last executing test programs: 8m59.602552763s ago: executing program 32 (id=22): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x1, @time}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000280), 0x3, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6m34.596798137s ago: executing program 33 (id=183): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) write$cgroup_int(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa005}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0xa, 0x10b080) read$usbmon(r5, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6m16.723658588s ago: executing program 5 (id=36): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='fsid\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 6m15.692363553s ago: executing program 5 (id=201): syz_open_dev$dvb_demux(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/30, 0x1e) 6m12.667431306s ago: executing program 5 (id=207): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, 0x0, 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, 0x0) connect$x25(r5, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x11622}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x7d}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x9}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x1ff}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x7}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 6m9.254075597s ago: executing program 5 (id=211): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x8854) listen(r0, 0x200) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x800, 0x20001, 0x2d7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 6m5.318993223s ago: executing program 5 (id=216): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x8854) listen(r0, 0x200) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 6m0.8537412s ago: executing program 5 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x200}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "042000", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x1b59, 0x8}}}}}}}, 0x42) 5m45.849009821s ago: executing program 34 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x200}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "042000", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x1b59, 0x8}}}}}}}, 0x42) 5m11.127781738s ago: executing program 2 (id=259): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 5m9.870956208s ago: executing program 2 (id=261): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93eb, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5m5.779196438s ago: executing program 2 (id=264): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='fsid\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000000)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f21", 0x65, 0xfffffffffffffffe) 4m58.885410344s ago: executing program 2 (id=277): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='fsid\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000000)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f21", 0x65, 0xfffffffffffffffe) 4m56.717013116s ago: executing program 2 (id=269): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x8854) listen(r0, 0x200) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 4m51.504685311s ago: executing program 2 (id=274): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, 0x0, 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, 0x0) connect$x25(r5, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x11622}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x7d}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x9}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x1ff}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x7}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 4m35.615945054s ago: executing program 35 (id=274): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, 0x0, 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, 0x0) connect$x25(r5, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x11622}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x7d}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x9}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x1ff}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x7}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 3m33.923956031s ago: executing program 1 (id=323): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='fsid\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000000)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d", 0xbd, 0xfffffffffffffffe) 3m31.245458826s ago: executing program 1 (id=325): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014000d800800010008000000060002000100000008", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 3m28.897595952s ago: executing program 1 (id=326): writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) 3m25.410331056s ago: executing program 1 (id=329): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r4, &(0x7f0000000440), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 3m17.612220044s ago: executing program 1 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0xb, 0x10, 0x4, "f05b8df0e4c390553edef4d6479ccebe1b71e5c9906c4bc27d3e735881be951f269d987405ae5219e17d60885cf63a3f93c33b31485562b803767f0e2113b9", 0x35}, 0x60) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfc, {0x79, 0x0, 0x1, r0, 0xb53, 0x2, 0x6, 0x9, 0x0, 0x401, 0x1}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044090}, 0x4004800) open(0x0, 0x240000, 0x10a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 3m14.522961508s ago: executing program 1 (id=340): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014000d8008000100080000000600020001000000080005", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 2m59.325568585s ago: executing program 36 (id=340): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014000d8008000100080000000600020001000000080005", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1m53.052236662s ago: executing program 3 (id=406): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) write$cgroup_int(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa005}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0xa, 0x10b080) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m42.972072325s ago: executing program 6 (id=408): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000380000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) timer_create(0x3, &(0x7f0000000140)={0x0, 0x7, 0x1, @tid=r2}, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000), 0x0) 1m41.582851328s ago: executing program 6 (id=412): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x1, @time}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000280), 0x3, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m41.581727818s ago: executing program 3 (id=421): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) write$cgroup_int(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa005}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0xa, 0x10b080) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m38.209530209s ago: executing program 6 (id=415): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff00070503020002"], 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r8, &(0x7f0000000080), 0x4003) 1m35.511082664s ago: executing program 3 (id=417): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='fsid\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000000)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d2d2dff7170fd51617a", 0xc6, 0xfffffffffffffffe) 1m30.062142515s ago: executing program 3 (id=422): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x1, @time}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000280), 0x3, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m28.942006112s ago: executing program 3 (id=423): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000380000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) timer_create(0x3, &(0x7f0000000140)={0x0, 0x7, 0x1, @tid=r2}, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000), 0x0) 1m28.941636623s ago: executing program 6 (id=424): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x1, @time}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000280), 0x3, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m24.210266776s ago: executing program 3 (id=425): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff00070503020002"], 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r8, &(0x7f0000000080), 0x4003) 1m24.209955136s ago: executing program 6 (id=426): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) write$cgroup_int(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa005}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0xa, 0x10b080) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m17.044301939s ago: executing program 6 (id=429): writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) 1m8.539808414s ago: executing program 37 (id=425): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff00070503020002"], 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r8, &(0x7f0000000080), 0x4003) 1m0.329344012s ago: executing program 38 (id=429): writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) 36.070620697s ago: executing program 0 (id=448): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x801ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x80200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0xc, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x0, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x1e, 0xffffffff, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x1, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 31.199880795s ago: executing program 0 (id=451): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff00070503020002"], 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r8, &(0x7f0000000080), 0x4003) 24.500745327s ago: executing program 0 (id=455): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) write$cgroup_int(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa005}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() r6 = syz_open_dev$usbmon(&(0x7f0000000300), 0xa, 0x10b080) read$usbmon(r6, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xe, 0x4) 20.368288377s ago: executing program 4 (id=441): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 20.367105487s ago: executing program 8 (id=466): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000380000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) timer_create(0x3, &(0x7f0000000140)={0x0, 0x7, 0x1, @tid=r2}, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000), 0x0) 19.984347686s ago: executing program 0 (id=457): socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x2150, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 19.054889758s ago: executing program 8 (id=458): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 17.021946278s ago: executing program 8 (id=460): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 15.460478126s ago: executing program 4 (id=461): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000380000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) timer_create(0x3, &(0x7f0000000140)={0x0, 0x7, 0x1, @tid=r2}, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000), 0x0) 15.459599216s ago: executing program 7 (id=472): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 15.401763167s ago: executing program 8 (id=462): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x801ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x80200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0xc, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x0, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x1e, 0xffffffff, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x1, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 15.013284427s ago: executing program 0 (id=463): io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff00070503020002"], 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r8, &(0x7f0000000080), 0x4003) 13.960618532s ago: executing program 7 (id=465): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 13.856428784s ago: executing program 4 (id=467): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r5 = gettid() tkill(r5, 0x16) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000001c0)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x6, 0x870}}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 13.235889449s ago: executing program 9 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0xb, 0x10, 0x4, "f05b8df0e4c390553edef4d6479ccebe1b71e5c9906c4bc27d3e735881be951f269d987405ae5219e17d60885cf63a3f93c33b31485562b803767f0e2113b9", 0x35}, 0x60) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfc, {0x79, 0x0, 0x1, r0, 0xb53, 0x2, 0x6, 0x9, 0x0, 0x401, 0x1}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044090}, 0x4004800) open(0x0, 0x240000, 0x10a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 10.216832032s ago: executing program 7 (id=468): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 8.784489798s ago: executing program 4 (id=469): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000380000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) timer_create(0x3, &(0x7f0000000140)={0x0, 0x7, 0x1, @tid=r2}, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000), 0x0) 8.781841267s ago: executing program 0 (id=470): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) write$cgroup_int(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa005}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xe, 0x4) 6.973603721s ago: executing program 7 (id=471): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000380000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) timer_create(0x3, &(0x7f0000000140)={0x0, 0x7, 0x1, @tid=r2}, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000), 0x0) 6.063247483s ago: executing program 4 (id=473): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 6.062275113s ago: executing program 8 (id=483): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 4.775468664s ago: executing program 7 (id=474): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 664.641754ms ago: executing program 4 (id=475): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r5 = gettid() tkill(r5, 0x16) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000001c0)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x6, 