8116] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 638.949495][ T8238] futex_wake_op: syz.0.742 tries to shift op by 144; fix this program [ 642.226863][ T8116] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 642.803308][ T4580] device hsr_slave_0 left promiscuous mode [ 642.966659][ T4580] device hsr_slave_1 left promiscuous mode [ 643.021701][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.167111][ T4580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.245817][ T4580] device bridge_slave_1 left promiscuous mode [ 643.252210][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.387018][ T4580] device bridge_slave_0 left promiscuous mode [ 643.398446][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.545383][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 643.754094][ T4318] usb 1-1: Using ep0 maxpacket: 16 [ 643.767233][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.779460][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 643.801907][ T4318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 643.860822][ T4318] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 643.892117][ T4318] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 643.902796][ T4318] usb 1-1: Manufacturer: syz [ 643.944612][ T4318] usb 1-1: config 0 descriptor?? [ 644.187992][ T4580] team0 (unregistering): Port device team_slave_1 removed [ 644.334282][ T4580] team0 (unregistering): Port device team_slave_0 removed [ 644.446035][ T4318] usb 1-1: USB disconnect, device number 3 [ 644.457061][ T4580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.584195][ T4580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.282317][ T4580] bond0 (unregistering): Released all slaves [ 646.374273][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.503433][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 646.523518][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.556409][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.671781][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 646.702318][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.817820][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.825047][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.823002][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 647.838304][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 647.933638][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 647.995075][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.002231][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.175673][ T8114] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 648.545766][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 648.603372][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 648.665464][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 648.718031][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 648.775866][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 648.795115][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 648.810487][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 648.823360][ T8114] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 649.165253][ T8319] tmpfs: Unknown parameter 'usrquota' [ 649.280219][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 650.035858][ T8316] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 650.042435][ T8316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.052583][ T8316] vhci_hcd vhci_hcd.0: Device attached [ 650.072482][ T8317] vhci_hcd: connection closed [ 650.126713][ T4462] vhci_hcd: stop threads [ 651.364624][ T4462] vhci_hcd: release socket [ 651.397722][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.818446][ T4462] vhci_hcd: disconnect device [ 652.164443][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 652.174561][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.184533][ T8114] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 652.221072][ T8114] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 652.254562][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.541128][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.614943][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.651426][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.698143][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.746730][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.765855][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.784993][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.792188][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.954124][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.993570][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 653.047876][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 653.153783][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.161018][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.223712][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 653.289470][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 653.392189][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 653.514370][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 653.570060][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.680593][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.848331][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.893371][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 653.965151][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.012327][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.056222][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.095105][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.217484][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.234237][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.302777][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.047106][ T4365] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 657.254925][ T4365] usb 1-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 657.307618][ T4365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 657.316284][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.346595][ T4365] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 657.356047][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.381493][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.397516][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 657.445922][ T4365] usb 1-1: Product: syz [ 657.450157][ T4365] usb 1-1: Manufacturer: syz [ 657.488706][ T4365] usb 1-1: SerialNumber: syz [ 657.524471][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.539817][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.549220][ T4365] usb 1-1: config 0 descriptor?? [ 657.621575][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.649350][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.687045][ T8116] device veth0_vlan entered promiscuous mode [ 657.693851][ T4365] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 657.704350][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.731111][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.768113][ T8364] udevd[8364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.790159][ T3600] usb 1-1: USB disconnect, device number 4 [ 657.826212][ T8116] device veth1_vlan entered promiscuous mode [ 657.925327][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.943882][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.971223][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 658.003448][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 658.020148][ T8116] device veth0_macvtap entered promiscuous mode [ 658.050230][ T8116] device veth1_macvtap entered promiscuous mode [ 660.305745][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 660.809798][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 661.220254][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.373794][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.402893][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.459500][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.528725][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.550648][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.614709][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.648044][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.669196][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.701938][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.856478][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.801391][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.873940][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 662.953736][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 663.082543][ T8116] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.095777][ T8116] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.116546][ T8116] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.130309][ T8116] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.274569][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 663.334518][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 663.498936][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 663.528455][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 663.580205][ T8421] futex_wake_op: syz.2.774 tries to shift op by 144; fix this program [ 663.646634][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 665.267912][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e9fc00: rx timeout, send abort [ 665.389324][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 665.486545][ T8114] device veth0_vlan entered promiscuous mode [ 665.562678][ T8114] device veth1_vlan entered promiscuous mode [ 665.577191][ T4489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.672786][ T4489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.713665][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 665.757652][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 665.766874][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b1d4800: rx timeout, send abort [ 665.833969][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 665.870508][ T8114] device veth0_macvtap entered promiscuous mode [ 665.891776][ T8431] device syzkaller0 entered promiscuous mode [ 665.944061][ T8114] device veth1_macvtap entered promiscuous mode [ 665.951030][ T4489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.982863][ T4489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.076979][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 666.095523][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 666.194267][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 666.267076][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b1d4800: abort rx timeout. Force session deactivation [ 666.310756][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.382022][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.416660][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.456739][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.504451][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.552527][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.620177][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.696140][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 666.725670][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 666.770171][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.842894][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.853200][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.902960][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.903034][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.904059][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.917198][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.920162][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 666.921336][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 666.929585][ T8114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.929621][ T8114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.929646][ T8114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.929672][ T8114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.087295][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 669.493620][ T8451] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 669.500293][ T8451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 669.510191][ T8451] vhci_hcd vhci_hcd.0: Device attached [ 669.523793][ T8452] vhci_hcd: connection closed [ 669.574289][ T4841] vhci_hcd: stop threads [ 670.172025][ T4841] vhci_hcd: release socket [ 670.183252][ T4841] vhci_hcd: disconnect device [ 670.643662][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.661913][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.607350][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 671.802229][ T4819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.814268][ T4819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.121981][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 679.393046][ T4350] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 679.636784][ T4350] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 679.700845][ T4350] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.765606][ T4350] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.847758][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.897437][ T4350] usb 1-1: config 0 descriptor?? [ 679.927230][ T8486] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 679.939329][ T4350] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 680.379531][ T8513] MTD: Couldn't look up './dev/mtdblock0': -2 [ 684.767289][ T7707] usb 1-1: USB disconnect, device number 5 [ 684.823161][ T4353] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 685.023063][ T4353] usb 9-1: Using ep0 maxpacket: 16 [ 685.695080][ T4353] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.853330][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.860922][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.506424][ T4353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.853675][ T4353] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.893791][ T4353] usb 9-1: string descriptor 0 read error: -71 [ 690.901092][ T4353] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 690.911864][ T4353] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 690.928357][ T4353] usb 9-1: config 0 descriptor?? [ 690.934671][ T4353] usb 9-1: can't set config #0, error -71 [ 690.943523][ T4353] usb 9-1: USB disconnect, device number 2 [ 694.151675][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805829dc00: rx timeout, send abort [ 694.652097][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805829e800: rx timeout, send abort [ 695.770330][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805829dc00: abort rx timeout. Force session deactivation [ 695.782626][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805829e800: abort rx timeout. Force session deactivation [ 697.023650][ T8568] futex_wake_op: syz.8.805 tries to shift op by 144; fix this program [ 697.917424][ C0] vcan0: j1939_simple_recv: Received already invalidated message [ 698.153115][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 698.714373][ T8582] device syzkaller0 entered promiscuous mode [ 710.745329][ T8640] futex_wake_op: syz.0.820 tries to shift op by 144; fix this program [ 714.949200][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056594c00: rx timeout, send abort [ 715.133237][ T8680] device syzkaller0 entered promiscuous mode [ 715.449267][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ea6000: rx timeout, send abort [ 715.958877][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ea6000: abort rx timeout. Force session deactivation [ 725.296337][ T8718] futex_wake_op: syz.0.837 tries to shift op by 144; fix this program [ 725.635227][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058c15400: rx timeout, send abort [ 726.135324][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880789b9800: rx timeout, send abort [ 726.143807][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058c15400: abort rx timeout. Force session deactivation [ 726.643748][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880789b9800: abort rx timeout. Force session deactivation [ 727.068024][ T8736] device syzkaller0 entered promiscuous mode [ 730.767694][ T8119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.778569][ T8119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.792238][ T8119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.808604][ T8119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.816611][ T8119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 730.827334][ T8119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.221260][ T8749] lo speed is unknown, defaulting to 1000 [ 731.371109][ T4841] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.040144][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 734.702085][ T4841] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.114425][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 735.725947][ T4841] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.902150][ T4841] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.071310][ T8781] futex_wake_op: syz.2.851 tries to shift op by 144; fix this program [ 737.126010][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 737.193340][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 739.273320][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 740.459203][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880382f2400: rx timeout, send abort [ 740.959283][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880382f3000: rx timeout, send abort [ 740.967730][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880382f2400: abort rx timeout. Force session deactivation [ 741.522379][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880382f3000: abort rx timeout. Force session deactivation [ 743.722174][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.748817][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.835597][ T8749] device bridge_slave_0 entered promiscuous mode [ 744.073335][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.081466][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.117334][ T8749] device bridge_slave_1 entered promiscuous mode [ 744.241103][ T8815] device syzkaller0 entered promiscuous mode [ 744.275382][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.551665][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.703717][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.711119][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.354390][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 750.486062][ T8749] team0: Port device team_slave_0 added [ 750.610881][ T8850] futex_wake_op: syz.6.866 tries to shift op by 144; fix this program [ 750.670498][ T8749] team0: Port device team_slave_1 added [ 752.548446][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.555602][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.582057][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.766442][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.781070][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.066152][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.366187][ T8749] device hsr_slave_0 entered promiscuous mode [ 753.433327][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063f00400: rx timeout, send abort [ 753.942236][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063f00400: abort rx timeout. Force session deactivation [ 755.673927][ T8749] device hsr_slave_1 entered promiscuous mode [ 764.868269][ T8928] futex_wake_op: syz.7.881 tries to shift op by 144; fix this program [ 769.271212][ T4841] device hsr_slave_0 left promiscuous mode [ 769.283246][ T4841] device hsr_slave_1 left promiscuous mode [ 769.343464][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.412107][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.481126][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.511339][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.551526][ T4841] device bridge_slave_1 left promiscuous mode [ 769.599141][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.892259][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053df4c00: rx timeout, send abort [ 770.400687][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053df4c00: abort rx timeout. Force session deactivation [ 770.721894][ T4841] device bridge_slave_0 left promiscuous mode [ 770.797217][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.063757][ T4841] device veth1_macvtap left promiscuous mode [ 771.069855][ T4841] device veth0_macvtap left promiscuous mode [ 771.107162][ T4841] device veth1_vlan left promiscuous mode [ 771.133073][ T4841] device veth0_vlan left promiscuous mode [ 779.511870][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024b33000: rx timeout, send abort [ 780.011933][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078ccec00: rx timeout, send abort [ 780.023233][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024b33000: abort rx timeout. Force session deactivation [ 780.533616][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078ccec00: abort rx timeout. Force session deactivation [ 784.522670][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 784.588061][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 784.657682][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.781007][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.705746][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.718623][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 785.729600][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 785.743718][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 785.752700][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 785.775922][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.879890][ T4841] bond0 (unregistering): Released all slaves [ 785.928557][ T9040] ib_srp: QP creation failed for dev syz0: -22 [ 786.253514][ T9038] lo speed is unknown, defaulting to 1000 [ 787.839464][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 789.931859][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 791.993065][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 794.713674][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 795.112108][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880561c2800: rx timeout, send abort [ 795.612299][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054969c00: rx timeout, send abort [ 796.121920][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054969c00: abort rx timeout. Force session deactivation [ 798.479451][ T9038] chnl_net:caif_netlink_parms(): no params data found [ 799.608091][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.682552][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.734402][ T9038] device bridge_slave_0 entered promiscuous mode [ 799.830975][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.913267][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.871796][ T9038] device bridge_slave_1 entered promiscuous mode [ 801.237853][ T9038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.302734][ T9038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.380677][ T9038] team0: Port device team_slave_0 added [ 802.402488][ T9038] team0: Port device team_slave_1 added [ 802.573526][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.580536][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.238099][ T9038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.254485][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.262456][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.415725][ T9038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.484354][ T4841] device hsr_slave_0 left promiscuous mode [ 803.515229][ T9114] ib_srp: QP creation failed for dev syz0: -22 [ 806.517463][ T4841] device hsr_slave_1 left promiscuous mode [ 806.585293][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.603354][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.846746][ T4841] device bridge_slave_1 left promiscuous mode [ 806.854782][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.148532][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562da800: rx timeout, send abort [ 807.648709][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027e41400: rx timeout, send abort [ 807.657084][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562da800: abort rx timeout. Force session deactivation [ 808.118427][ T4841] device bridge_slave_0 left promiscuous mode [ 808.299191][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027e41400: abort rx timeout. Force session deactivation [ 808.716344][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.723298][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.312962][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.469005][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 815.587448][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 815.709994][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.932735][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.668615][ T9194] tmpfs: Unknown parameter 'quota' [ 816.884963][ T4841] bond0 (unregistering): Released all slaves [ 817.353483][ T9038] device hsr_slave_0 entered promiscuous mode [ 817.413240][ T9038] device hsr_slave_1 entered promiscuous mode [ 817.902932][ T129] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 818.093064][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 818.119442][ T129] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 818.143143][ T129] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.155500][ T129] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 818.168074][ T129] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.179689][ T41] hid-generic 0000:0008:4000001.0001: unknown main item tag 0x0 [ 818.179783][ T41] hid-generic 0000:0008:4000001.0001: unknown main item tag 0x0 [ 818.179807][ T41] hid-generic 0000:0008:4000001.0001: unknown main item tag 0x0 [ 818.179828][ T41] hid-generic 0000:0008:4000001.0001: unknown main item tag 0x0 [ 818.179850][ T41] hid-generic 0000:0008:4000001.0001: unknown main item tag 0x0 [ 818.179873][ T41] hid-generic 0000:0008:4000001.0001: unknown main item tag 0x0 [ 818.179895][ T41] hid-generic 0000:0008:4000001.0001: unknown main item tag 0x0 [ 818.179917][ T41] hid-generic 0000:0008:4000001.0001: unknown main item tag 0x0 [ 818.323140][ T41] hid-generic 0000:0008:4000001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 818.549575][ T129] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.728422][ T9038] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 818.746026][ T129] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 818.808175][ T9218] fido_id[9218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 818.827609][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.898000][ T9038] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 818.939545][ T9038] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 