0x870}}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 638.975304ms ago: executing program 8 (id=476): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='super-speed\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 0s ago: executing program 7 (id=477): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000380000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) timer_create(0x3, &(0x7f0000000140)={0x0, 0x7, 0x1, @tid=r2}, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): 063100][ T5309] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.125891][ T5208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.151113][ T5309] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.169462][ T5309] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 273.188506][ T5208] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.195642][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.213842][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.254351][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.268346][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.278413][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.286859][ T4598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.350222][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.364167][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.381981][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.398148][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.406296][ T4598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.425119][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.441847][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.456894][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 273.481575][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.506299][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.518833][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.609037][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.625483][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.636357][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.645965][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.679953][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.701574][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.725310][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.813697][ T5309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.868844][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.879317][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.893728][ T5309] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.948480][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.967630][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.982009][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.989316][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.111052][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.120822][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.147159][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.175211][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.182509][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.196185][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.212544][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.246973][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.271507][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.298786][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.438971][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.454742][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.499741][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.512573][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.525488][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.544525][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.571409][ T4365] device hsr_slave_0 left promiscuous mode [ 274.585516][ T4365] device hsr_slave_1 left promiscuous mode [ 274.594783][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.609677][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.621538][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.630815][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.641178][ T4365] device bridge_slave_1 left promiscuous mode [ 274.649098][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.659842][ T4365] device bridge_slave_0 left promiscuous mode [ 274.667598][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.699991][ T4365] device veth1_macvtap left promiscuous mode [ 274.706230][ T4365] device veth0_macvtap left promiscuous mode [ 274.713168][ T4365] device veth1_vlan left promiscuous mode [ 274.719361][ T4365] device veth0_vlan left promiscuous mode [ 275.434106][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 275.489492][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 275.559539][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.620453][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.068394][ T4365] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 276.078003][ T4365] bond0 (unregistering): Released all slaves [ 276.196131][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.246992][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.254910][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.281928][ T5208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.966526][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.981888][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.013093][ T5309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.156192][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.175019][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.209062][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.225446][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.245859][ T5208] device veth0_vlan entered promiscuous mode [ 277.272518][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.300086][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.335433][ T5208] device veth1_vlan entered promiscuous mode [ 277.407325][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.424052][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.461065][ T5208] device veth0_macvtap entered promiscuous mode [ 277.473190][ T5208] device veth1_macvtap entered promiscuous mode [ 277.549508][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.609662][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.625580][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.643942][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.662644][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.673779][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.701703][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.720944][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.733432][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.745634][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.762917][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.776226][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.793721][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.805264][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.825373][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.835865][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.855314][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.875552][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.894895][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.928157][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.960720][ T5208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.979209][ T5208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.988186][ T5208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.997834][ T5208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.206314][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.219686][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.249687][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.306027][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.327051][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.338700][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.699733][ T26] audit: type=1800 audit(1787475074.073:125): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.210" name="idVendor" dev="configfs" ino=38093 res=0 errno=0 [ 278.724273][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.772439][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.853828][ T26] audit: type=1800 audit(1787475074.103:126): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.210" name="idProduct" dev="configfs" ino=38094 res=0 errno=0 [ 281.527021][ T5419] jffs2: notice: (5419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 281.621269][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.643961][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.748313][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.767658][ T26] audit: type=1800 audit(1787475074.873:127): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.210" name="UDC" dev="configfs" ino=38096 res=0 errno=0 [ 282.037585][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.180050][ T5309] device veth0_vlan entered promiscuous mode [ 282.247519][ T26] audit: type=1800 audit(1787475076.963:128): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.203" name="idVendor" dev="configfs" ino=38110 res=0 errno=0 [ 282.317952][ T5309] device veth1_vlan entered promiscuous mode [ 282.353600][ T26] audit: type=1800 audit(1787475077.063:129): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.203" name="idProduct" dev="configfs" ino=38121 res=0 errno=0 [ 282.546019][ T26] audit: type=1800 audit(1787475077.063:130): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.203" name="max_speed" dev="configfs" ino=38122 res=0 errno=0 [ 282.627297][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.687376][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.724360][ T5309] device veth0_macvtap entered promiscuous mode [ 282.748711][ T26] audit: type=1800 audit(1787475077.063:131): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.203" name="UDC" dev="configfs" ino=38123 res=0 errno=0 [ 284.363631][ T5435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 284.395880][ T5309] device veth1_macvtap entered promiscuous mode [ 284.537468][ T5445] autofs4:pid:5445:autofs_fill_super: called with bogus options [ 284.552943][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.906836][ T5443] netlink: 'syz.5.207': attribute type 10 has an invalid length. [ 284.934996][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.943269][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.048748][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.056006][ T5443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.063574][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.070847][ T5443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.108305][ T5443] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 285.139080][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.152772][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.213646][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.255337][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.300370][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.352179][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.383990][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.396344][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.438443][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.467602][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.507379][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.554217][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.581167][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.604972][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.626712][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.663092][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.702136][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.722235][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.766931][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.788616][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.815321][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.842450][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.878076][ T5309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.898494][ T5309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.916775][ T5309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.978928][ T5309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.799580][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.983024][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.604802][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.708969][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.769875][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.792940][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.006424][ T26] audit: type=1800 audit(1787475085.373:132): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.217" name="idVendor" dev="configfs" ino=39677 res=0 errno=0 [ 290.367139][ T26] audit: type=1800 audit(1787475085.403:133): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.217" name="idProduct" dev="configfs" ino=39678 res=0 errno=0 [ 290.447012][ T26] audit: type=1800 audit(1787475085.423:134): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.217" name="UDC" dev="configfs" ino=39679 res=0 errno=0 [ 291.741121][ T5494] jffs2: notice: (5494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 291.954258][ T26] audit: type=1800 audit(1787475087.323:135): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.220" name="idVendor" dev="configfs" ino=39704 res=0 errno=0 [ 292.276801][ T26] audit: type=1800 audit(1787475087.353:136): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.220" name="idProduct" dev="configfs" ino=39705 res=0 errno=0 [ 292.962009][ T26] audit: type=1800 audit(1787475087.353:137): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.220" name="max_speed" dev="configfs" ino=39706 res=0 errno=0 [ 293.031321][ T26] audit: type=1800 audit(1787475087.353:138): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.220" name="UDC" dev="configfs" ino=39707 res=0 errno=0 [ 293.390072][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 294.248311][ T5509] autofs4:pid:5509:autofs_fill_super: called with bogus options [ 294.260947][ T5509] netlink: 'syz.1.222': attribute type 10 has an invalid length. [ 299.605428][ T4412] Bluetooth: hci2: Frame reassembly failed (-84) [ 301.618337][ T4289] Bluetooth: hci2: command 0xfc11 tx timeout [ 301.618392][ T4277] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 303.141318][ T5538] jffs2: notice: (5538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 305.368426][ T26] audit: type=1800 audit(1787475100.743:139): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.229" name="idVendor" dev="configfs" ino=39791 res=0 errno=0 [ 305.527723][ T4277] Bluetooth: hci2: command 0xfc11 tx timeout [ 305.535329][ T4289] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 305.775289][ T26] audit: type=1800 audit(1787475100.763:140): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.229" name="idProduct" dev="configfs" ino=39792 res=0 errno=0 [ 306.043560][ T26] audit: type=1800 audit(1787475100.763:141): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.229" name="UDC" dev="configfs" ino=39793 res=0 errno=0 [ 309.361050][ T5559] jffs2: notice: (5559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 309.399753][ T26] audit: type=1800 audit(1787475104.773:142): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="idVendor" dev="configfs" ino=39816 res=0 errno=0 [ 309.666791][ T26] audit: type=1800 audit(1787475104.803:143): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="idProduct" dev="configfs" ino=39817 res=0 errno=0 [ 309.854473][ T26] audit: type=1800 audit(1787475104.813:144): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="max_speed" dev="configfs" ino=39818 res=0 errno=0 [ 310.023243][ T26] audit: type=1800 audit(1787475104.813:145): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="UDC" dev="configfs" ino=39819 res=0 errno=0 [ 317.266787][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.273299][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.185426][ T26] audit: type=1800 audit(1787475113.553:146): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.242" name="idVendor" dev="configfs" ino=38442 res=0 errno=0 [ 318.305444][ T5592] autofs4:pid:5592:autofs_fill_super: called with bogus options [ 319.867716][ T26] audit: type=1800 audit(1787475113.603:147): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.242" name="idProduct" dev="configfs" ino=38443 res=0 errno=0 [ 320.655119][ T5588] netlink: 'syz.1.239': attribute type 10 has an invalid length. [ 320.696931][ T26] audit: type=1800 audit(1787475113.603:148): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.242" name="UDC" dev="configfs" ino=38444 res=0 errno=0 [ 321.123823][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.137494][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.217010][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.229442][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.238961][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.256997][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.637725][ T5604] jffs2: notice: (5604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 322.391863][ T26] audit: type=1800 audit(1787475117.763:149): pid=5611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="idVendor" dev="configfs" ino=38490 res=0 errno=0 [ 322.592912][ T4486] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.617026][ T26] audit: type=1800 audit(1787475117.853:150): pid=5611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="idProduct" dev="configfs" ino=38491 res=0 errno=0 [ 323.296829][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 324.881484][ T4277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 324.889417][ T4289] Bluetooth: hci3: command 0xfc11 tx timeout [ 325.054816][ T26] audit: type=1800 audit(1787475117.853:151): pid=5611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="max_speed" dev="configfs" ino=38492 res=0 errno=0 [ 325.336202][ T26] audit: type=1800 audit(1787475117.853:152): pid=5611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="UDC" dev="configfs" ino=38493 res=0 errno=0 [ 325.376737][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 327.369249][ T26] audit: type=1800 audit(1787475122.743:153): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.256" name="idVendor" dev="configfs" ino=38500 res=0 errno=0 [ 327.468014][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 327.595339][ T26] audit: type=1800 audit(1787475122.783:154): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.256" name="idProduct" dev="configfs" ino=38501 res=0 errno=0 [ 327.635109][ T26] audit: type=1800 audit(1787475122.793:155): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.256" name="max_speed" dev="configfs" ino=38502 res=0 errno=0 [ 327.827578][ T26] audit: type=1800 audit(1787475122.793:156): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.256" name="UDC" dev="configfs" ino=38503 res=0 errno=0 [ 327.851153][ T4486] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.135253][ T4486] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.536854][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 330.298291][ T4486] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.498124][ T4289] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 330.506017][ T4277] Bluetooth: hci3: command 0xfc11 tx timeout [ 332.278953][ T26] audit: type=1800 audit(1787475127.653:157): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.252" name="idVendor" dev="configfs" ino=39936 res=0 errno=0 [ 332.584203][ T26] audit: type=1800 audit(1787475127.683:158): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.252" name="idProduct" dev="configfs" ino=39937 res=0 errno=0 [ 332.766864][ T26] audit: type=1800 audit(1787475127.683:159): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.252" name="UDC" dev="configfs" ino=39938 res=0 errno=0 [ 332.808170][ T5601] chnl_net:caif_netlink_parms(): no params data found [ 333.212608][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.283771][ T5640] jffs2: notice: (5640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 333.301891][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.410322][ T5601] device bridge_slave_0 entered promiscuous mode [ 333.438431][ T26] audit: type=1800 audit(1787475128.813:160): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="idVendor" dev="configfs" ino=38667 res=0 errno=0 [ 335.236755][ T26] audit: type=1800 audit(1787475128.883:161): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="idProduct" dev="configfs" ino=38670 res=0 errno=0 [ 335.436713][ T26] audit: type=1800 audit(1787475128.883:162): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="max_speed" dev="configfs" ino=38671 res=0 errno=0 [ 335.914907][ T26] audit: type=1800 audit(1787475128.883:163): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="UDC" dev="configfs" ino=38672 res=0 errno=0 [ 339.575936][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.587065][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.667947][ T5601] device bridge_slave_1 entered promiscuous mode [ 341.707648][ T26] audit: type=1800 audit(1787475137.083:164): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.266" name="idVendor" dev="configfs" ino=38702 res=0 errno=0 [ 341.952032][ T5672] autofs4:pid:5672:autofs_fill_super: called with bogus options [ 342.048938][ T26] audit: type=1800 audit(1787475137.103:165): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.266" name="idProduct" dev="configfs" ino=38703 res=0 errno=0 [ 342.168326][ T26] audit: type=1800 audit(1787475137.103:166): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.266" name="max_speed" dev="configfs" ino=38704 res=0 errno=0 [ 342.292712][ T5672] netlink: 'syz.6.254': attribute type 10 has an invalid length. [ 342.336798][ T26] audit: type=1800 audit(1787475137.103:167): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.266" name="UDC" dev="configfs" ino=38705 res=0 errno=0 [ 344.506404][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.513964][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.599574][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.607597][ T5672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.616457][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.623822][ T5672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.730172][ T26] audit: type=1800 audit(1787475140.103:168): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="idVendor" dev="configfs" ino=40010 res=0 errno=0 [ 344.909073][ T5672] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 344.957481][ T26] audit: type=1800 audit(1787475140.103:169): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="idProduct" dev="configfs" ino=40011 res=0 errno=0 [ 345.079796][ T5689] jffs2: notice: (5689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 345.121766][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.214714][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.261026][ T26] audit: type=1800 audit(1787475140.103:170): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="UDC" dev="configfs" ino=40012 res=0 errno=0 [ 347.328432][ T5693] autofs4:pid:5693:autofs_fill_super: called with bogus options [ 347.618099][ T4289] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 347.626080][ T4277] Bluetooth: hci3: command 0xfc11 tx timeout [ 349.197273][ T5693] netlink: 'syz.3.270': attribute type 10 has an invalid length. [ 353.344522][ T5601] team0: Port device team_slave_0 added [ 353.386809][ T4289] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 353.395756][ T4277] Bluetooth: hci3: command 0xfc11 tx timeout [ 356.098311][ T4277] Bluetooth: hci3: command 0xfc11 tx timeout [ 356.107006][ T4289] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 358.297583][ T5601] team0: Port device team_slave_1 added [ 358.540631][ T26] audit: type=1800 audit(1787475153.913:171): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.268" name="idVendor" dev="configfs" ino=40064 res=0 errno=0 [ 360.467508][ T26] audit: type=1800 audit(1787475153.943:172): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.268" name="idProduct" dev="configfs" ino=40065 res=0 errno=0 [ 361.786709][ T26] audit: type=1800 audit(1787475153.943:173): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.268" name="max_speed" dev="configfs" ino=40066 res=0 errno=0 [ 361.968604][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.975645][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.030737][ T26] audit: type=1800 audit(1787475153.943:174): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.268" name="UDC" dev="configfs" ino=40067 res=0 errno=0 [ 362.142911][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.063582][ T26] audit: type=1800 audit(1787475159.433:175): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="idVendor" dev="configfs" ino=38821 res=0 errno=0 [ 364.242183][ T26] audit: type=1800 audit(1787475159.513:176): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="idProduct" dev="configfs" ino=40097 res=0 errno=0 [ 366.435854][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.486504][ T26] audit: type=1800 audit(1787475159.533:177): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="max_speed" dev="configfs" ino=40098 res=0 errno=0 [ 367.507583][ T26] audit: type=1800 audit(1787475159.533:178): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="UDC" dev="configfs" ino=40099 res=0 errno=0 [ 367.528422][ T26] audit: type=1800 audit(1787475162.033:179): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="idProduct" dev="configfs" ino=38830 res=0 errno=0 [ 367.627965][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.944158][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.417661][ T4277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 370.425954][ T4289] Bluetooth: hci3: command 0xfc11 tx timeout [ 374.176799][ T4289] Bluetooth: hci3: command 0xfc11 tx timeout [ 374.184766][ T4277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 377.377535][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.403697][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.415742][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.425394][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.434381][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 377.442207][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.715491][ T4486] device hsr_slave_0 left promiscuous mode [ 377.757409][ T4486] device hsr_slave_1 left promiscuous mode [ 377.824770][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.896550][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.968921][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.033904][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.095772][ T4486] device bridge_slave_1 left promiscuous mode [ 378.208896][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.239629][ T4486] device bridge_slave_0 left promiscuous mode [ 378.246564][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.424994][ T4486] device veth1_macvtap left promiscuous mode [ 378.463675][ T4486] device veth0_macvtap left promiscuous mode [ 378.517859][ T4486] device veth1_vlan left promiscuous mode [ 378.565530][ T4486] device veth0_vlan left promiscuous mode [ 378.581851][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.589759][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.556511][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 381.721112][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 383.255889][ T26] audit: type=1800 audit(1787475178.623:180): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.287" name="idVendor" dev="configfs" ino=40969 res=0 errno=0 [ 383.566734][ T26] audit: type=1800 audit(1787475178.663:181): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.287" name="idProduct" dev="configfs" ino=40970 res=0 errno=0 [ 383.755608][ T26] audit: type=1800 audit(1787475178.673:182): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.287" name="UDC" dev="configfs" ino=40971 res=0 errno=0 [ 383.776818][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 383.971848][ T26] audit: type=1800 audit(1787475179.343:183): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.288" name="idVendor" dev="configfs" ino=40980 res=0 errno=0 [ 384.342523][ T26] audit: type=1800 audit(1787475179.363:184): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.288" name="idProduct" dev="configfs" ino=40981 res=0 errno=0 [ 384.387822][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 384.399774][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 