819.051337][ T9038] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 819.105907][ T129] usb 3-1: usb_control_msg returned -32 [ 819.111944][ T129] usbtmc 3-1:16.0: can't read capabilities [ 821.037345][ T7707] usb 3-1: USB disconnect, device number 3 [ 822.352116][ T9038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.389234][ T9038] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.783983][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 822.794908][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 822.936044][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 823.054155][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.098267][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.105461][ T8543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.191713][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 825.013606][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 826.196131][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.203349][ T8543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.258659][ T9038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 826.269998][ T9038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 826.385772][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 826.490238][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 826.824854][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 826.955661][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 827.055318][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 827.131041][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 827.168906][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 827.334222][ T9296] comedi comedi0: comedi_config --init_data is deprecated [ 827.455134][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 827.456903][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 827.458867][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 827.487346][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 827.489251][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 827.491007][ T8543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 831.693426][ T9291] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 831.700099][ T9291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 831.710283][ T9291] vhci_hcd vhci_hcd.0: Device attached [ 831.962377][ T9303] vhci_hcd: connection closed [ 833.399102][ T4580] vhci_hcd: stop threads [ 833.520165][ T4580] vhci_hcd: release socket [ 833.524871][ T4580] vhci_hcd: disconnect device [ 833.729739][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 838.002368][ T9038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.093782][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.121449][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 841.603272][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807df1f800: rx timeout, send abort [ 842.049123][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807df1fc00: rx timeout, send abort [ 842.107266][ T9374] lo speed is unknown, defaulting to 1000 [ 842.112140][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807df1f800: abort rx timeout. Force session deactivation [ 842.558348][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807df1fc00: abort rx timeout. Force session deactivation [ 843.389206][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 843.655573][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 843.803748][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 843.822115][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 843.851072][ T9038] device veth0_vlan entered promiscuous mode [ 844.120170][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 844.129339][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 844.154149][ T9038] device veth1_vlan entered promiscuous mode [ 844.170579][ T9410] ib_srp: QP creation failed for dev syz0: -22 [ 844.511868][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 844.544631][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 844.653668][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 844.910156][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 845.064305][ T9038] device veth0_macvtap entered promiscuous mode [ 845.166246][ T9038] device veth1_macvtap entered promiscuous mode [ 845.472968][ T4368] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 846.139031][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 846.343463][ T4368] usb 8-1: Using ep0 maxpacket: 32 [ 846.483595][ T4368] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 846.491987][ T4368] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 846.577658][ T4368] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 846.647669][ T4368] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 846.766789][ T4368] usb 8-1: config 0 interface 0 has no altsetting 0 [ 846.796365][ T4368] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 846.826146][ T4368] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 846.857913][ T4368] usb 8-1: Product: syz [ 846.862192][ T4368] usb 8-1: Manufacturer: syz [ 846.918680][ T4368] usb 8-1: SerialNumber: syz [ 846.972548][ T4368] usb 8-1: config 0 descriptor?? [ 847.069803][ T4368] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 847.141449][ T4368] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 848.731691][ T9450] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 848.738358][ T9450] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 848.748316][ T9450] vhci_hcd vhci_hcd.0: Device attached [ 849.070611][ T7378] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 849.167602][ T9452] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 0 [ 849.227275][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.984'. [ 849.328732][ T4400] vhci_hcd: stop threads [ 849.498014][ T4400] vhci_hcd: release socket [ 849.694395][ T4400] vhci_hcd: disconnect device [ 850.607013][ T4324] usb 8-1: USB disconnect, device number 2 [ 851.097795][ T4324] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 851.155815][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 851.168141][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 851.178626][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 851.187701][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 851.196689][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 851.209177][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 852.330476][ T9455] lo speed is unknown, defaulting to 1000 [ 853.354230][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 854.325385][ T7378] vhci_hcd: vhci_device speed not set [ 855.433035][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 855.633390][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e09d000: rx timeout, send abort [ 855.696205][ T9455] chnl_net:caif_netlink_parms(): no params data found [ 856.153647][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e09f400: rx timeout, send abort [ 856.161896][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e09d000: abort rx timeout. Force session deactivation [ 857.522975][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 857.571497][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e09f400: abort rx timeout. Force session deactivation [ 857.878132][ T9455] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.931733][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.951396][ T9455] device bridge_slave_0 entered promiscuous mode [ 858.052677][ T9455] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.053887][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.056454][ T9455] device bridge_slave_1 entered promiscuous mode [ 859.187786][ T9523] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 859.194447][ T9523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 859.204529][ T9523] vhci_hcd vhci_hcd.0: Device attached [ 859.282280][ T9529] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 859.543682][ T7378] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 859.593420][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 860.837623][ T4580] vhci_hcd: stop threads [ 861.024932][ T4580] vhci_hcd: release socket [ 861.156218][ T4580] vhci_hcd: disconnect device [ 861.331553][ T9455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.378702][ T9537] futex_wake_op: syz.0.1012 tries to shift op by 144; fix this program [ 861.419481][ T9455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.890467][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 863.726160][ T9455] team0: Port device team_slave_0 added [ 863.936055][ T9455] team0: Port device team_slave_1 added [ 864.158637][ T9582] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 864.165220][ T9582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 864.173674][ T9582] vhci_hcd vhci_hcd.0: Device attached [ 864.452950][ T3600] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 864.874874][ T9583] vhci_hcd: connection closed [ 864.875676][ T4833] vhci_hcd: stop threads [ 866.003918][ T7378] vhci_hcd: vhci_device speed not set [ 866.460546][ T4833] vhci_hcd: release socket [ 866.553304][ T4833] vhci_hcd: disconnect device [ 867.002152][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.098560][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.294250][ T9455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.417635][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.445677][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.572982][ T4324] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 868.358671][ T9455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.441728][ T4835] device hsr_slave_0 left promiscuous mode [ 868.458002][ T4835] device hsr_slave_1 left promiscuous mode [ 868.472270][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.480868][ T9602] futex_wake_op: syz.7.1017 tries to shift op by 144; fix this program [ 868.492425][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.547513][ T4835] device bridge_slave_1 left promiscuous mode [ 868.557861][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.563461][ T4324] usb 7-1: Using ep0 maxpacket: 32 [ 868.576777][ T4324] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 868.587456][ T4324] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 868.601526][ T4324] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 868.764871][ T4324] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 869.170188][ T4324] usb 7-1: config 0 interface 0 has no altsetting 0 [ 869.428273][ T4835] device bridge_slave_0 left promiscuous mode [ 869.483428][ T4324] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 869.566652][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.703736][ T4324] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 869.861708][ T9604] jffs2: notice: (9604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 869.904728][ T4324] usb 7-1: Product: syz [ 869.951332][ T4324] usb 7-1: Manufacturer: syz [ 869.973751][ T4324] usb 7-1: SerialNumber: syz [ 870.011625][ T4324] usb 7-1: config 0 descriptor?? [ 870.024535][ T4835] device veth1_macvtap left promiscuous mode [ 870.031407][ T4835] device veth0_macvtap left promiscuous mode [ 870.038415][ T4835] device veth1_vlan left promiscuous mode [ 870.047481][ T4835] device veth0_vlan left promiscuous mode [ 870.054315][ T4324] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 870.067164][ T4324] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 870.160069][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.167468][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.645854][ T126] usb 7-1: USB disconnect, device number 2 [ 870.652710][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 870.667134][ T9593] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 870.683101][ T9614] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 870.695229][ T126] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 871.206031][ T4835] team0 (unregistering): Port device team_slave_1 removed [ 871.392237][ T4835] team0 (unregistering): Port device team_slave_0 removed [ 871.513140][ T3600] vhci_hcd: vhci_device speed not set [ 872.852395][ T4835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.983780][ T4835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.279596][ T9632] ib_srp: QP creation failed for dev syz0: -22 [ 873.470221][ T4835] bond0 (unregistering): Released all slaves [ 873.794007][ T9455] device hsr_slave_0 entered promiscuous mode [ 873.893262][ T9455] device hsr_slave_1 entered promiscuous mode [ 875.663917][ T9657] jffs2: notice: (9657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 881.044662][ T9675] futex_wake_op: syz.6.1035 tries to shift op by 144; fix this program [ 882.415226][ T9677] sched: RT throttling activated [ 883.445590][ T9455] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 883.529230][ T9455] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 884.374590][ T9685] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 884.381177][ T9685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 884.389299][ T9685] vhci_hcd vhci_hcd.0: Device attached [ 884.399774][ T9687] vhci_hcd: connection closed [ 884.400989][ T4580] vhci_hcd: stop threads [ 884.450261][ T4580] vhci_hcd: release socket [ 884.518633][ T4580] vhci_hcd: disconnect device [ 884.603362][ T3600] vhci_hcd: vhci_device speed not set [ 886.439071][ T9455] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 886.546641][ T9455] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 886.851140][ T9700] dummy_hcd dummy_hcd.0: remove, state 1 [ 886.898236][ T9700] usb usb1: USB disconnect, device number 1 [ 887.079182][ T9700] dummy_hcd dummy_hcd.0: stopped [ 887.085642][ T9455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.131375][ T9700] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 887.312044][ T9455] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.381907][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 888.433593][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 889.323545][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 889.382003][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 889.505084][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.512269][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.612143][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 889.677655][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 889.691297][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 889.720892][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.728169][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.739857][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 889.782072][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 889.915343][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 889.920813][ T9703] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 889.935719][ T9703] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 889.944136][ T9703] CPU: 1 PID: 9703 Comm: syz.0.1043 Not tainted syzkaller #0 [ 889.951514][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 889.961581][ T9703] RIP: 0010:set_link_state+0x27/0x11d0 [ 889.967165][ T9703] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 7c 02 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b a9 53 fb 4d 8b 26 4c 89 74 24 10 [ 889.986791][ T9703] RSP: 0018:ffffc900044a7640 EFLAGS: 00010046 [ 889.992867][ T9703] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88813fe5da00 [ 890.000853][ T9703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 890.008835][ T9703] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 890.016810][ T9703] R10: dffffc0000000000 R11: fffff52000894eb4 R12: 0000000000000a02 [ 890.024792][ T9703] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 890.032776][ T9703] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 890.041718][ T9703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 890.048316][ T9703] CR2: 0000200000006000 CR3: 000000003d0a3000 CR4: 00000000003506e0 [ 890.056303][ T9703] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 890.064288][ T9703] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 890.072282][ T9703] Call Trace: [ 890.075579][ T9703] [ 890.078521][ T9703] ? cancel_work_sync+0x20/0x20 [ 890.083381][ T9703] ? mutex_lock_nested+0x10/0x10 [ 890.088342][ T9703] dummy_pullup+0xbd/0x120 [ 890.092805][ T9703] ? dummy_set_selfpowered+0x150/0x150 [ 890.098286][ T9703] usb_gadget_disconnect_locked+0x123/0x4d0 [ 890.104204][ T9703] gadget_unbind_driver+0xbe/0x3d0 [ 890.109337][ T9703] ? gadget_bind_driver+0x760/0x760 [ 890.114588][ T9703] device_release_driver_internal+0x47d/0x7c0 [ 890.120676][ T9703] driver_detach+0x1ef/0x2d0 [ 890.125279][ T9703] bus_remove_driver+0x11c/0x230 [ 890.130232][ T9703] ? sysfs_remove_groups+0x8a/0xa0 [ 890.135364][ T9703] usb_gadget_unregister_driver+0x4a/0x70 [ 890.141105][ T9703] raw_release+0xd6/0x260 [ 890.145561][ T9703] ? raw_open+0x510/0x510 [ 890.149915][ T9703] __fput+0x20a/0x8b0 [ 890.153964][ T9703] task_work_run+0x1d0/0x260 [ 890.158570][ T9703] ? task_work_cancel+0x220/0x220 [ 890.163624][ T9703] ? do_raw_spin_unlock+0x11d/0x230 [ 890.169023][ T9703] do_exit+0x9d5/0x2570 [ 890.173277][ T9703] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 890.179275][ T9703] ? put_task_struct+0x80/0x80 [ 890.184057][ T9703] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 890.190236][ T9703] ? lockdep_hardirqs_on+0x94/0x140 [ 890.190634][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 890.195433][ T9703] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 890.195458][ T9703] do_group_exit+0x229/0x2e0 [ 890.195477][ T9703] ? _raw_spin_unlock_irq+0x25/0x40 [ 890.195495][ T9703] get_signal+0x1259/0x1340 [ 890.195520][ T9703] ? tomoyo_path_number_perm+0x5a4/0x650 [ 890.195614][ T9703] arch_do_signal_or_restart+0xc4/0x1310 [ 890.195704][ T9703] ? get_sigframe_size+0x10/0x10 [ 890.195727][ T9703] ? exit_to_user_mode_loop+0x3b/0x110 [ 890.245623][ T9703] exit_to_user_mode_loop+0x70/0x110 [ 890.250941][ T9703] exit_to_user_mode_prepare+0xee/0x180 [ 890.256511][ T9703] syscall_exit_to_user_mode+0x16/0x40 [ 890.261990][ T9703] do_syscall_64+0x58/0xa0 [ 890.266428][ T9703] ? clear_bhb_loop+0x60/0xb0 [ 890.271123][ T9703] ? clear_bhb_loop+0x60/0xb0 [ 890.275817][ T9703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 890.281732][ T9703] RIP: 0033:0x7fd60f39dd6b [ 890.286174][ T9703] Code: Unable to access opcode bytes at 0x7fd60f39dd41. [ 890.293204][ T9703] RSP: 002b:00007fd61027ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.301637][ T9703] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fd60f39dd6b [ 890.309627][ T9703] RDX: 00007fd610280fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 890.317616][ T9703] RBP: 00007fd610280fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 890.325615][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 890.333603][ T9703] R13: 0000000800000000 R14: 0000000000000000 R15: 00007fd60f4538e2 [ 890.341600][ T9703] [ 890.344642][ T9703] Modules linked in: [ 890.348566][ T9703] ---[ end trace 0000000000000000 ]--- [ 890.354033][ T9703] RIP: 0010:set_link_state+0x27/0x11d0 [ 890.359517][ T9703] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 7c 02 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b a9 53 fb 4d 8b 26 4c 89 74 24 10 [ 890.379143][ T9703] RSP: 0018:ffffc900044a7640 EFLAGS: 00010046 [ 890.385223][ T9703] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88813fe5da00 [ 890.393206][ T9703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 890.401185][ T9703] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 890.409169][ T9703] R10: dffffc0000000000 R11: fffff52000894eb4 R12: 0000000000000a02 [ 890.417157][ T9703] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 890.425148][ T9703] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 890.434106][ T9703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 890.440744][ T9703] CR2: 0000200000006000 CR3: 000000003d0a3000 CR4: 00000000003506e0 [ 890.448731][ T9703] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 890.456714][ T9703] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 890.464716][ T9703] Kernel panic - not syncing: Fatal exception [ 890.471046][ T9703] Kernel Offset: disabled [ 890.475373][ T9703] Rebooting in 86400 seconds..