384.418783][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.427183][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.435653][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 384.443241][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 384.593595][ T26] audit: type=1800 audit(1787475179.363:185): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.288" name="max_speed" dev="configfs" ino=40982 res=0 errno=0 [ 384.736791][ T26] audit: type=1800 audit(1787475179.363:186): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.288" name="UDC" dev="configfs" ino=40983 res=0 errno=0 [ 385.856740][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 386.497789][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 388.576808][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 389.616759][ T4277] Bluetooth: hci6: command 0xfc11 tx timeout [ 389.616917][ T4289] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 390.656865][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 390.906679][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 391.963112][ T4486] team0 (unregistering): Port device team_slave_1 removed [ 392.151121][ T4366] Bluetooth: hci4: Frame reassembly failed (-84) [ 392.736914][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 394.176976][ T4289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 394.186106][ T4277] Bluetooth: hci4: command 0xfc11 tx timeout [ 394.860327][ T4405] Bluetooth: hci6: Frame reassembly failed (-84) [ 396.816773][ T4289] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 398.825873][ T4486] team0 (unregistering): Port device team_slave_0 removed [ 400.349961][ T4486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.513572][ T4486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.578473][ T26] audit: type=1800 audit(1787475196.953:187): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="idVendor" dev="configfs" ino=40230 res=0 errno=0 [ 401.841607][ T26] audit: type=1800 audit(1787475196.983:188): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="idProduct" dev="configfs" ino=40231 res=0 errno=0 [ 401.945980][ T26] audit: type=1800 audit(1787475196.983:189): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="max_speed" dev="configfs" ino=40232 res=0 errno=0 [ 402.023682][ T26] audit: type=1800 audit(1787475196.983:190): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="UDC" dev="configfs" ino=40233 res=0 errno=0 [ 403.829018][ T26] audit: type=1800 audit(1787475199.203:191): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.298" name="idVendor" dev="configfs" ino=40240 res=0 errno=0 [ 404.056985][ T26] audit: type=1800 audit(1787475199.223:192): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.298" name="idProduct" dev="configfs" ino=40241 res=0 errno=0 [ 404.147418][ T26] audit: type=1800 audit(1787475199.223:193): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.298" name="UDC" dev="configfs" ino=40242 res=0 errno=0 [ 406.660560][ T4486] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 406.677698][ T4486] bond0 (unregistering): Released all slaves [ 410.123580][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 410.171582][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 410.286854][ T4486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.520481][ T4486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.775540][ T4486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.941007][ T4486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.016886][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.029209][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.058565][ T5814] device bridge_slave_0 entered promiscuous mode [ 411.134127][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.145368][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.188273][ T5793] device bridge_slave_0 entered promiscuous mode [ 411.264294][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.280561][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.307984][ T5793] device bridge_slave_1 entered promiscuous mode [ 411.334882][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.356930][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.365906][ T5814] device bridge_slave_1 entered promiscuous mode [ 411.583872][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.639147][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.659113][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.756021][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.824969][ T5814] team0: Port device team_slave_0 added [ 411.885302][ T5814] team0: Port device team_slave_1 added [ 411.965960][ T5793] team0: Port device team_slave_0 added [ 412.025116][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.085696][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.142676][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.158367][ T5793] team0: Port device team_slave_1 added [ 412.232772][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.246650][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.306891][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.547521][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.554902][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.589435][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.642014][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.653400][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.688435][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.712684][ T5814] device hsr_slave_0 entered promiscuous mode [ 412.721164][ T5814] device hsr_slave_1 entered promiscuous mode [ 412.894456][ T5793] device hsr_slave_0 entered promiscuous mode [ 412.901717][ T5793] device hsr_slave_1 entered promiscuous mode [ 412.920552][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.935993][ T5793] Cannot create hsr debugfs directory [ 413.412296][ T5814] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 413.467579][ T5814] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 413.571208][ T5814] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 413.588908][ T5814] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 413.715424][ T5793] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 413.725909][ T5793] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 413.736188][ T5793] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 413.762092][ T5793] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 413.827589][ T4486] device hsr_slave_0 left promiscuous mode [ 413.835859][ T4486] device hsr_slave_1 left promiscuous mode [ 413.843356][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.851821][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.861291][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.869312][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.878491][ T4486] device bridge_slave_1 left promiscuous mode [ 413.885024][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.894596][ T4486] device bridge_slave_0 left promiscuous mode [ 413.901358][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.912359][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.920606][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.929784][ T4486] device bridge_slave_1 left promiscuous mode [ 413.936153][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.946093][ T4486] device bridge_slave_0 left promiscuous mode [ 413.953274][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.985612][ T4486] device veth1_macvtap left promiscuous mode [ 413.993265][ T4486] device veth0_macvtap left promiscuous mode [ 414.000074][ T4486] device veth1_vlan left promiscuous mode [ 414.005993][ T4486] device veth0_vlan left promiscuous mode [ 414.730750][ T4486] team0 (unregistering): Port device team_slave_1 removed [ 414.783478][ T4486] team0 (unregistering): Port device team_slave_0 removed [ 414.833048][ T4486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.887695][ T4486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.324714][ T4486] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 415.334277][ T4486] bond0 (unregistering): Released all slaves [ 415.514692][ T4486] team0 (unregistering): Port device team_slave_1 removed [ 415.554426][ T4486] team0 (unregistering): Port device team_slave_0 removed [ 415.587735][ T4486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.630418][ T4486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.721069][ T4486] bond0 (unregistering): Released all slaves [ 415.901734][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.921009][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.934559][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.962466][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.993120][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.008232][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.017394][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.024565][ T4464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.032653][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.063844][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.080922][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 416.103985][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.122642][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.129886][ T4464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.139268][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 416.150295][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 416.180211][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.189095][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.200630][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 416.211667][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.223163][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.241176][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.268954][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.280267][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.299966][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.310259][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.319526][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.326717][ T4464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.336777][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.345867][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.363750][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.381837][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.408307][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.423967][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 416.440009][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.460879][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.468109][ T4464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.476900][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.485981][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.506100][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 416.532559][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 416.542723][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 416.563731][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.573926][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.605363][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.617444][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.664993][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.683960][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.705018][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.738347][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.748385][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.758704][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.215678][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.225770][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 417.260027][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.535498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.543514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 417.605432][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.113454][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 418.138185][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 418.184779][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 418.207846][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.229377][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.250725][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.277421][ T5814] device veth0_vlan entered promiscuous mode [ 418.316394][ T5814] device veth1_vlan entered promiscuous mode [ 418.383459][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 418.393831][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 418.404022][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.413698][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.429227][ T5814] device veth0_macvtap entered promiscuous mode [ 418.451359][ T5814] device veth1_macvtap entered promiscuous mode [ 418.490024][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.504585][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.525939][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.537226][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.547799][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.559468][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.572810][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.600312][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.610212][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 418.619313][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.629488][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.641569][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 418.651994][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 418.672274][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.690688][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.706212][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.723644][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.733859][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.744569][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.761863][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.772474][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 418.783198][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 418.795175][ T5814] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.812648][ T5814] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.824937][ T5814] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.840307][ T5814] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.916088][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 418.937790][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.948199][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.957009][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.967285][ T5793] device veth0_vlan entered promiscuous mode [ 419.022859][ T5793] device veth1_vlan entered promiscuous mode [ 419.078342][ T4679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.086240][ T4679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.125499][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 419.142370][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 419.154384][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 419.171897][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 419.186894][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.198223][ T5793] device veth0_macvtap entered promiscuous mode [ 419.227850][ T4679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.235801][ T4679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.239090][ T5793] device veth1_macvtap entered promiscuous mode [ 419.279543][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.293905][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 419.333159][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.346458][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.363673][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.385735][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.402331][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.413230][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.430188][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.441256][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.475282][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.488736][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.508106][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.529917][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.596781][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.631341][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.778372][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.789034][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.736110][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.329164][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.446302][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.595035][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.668026][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.754636][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.057151][ T4277] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 423.064869][ T4289] Bluetooth: hci4: command 0xfc11 tx timeout [ 425.132618][ T5793] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.174258][ T5793] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.208080][ T5793] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.221832][ T5793] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.776877][ T4679] Bluetooth: hci4: Frame reassembly failed (-84) [ 429.780282][ T4289] Bluetooth: hci4: command 0xfc11 tx timeout [ 429.780465][ T4277] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 429.961757][ T4543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.062973][ T4543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.140010][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.218319][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.235874][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.266526][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.288052][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.234'. [ 433.136726][ T4277] Bluetooth: hci4: command 0xfc11 tx timeout [ 433.144832][ T4289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 436.287343][ T26] audit: type=1800 audit(1787475231.663:194): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.309" name="idVendor" dev="configfs" ino=43481 res=0 errno=0 [ 436.736894][ T26] audit: type=1800 audit(1787475231.683:195): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.309" name="idProduct" dev="configfs" ino=43482 res=0 errno=0 [ 436.778998][ T26] audit: type=1800 audit(1787475231.683:196): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.309" name="max_speed" dev="configfs" ino=43483 res=0 errno=0 [ 436.799935][ T26] audit: type=1800 audit(1787475231.693:197): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.309" name="UDC" dev="configfs" ino=43484 res=0 errno=0 [ 439.141635][ T6032] syz.7.321 (6032): drop_caches: 2 [ 441.150461][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.157217][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.056889][ T4478] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 444.360329][ T4478] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.536142][ T4478] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 444.905471][ T4478] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 445.213329][ T4478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.065377][ T6048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'. [ 446.279535][ T4478] ttusb_dec_send_command: command bulk message failed: error -71 [ 447.152623][ T4478] ttusb-dec: probe of 4-1:1.0 failed with error -71 [ 447.187212][ T4478] usb 4-1: USB disconnect, device number 6 [ 447.292771][ T5987] udevd[5987]: setting mode of /dev/bus/usb/004/006 to 020664 failed: No such file or directory [ 447.397612][ T5987] udevd[5987]: setting owner of /dev/bus/usb/004/006 to uid=0, gid=0 failed: No such file or directory [ 447.845734][ T6064] netlink: 16 bytes leftover after parsing attributes in process `syz.6.337'. [ 447.963709][ T4543] Bluetooth: hci4: Frame reassembly failed (-84) [ 450.017373][ T4277] Bluetooth: hci4: command 0xfc11 tx timeout [ 450.025032][ T4289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 452.476283][ T26] audit: type=1800 audit(1787475247.843:198): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.331" name="idVendor" dev="configfs" ino=44178 res=0 errno=0 [ 454.593693][ T26] audit: type=1800 audit(1787475248.823:199): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.331" name="idProduct" dev="configfs" ino=44180 res=0 errno=0 [ 454.882427][ T26] audit: type=1800 audit(1787475248.933:200): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.331" name="max_speed" dev="configfs" ino=44181 res=0 errno=0 [ 455.168160][ T26] audit: type=1800 audit(1787475248.973:201): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.331" name="UDC" dev="configfs" ino=44182 res=0 errno=0 [ 457.238458][ T6085] input: syz1 as /devices/virtual/input/input6 [ 459.206713][ T6102] syz.6.338 (6102): drop_caches: 2 [ 463.947810][ T3599] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 464.243716][ T3599] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.416515][ T3599] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 464.883470][ T3599] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 465.194189][ T3599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.976976][ T3599] ttusb_dec_send_command: command bulk message failed: error -110 [ 466.986195][ T3599] ttusb-dec: probe of 7-1:1.0 failed with error -110 [ 467.222437][ T4261] usb 7-1: USB disconnect, device number 2 [ 468.571442][ T26] audit: type=1800 audit(1787475263.943:202): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.344" name="idVendor" dev="configfs" ino=45620 res=0 errno=0 [ 470.754734][ T4289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 470.762654][ T4277] Bluetooth: hci4: command 0xfc11 tx timeout [ 470.910230][ T26] audit: type=1800 audit(1787475265.943:203): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.344" name="idProduct" dev="configfs" ino=45621 res=0 errno=0 [ 471.278836][ T26] audit: type=1800 audit(1787475265.963:204): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.344" name="UDC" dev="configfs" ino=45622 res=0 errno=0 [ 471.987494][ T26] audit: type=1800 audit(1787475266.753:205): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.345" name="idVendor" dev="configfs" ino=44266 res=0 errno=0 [ 472.411295][ T26] audit: type=1800 audit(1787475266.763:206): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.345" name="idProduct" dev="configfs" ino=44267 res=0 errno=0 [ 472.432580][ T26] audit: type=1800 audit(1787475266.773:207): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.345" name="max_speed" dev="configfs" ino=44268 res=0 errno=0 [ 472.453376][ T26] audit: type=1800 audit(1787475266.773:208): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.345" name="UDC" dev="configfs" ino=44269 res=0 errno=0 [ 473.890709][ T26] audit: type=1800 audit(1787475269.263:209): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.356" name="idVendor" dev="configfs" ino=45637 res=0 errno=0 [ 474.437350][ T26] audit: type=1800 audit(1787475269.283:210): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.356" name="idProduct" dev="configfs" ino=45638 res=0 errno=0 [ 474.520533][ T26] audit: type=1800 audit(1787475269.283:211): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.356" name="UDC" dev="configfs" ino=45639 res=0 errno=0 [ 474.615204][ T26] audit: type=1800 audit(1787475269.553:212): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.359" name="idProduct" dev="configfs" ino=45644 res=0 errno=0 [ 474.731922][ T26] audit: type=1800 audit(1787475269.563:213): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.359" name="max_speed" dev="configfs" ino=45645 res=0 errno=0 [ 474.904028][ T26] audit: type=1800 audit(1787475269.563:214): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.359" name="UDC" dev="configfs" ino=45646 res=0 errno=0 [ 475.794217][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 476.553942][ T6162] input: syz1 as /devices/virtual/input/input7 [ 476.692490][ T6166] syz.3.351 (6166): drop_caches: 2 [ 477.476881][ T6168] syz.8.347 (6168): drop_caches: 2 [ 478.322957][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.332782][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.643663][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 479.099558][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 479.107816][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 479.118828][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.926760][ T4319] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 480.999111][ T4272] syz-executor (4272) used greatest stack depth: 20608 bytes left [ 481.217140][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 481.237881][ T4319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.383657][ T4319] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 481.675357][ T4319] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 481.846362][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.741124][ T4365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.297161][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 483.304911][ T4319] ttusb_dec_send_command: command bulk message failed: error -110 [ 483.453689][ T4319] ttusb-dec: probe of 4-1:1.0 failed with error -110 [ 485.376660][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 485.787826][ T4288] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 485.795562][ T4289] Bluetooth: hci0: command 0xfc11 tx timeout [ 487.074916][ T126] usb 4-1: USB disconnect, device number 7 [ 487.456679][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 489.356935][ T4350] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 489.754561][ T4350] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.010536][ T4350] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 490.035068][ T4365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.346941][ T4350] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 490.365812][ T26] audit: type=1800 audit(1787475285.733:215): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.361" name="idVendor" dev="configfs" ino=45712 res=0 errno=0 [ 490.566709][ T4350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.656887][ T26] audit: type=1800 audit(1787475285.763:216): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.361" name="idProduct" dev="configfs" ino=45713 res=0 errno=0 [ 490.719097][ T6219] input: syz1 as /devices/virtual/input/input8 [ 490.738316][ T4350] usb 9-1: can't set config #1, error -71 [ 490.791359][ T4350] usb 9-1: USB disconnect, device number 2 [ 490.905349][ T26] audit: type=1800 audit(1787475285.773:217): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.361" name="UDC" dev="configfs" ino=45714 res=0 errno=0 [ 491.055440][ T4365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.691436][ T4365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.256925][ T6229] syz.6.363 (6229): drop_caches: 2 [ 492.912447][ T26] audit: type=1800 audit(1787475288.283:218): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.362" name="idVendor" dev="configfs" ino=44412 res=0 errno=0 [ 493.314211][ T26] audit: type=1800 audit(1787475288.383:219): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.362" name="idProduct" dev="configfs" ino=44413 res=0 errno=0 [ 493.416650][ T26] audit: type=1800 audit(1787475288.393:220): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.362" name="max_speed" dev="configfs" ino=44414 res=0 errno=0 [ 493.557941][ T6177] chnl_net:caif_netlink_parms(): no params data found [ 493.642883][ T26] audit: type=1800 audit(1787475288.393:221): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.362" name="UDC" dev="configfs" ino=44415 res=0 errno=0 [ 493.980504][ T6234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.107085][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.114611][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.173084][ T6245] binder: BINDER_SET_CONTEXT_MGR already set [ 495.180005][ T6245] binder: 6239:6245 ioctl 4018620d 200000000040 returned -16 [ 495.234127][ T6245] syz.8.365 (6245): drop_caches: 2 [ 496.317545][ T6177] device bridge_slave_0 entered promiscuous mode [ 496.338306][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.406979][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.492562][ T6177] device bridge_slave_1 entered promiscuous mode [ 497.296754][ T4661] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 498.849584][ T4661] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.981843][ T4661] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 499.334810][ T4661] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 499.698175][ T4661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.635112][ T6264] syz.3.367 (6264): drop_caches: 2 [ 500.952314][ T6177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.147842][ T6177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.460360][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.467127][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.017041][ T4661] ttusb_dec_send_command: command bulk message failed: error -110 [ 502.646944][ T126] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 503.536684][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 503.672725][ T126] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.871315][ T4661] ttusb-dec: probe of 7-1:1.0 failed with error -110 [ 503.912763][ T126] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 504.325552][ T126] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 504.688760][ T126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.343671][ T4661] usb 7-1: USB disconnect, device number 3 [ 506.356721][ T4375] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 506.714011][ T126] ttusb_dec_send_command: command bulk message failed: error -110 [ 507.992061][ T126] ttusb-dec: probe of 9-1:1.0 failed with error -110 [ 508.082660][ T6177] team0: Port device team_slave_0 added [ 508.845096][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 508.907529][ T4375] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.971157][ T4375] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 509.056969][ T4375] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 509.131858][ T4375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.151821][ T6177] team0: Port device team_slave_1 added [ 509.240645][ T4350] usb 9-1: USB disconnect, device number 3 [ 509.644193][ T4375] usb 8-1: can't set config #1, error -71 [ 509.667120][ T4375] usb 8-1: USB disconnect, device number 2 [ 509.729280][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.743041][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.218043][ T6177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.820235][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.044378][ T6319] syz.7.377 (6319): drop_caches: 2 [ 512.296199][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.698614][ T6177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.790658][ T6313] input: syz1 as /devices/virtual/input/input9 [ 513.022197][ T6177] device hsr_slave_0 entered promiscuous mode [ 513.060746][ T6177] device hsr_slave_1 entered promiscuous mode [ 513.089474][ T6177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.120958][ T6177] Cannot create hsr debugfs directory [ 513.257274][ T6328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.032904][ T6344] syz.3.382 (6344): drop_caches: 2 [ 516.051998][ T6351] syz.7.384 (6351): drop_caches: 2 [ 519.686790][ T4661] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 520.160366][ T4661] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.309016][ T4661] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 520.538533][ T4661] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 520.882993][ T4661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.956981][ T4261] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 522.257234][ T4261] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.644871][ T4261] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 525.030715][ T4261] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 525.396141][ T4261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.576929][ T4661] usb 4-1: can't set config #1, error -110 [ 526.859840][ T4318] usb 4-1: USB disconnect, device number 8 [ 526.886044][ T4261] usb 7-1: can't set config #1, error -71 [ 526.925318][ T4261] usb 7-1: USB disconnect, device number 4 [ 527.103430][ T4365] device hsr_slave_0 left promiscuous mode [ 527.145614][ T4365] device hsr_slave_1 left promiscuous mode [ 527.219586][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.256888][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.393231][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.416739][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.426444][ T4365] device bridge_slave_1 left promiscuous mode [ 527.443136][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.472593][ T4365] device bridge_slave_0 left promiscuous mode [ 527.907059][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.000480][ T4365] device veth1_macvtap left promiscuous mode [ 528.956927][ T4365] device veth0_macvtap left promiscuous mode [ 528.969490][ T6413] syz.3.390 (6413): drop_caches: 2 [ 529.008265][ T4365] device veth1_vlan left promiscuous mode [ 529.014174][ T4365] device veth0_vlan left promiscuous mode [ 529.554930][ T6427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.607981][ T6442] syz.8.398 (6442): drop_caches: 2 [ 532.710540][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 532.771949][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 532.824530][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.890671][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.354912][ T4365] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 533.366143][ T4365] bond0 (unregistering): Released all slaves [ 533.563052][ T6177] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 533.633095][ T6177] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 533.661202][ T6177] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 534.663242][ T6454] syz.6.400 (6454): drop_caches: 2 [ 534.927810][ T6177] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 535.328679][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.026652][ T4350] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 536.237056][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 536.262130][ T4350] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.369223][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.429220][ T4350] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 536.625871][ T6177] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.766313][ T4350] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 537.048922][ T4350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.245323][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.530969][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.872362][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.879615][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.455639][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 539.057438][ T4350] ttusb_dec_send_command: command bulk message failed: error -110 [ 539.117105][ T4350] ttusb-dec: probe of 8-1:1.0 failed with error -110 [ 539.530377][ T6369] usb 8-1: USB disconnect, device number 3 [ 539.839521][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.852606][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.862679][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.880279][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.892761][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 539.902659][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.936775][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 542.806814][ T6369] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 544.016599][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 545.632556][ T14] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 546.097462][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 546.569772][ T14] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.054775][ T14] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 547.775023][ T14] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 548.176784][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 548.183140][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.323798][ T4364] Bluetooth: hci4: Frame reassembly failed (-84) [ 550.337022][ T4289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 550.345681][ T4288] Bluetooth: hci4: command 0xfc11 tx timeout [ 551.385351][ T6519] binder: BINDER_SET_CONTEXT_MGR already set [ 551.392266][ T6519] binder: 6517:6519 ioctl 4018620d 200000000040 returned -16 [ 551.445929][ T6519] syz.6.407 (6519): drop_caches: 2 [ 552.549199][ T14] usb 9-1: can't set config #1, error -71 [ 552.557071][ T14] usb 9-1: USB disconnect, device number 4 [ 553.587036][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 555.856897][ T4288] Bluetooth: hci4: command 0xfc11 tx timeout [ 555.864177][ T4289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 555.922033][ T6533] syz.6.412 (6533): drop_caches: 2 [ 558.726825][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 559.693461][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.950104][ T14] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 560.440076][ T14] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 560.765279][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.736876][ T14] ttusb_dec_send_command: command bulk message failed: error -110 [ 562.748084][ T14] ttusb-dec: probe of 7-1:1.0 failed with error -110 [ 562.910130][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.916616][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.822287][ T4318] usb 7-1: USB disconnect, device number 5 [ 564.881695][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.903167][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.978238][ T6473] device bridge_slave_0 entered promiscuous mode [ 565.497646][ T6586] binder: BINDER_SET_CONTEXT_MGR already set [ 565.503842][ T6586] binder: 6581:6586 ioctl 4018620d 200000000040 returned -16 [ 565.541895][ T6586] syz.3.422 (6586): drop_caches: 2 [ 566.225825][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.325451][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.436882][ T4318] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 566.679925][ T6473] device bridge_slave_1 entered promiscuous mode [ 566.722389][ T4318] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.852228][ T4318] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 567.226815][ T4318] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 567.500315][ T4318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.467834][ T6594] syz.6.424 (6594): drop_caches: 2 [ 569.926467][ T4318] ttusb_dec_send_command: command bulk message failed: error -110 [ 569.934781][ T4318] ttusb-dec: probe of 8-1:1.0 failed with error -110 [ 570.140160][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.236052][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.886728][ T4338] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 573.262081][ T4661] usb 8-1: USB disconnect, device number 5 [ 573.321291][ T4338] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.185690][ T4338] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 574.200833][ T4338] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 574.211423][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.268216][ T4288] Bluetooth: hci4: command 0xfc11 tx timeout [ 576.274848][ T4289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 576.843917][ T6473] team0: Port device team_slave_0 added [ 577.212904][ T4365] device hsr_slave_0 left promiscuous mode [ 577.410768][ T4365] device hsr_slave_1 left promiscuous mode [ 577.588265][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.642337][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.769099][ T28] Bluetooth: hci4: Frame reassembly failed (-84) [ 578.027573][ T4338] usb 4-1: can't set config #1, error -71 [ 578.058679][ T4338] usb 4-1: USB disconnect, device number 9 [ 578.117451][ T4365] device bridge_slave_1 left promiscuous mode [ 578.123791][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.389353][ T6630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.778128][ T4289] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 579.778503][ T4288] Bluetooth: hci4: command 0xfc11 tx timeout [ 580.050185][ T4365] device bridge_slave_0 left promiscuous mode [ 580.056581][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.868420][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 582.938903][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 584.157662][ T6671] binder: BINDER_SET_CONTEXT_MGR already set [ 584.163938][ T6671] binder: 6669:6671 ioctl 4018620d 200000000040 returned -16 [ 584.197129][ T6671] syz.8.435 (6671): drop_caches: 2 [ 585.038353][ T6667] input: syz1 as /devices/virtual/input/input10 [ 585.045320][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.182517][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.700029][ T6683] binder: BINDER_SET_CONTEXT_MGR already set [ 586.706281][ T6683] binder: 6678:6683 ioctl 4018620d 200000000040 returned -16 [ 586.763203][ T6683] syz.7.437 (6683): drop_caches: 2 [ 588.306954][ T4338] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 589.510213][ T4338] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.697389][ T4338] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 589.979475][ T4338] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 590.165410][ T4338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.616839][ T4338] ttusb_dec_send_command: command bulk message failed: error -110 [ 591.624904][ T4338] ttusb-dec: probe of 9-1:1.0 failed with error -110 [ 593.018117][ T4365] bond0 (unregistering): Released all slaves [ 593.296650][ T6641] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 593.296740][ T4277] Bluetooth: hci4: command 0xfc11 tx timeout [ 594.921824][ T6473] team0: Port device team_slave_1 added [ 595.226416][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 595.236622][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 595.245462][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 595.263651][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 595.288242][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 595.296461][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 595.328143][ T4320] usb 9-1: USB disconnect, device number 5 [ 595.359247][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.366416][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.392930][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.452217][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.483071][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.576247][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.376717][ T6641] Bluetooth: hci1: command 0x0409 tx timeout [ 599.002496][ T6473] device hsr_slave_0 entered promiscuous mode [ 599.215717][ T6473] device hsr_slave_1 entered promiscuous mode [ 599.285442][ T6473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.357540][ T6473] Cannot create hsr debugfs directory [ 599.456784][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 599.487307][ T6641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 599.497458][ T6641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 599.507596][ T6641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 599.517597][ T6641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 599.525340][ T6641] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 599.542592][ T6641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.201391][ T6734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.327525][ T6641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.346564][ T6641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.355593][ T6641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.365108][ T6641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.375654][ T6641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 601.383383][ T6641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 601.486409][ T6700] chnl_net:caif_netlink_parms(): no params data found [ 601.536616][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 601.597183][ T4365] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.616803][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 601.702644][ T4365] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.729783][ T6716] chnl_net:caif_netlink_parms(): no params data found [ 601.841966][ T4365] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.906145][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.913521][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.926159][ T6700] device bridge_slave_0 entered promiscuous mode [ 601.986395][ T4365] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.016308][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.037664][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.046406][ T6700] device bridge_slave_1 entered promiscuous mode [ 602.115480][ T6700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.155761][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.232425][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.253743][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.275464][ T6716] device bridge_slave_0 entered promiscuous mode [ 602.342972][ T6700] team0: Port device team_slave_0 added [ 602.359969][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.377772][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.396971][ T6716] device bridge_slave_1 entered promiscuous mode [ 602.423436][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 602.447752][ T6700] team0: Port device team_slave_1 added [ 602.560413][ T6716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.631842][ T6716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.674990][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.688951][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.716065][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.729251][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.736285][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.762949][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.835792][ T6716] team0: Port device team_slave_0 added [ 602.856117][ T6716] team0: Port device team_slave_1 added [ 602.936555][ T4365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.984135][ T6716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.001648][ T6716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.036780][ T6716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.064099][ T6716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.082061][ T6716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.113782][ T6716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.131350][ T6700] device hsr_slave_0 entered promiscuous mode [ 603.139152][ T6700] device hsr_slave_1 entered promiscuous mode [ 603.147624][ T6700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.155322][ T6700] Cannot create hsr debugfs directory [ 603.205617][ T4365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.244318][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.256862][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.274668][ T6735] device bridge_slave_0 entered promiscuous mode [ 603.295109][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.303724][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.322571][ T6735] device bridge_slave_1 entered promiscuous mode [ 603.406305][ T4365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.450080][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.468315][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 603.492320][ T4365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.525545][ T6716] device hsr_slave_0 entered promiscuous mode [ 603.542268][ T6716] device hsr_slave_1 entered promiscuous mode [ 603.553941][ T6716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.571803][ T6716] Cannot create hsr debugfs directory [ 603.584643][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.626636][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 603.696839][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 603.769861][ T6735] team0: Port device team_slave_0 added [ 603.832537][ T6735] team0: Port device team_slave_1 added [ 603.970705][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.987432][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.021267][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.270054][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.279780][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.307135][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.592725][ T6735] device hsr_slave_0 entered promiscuous mode [ 604.600887][ T6735] device hsr_slave_1 entered promiscuous mode [ 604.609076][ T6735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.621584][ T6735] Cannot create hsr debugfs directory [ 605.546727][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 605.786750][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 606.615657][ T4365] device hsr_slave_0 left promiscuous mode [ 606.623952][ T4365] device hsr_slave_1 left promiscuous mode [ 606.645668][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.663728][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.674794][ T4365] device bridge_slave_1 left promiscuous mode [ 606.681431][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.691332][ T4365] device bridge_slave_0 left promiscuous mode [ 606.697901][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.713469][ T4365] device hsr_slave_0 left promiscuous mode [ 606.730166][ T4365] device hsr_slave_1 left promiscuous mode [ 606.744076][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.755707][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.773948][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.784067][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.801199][ T4365] device bridge_slave_1 left promiscuous mode [ 606.812110][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.833709][ T4365] device bridge_slave_0 left promiscuous mode [ 606.844807][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.868873][ T4365] device hsr_slave_0 left promiscuous mode [ 606.875454][ T4365] device hsr_slave_1 left promiscuous mode [ 606.889354][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.897111][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.905247][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.913570][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.926686][ T4365] device bridge_slave_1 left promiscuous mode [ 606.932981][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.949183][ T4365] device bridge_slave_0 left promiscuous mode [ 606.955479][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.043424][ T4365] device veth1_macvtap left promiscuous mode [ 607.056966][ T4365] device veth0_macvtap left promiscuous mode [ 607.063212][ T4365] device veth1_vlan left promiscuous mode [ 607.081066][ T4365] device veth0_vlan left promiscuous mode [ 607.094755][ T4365] device veth1_macvtap left promiscuous mode [ 607.104573][ T4365] device veth0_macvtap left promiscuous mode [ 607.116350][ T4365] device veth1_vlan left promiscuous mode [ 607.132573][ T4365] device veth0_vlan left promiscuous mode [ 607.505248][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 607.543456][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 607.577738][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.613582][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.626621][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 607.732553][ T4365] bond0 (unregistering): Released all slaves [ 607.866842][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 608.349622][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 608.400020][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 608.451299][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.503673][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.902510][ T4365] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 608.912894][ T4365] bond0 (unregistering): Released all slaves [ 609.558694][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 609.608519][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 609.669693][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.706981][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 609.729025][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.128133][ T4365] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 610.137882][ T4365] bond0 (unregistering): Released all slaves [ 611.157882][ T6700] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 611.184554][ T6700] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 611.219839][ T6700] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 611.256764][ T6700] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 611.396720][ T6716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 611.484328][ T6716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 611.527832][ T6716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 611.554308][ T6716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 611.641667][ T6735] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 611.692323][ T6735] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 611.723847][ T6700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.733152][ T6735] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 611.764184][ T6735] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 611.794117][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 611.807597][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.841243][ T6700] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.885497][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 611.908410][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.922787][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.930003][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.977481][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 611.991265][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.001551][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.012114][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.019339][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.033947][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 612.055761][ T6716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.081017][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 612.122870][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.148282][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.192410][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 612.212698][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.221392][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.235951][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 612.245336][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 612.266366][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 612.280721][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.309127][ T6716] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.319861][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 612.329442][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.367984][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 612.378328][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.387993][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.395169][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.409082][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.419018][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.437276][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.444455][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.464843][ T6700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 612.507049][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.514136][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 612.539959][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 612.556905][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 612.571241][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.600989][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.634908][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 612.667434][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 612.686011][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 612.760943][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.781152][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.790412][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.800093][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 612.813343][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.825146][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 612.840393][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.855843][ T6716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 612.878726][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 612.897741][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.931622][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.938888][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.982626][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 613.017500][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 613.034950][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.067332][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.074498][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.118881][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 613.177887][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 613.187686][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 613.228912][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 613.244088][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.253896][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.272805][ T6735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.307394][ T6735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.380868][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.408088][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.461097][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.502385][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.511776][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.537702][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 613.545406][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 613.560480][ T6700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.587008][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.658548][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 613.675576][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 613.771084][ T6700] device veth0_vlan entered promiscuous mode [ 613.781326][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 613.825293][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.835739][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 613.858843][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 613.895278][ T6700] device veth1_vlan entered promiscuous mode [ 613.904310][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 613.952757][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 613.961824][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.002250][ T6716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.026456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 614.045330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 614.058927][ T6700] device veth0_macvtap entered promiscuous mode [ 614.080418][ T6700] device veth1_macvtap entered promiscuous mode [ 614.145673][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.164000][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.175356][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.195797][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.208959][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.227055][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 614.257384][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 614.281537][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 614.302991][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 614.319168][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.334692][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.358138][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.374070][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.393270][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.412242][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 614.423877][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 614.459354][ T6700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.486600][ T6700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.495436][ T6700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.506074][ T6700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.524754][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.534369][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.558151][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.785906][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.814824][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.824016][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 614.875085][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.892642][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.914072][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 616.982270][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 617.000026][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 617.075972][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 617.084869][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 617.094601][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 617.104155][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 617.117186][ T6716] device veth0_vlan entered promiscuous mode [ 617.137352][ T6716] device veth1_vlan entered promiscuous mode [ 617.280204][ T6716] device veth0_macvtap entered promiscuous mode [ 617.408312][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 617.453303][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 618.159492][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 619.188088][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.392388][ T6716] device veth1_macvtap entered promiscuous mode [ 619.506686][ T4375] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 619.525293][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 619.616298][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 619.750268][ T4375] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.891427][ T4375] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 620.194277][ T4375] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 620.218378][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 620.284881][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.331473][ T4375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.427932][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.595848][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.794432][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.058589][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.224728][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.402678][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.644109][ T6716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.770156][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.780029][ T4375] ttusb_dec_send_command: command bulk message failed: error -110 [ 621.844383][ T4375] ttusb-dec: probe of 9-1:1.0 failed with error -110 [ 621.889054][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 622.129761][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.314534][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.447451][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.573749][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.649588][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.665573][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.680575][ T6716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.692547][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 622.702416][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.717037][ T6716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.727627][ T6716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.737493][ T6716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.746456][ T6716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.777948][ T6910] input: syz1 as /devices/virtual/input/input11 [ 623.796981][ T6369] usb 9-1: USB disconnect, device number 6 [ 623.845798][ T6735] device veth0_vlan entered promiscuous mode [ 623.875835][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 623.905065][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 623.991858][ T6735] device veth1_vlan entered promiscuous mode [ 624.220089][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 624.339442][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.366842][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.417194][ T4277] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 626.425255][ T4288] Bluetooth: hci5: command 0xfc11 tx timeout [ 626.631575][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.713995][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.726044][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.094928][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.142113][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.224823][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 630.291870][ T6735] device veth0_macvtap entered promiscuous mode [ 630.329281][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 630.369667][ T6932] syz.8.452 (6932): drop_caches: 2 [ 630.410275][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 630.509041][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 630.559143][ T6205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.576377][ T6735] device veth1_macvtap entered promiscuous mode [ 630.586652][ T6205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.676275][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 630.701129][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.816877][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.009614][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.204966][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.328552][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.463822][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.576774][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.897767][ T6641] Bluetooth: hci5: command 0xfc11 tx timeout [ 632.897821][ T4277] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 633.260926][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.576858][ T4277] Bluetooth: hci6: command 0xfc11 tx timeout [ 634.583632][ T4288] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 634.639394][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.688309][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.702685][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 634.780413][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 634.973823][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.036895][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.066871][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.086636][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.116814][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.197175][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.288638][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.147416][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.317251][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.395756][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 636.449209][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 636.490978][ T6735] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.499194][ T6957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 636.521754][ T6735] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.049868][ T6735] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.059021][ T6735] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.052403][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.108964][ T6976] input: syz1 as /devices/virtual/input/input12 [ 640.145054][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.205532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.218075][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.233576][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.248685][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.711604][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.721386][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.958285][ T4288] Bluetooth: hci5: Entering manufacturer mode failed (-110) SYZFAIL: failed to send rpc fd=3 want=65280 sent=0 n=-1 (errno 32: Broken pipe) [ 659.830366][ T4365] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.979636][ T4365] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.068036][ T4365] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.190741][ T4365] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.454754][ T4365] device hsr_slave_0 left promiscuous mode [ 661.462977][ T4365] device hsr_slave_1 left promiscuous mode [ 661.472588][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.481185][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.489448][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.506575][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.515302][ T4365] device bridge_slave_1 left promiscuous mode [ 661.526179][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.544059][ T4365] device bridge_slave_0 left promiscuous mode [ 661.551450][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.593269][ T4365] device veth1_macvtap left promiscuous mode [ 661.599687][ T4365] device veth0_macvtap left promiscuous mode [ 661.605947][ T4365] device veth1_vlan left promiscuous mode [ 661.617194][ T4365] device veth0_vlan left promiscuous mode [ 662.529561][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 662.627499][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 662.707779][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.782274][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.286908][ T4365] bond0 (unregistering): Released all slaves [ 664.036253][ T4365] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.111871][ T4365] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.204023][ T4365] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.288778][ T4365] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.543442][ T4365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.654527][ T4365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.729739][ T4365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.797625][ T4365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.983693][ T4365] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.075782][ T4365] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.164542][ T4365] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.256380][ T4365] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.502712][ T4365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.592556][ T4365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.664889][ T4365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.719314][ T4365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0