last executing test programs: 24.48688259s ago: executing program 1 (id=52): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2503000000140001800d0001006574683a6772653000000000f6c94d75fe8775ae3d4f743785d429492200525363d6e0a5cbe34135fac2e8c29539740f8f4662a40a4c7029dce81d26d73b8213eff1a27f2935d72965bcbf217ce8f8c2002168a00a8308c534024c47157190dc7d7292617a0abf3be09f6b2a6f858d20bdb02b4478bad3b404fab78daa1ca74a926742cbc3d9ec5efabdd1c06e91298374d35500e075ef3639835c4498b42d715bce4a4c4e343c9cfc1bbdef94fc8cae038a06b451d2f0b7849638e0748e37da6a0c78f05c0b10efc04f2e82f9cb88eddb47d1da16d6b4ffb5b080cd324a5af5fe31126be17d31186c2d3bce6413fb45d1155ea7"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 22.316125413s ago: executing program 1 (id=56): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x14}], 0x1}, 0x0) 15.788431318s ago: executing program 3 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800004, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) 15.550155735s ago: executing program 1 (id=64): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe8000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x2, r1, 0x3e, {0x81, 0x5}, 0x77}, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x40) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c00024000000000000000010900030003000000000000001400000011"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xa00965, 0x2}) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x97, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0x10}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000440)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0x5, 0x10cf, 0x5, 0x8b, 0x3, 0x1, 'syz0\x00'}) shutdown(r4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 15.332440467s ago: executing program 0 (id=66): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 15.021170829s ago: executing program 3 (id=67): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 13.717104891s ago: executing program 4 (id=68): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, 0x0, 0x0, 0x200) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 11.180426762s ago: executing program 0 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.111688268s ago: executing program 2 (id=70): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir ./f', 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0xcca7, 0x1, 0x2, 0x34a}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r2, 0x0, 0x3, 0xb, 0x0, 0x18) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newnexthop={0x38, 0x68, 0x405, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1234567812345678}}]}, 0x38}}, 0x0) write(r0, &(0x7f0000000700)='bind', 0x4) mkdir(&(0x7f00000002c0)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x5a) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) write(r3, &(0x7f0000000400)='dummy_udc.0', 0xb) 11.054311422s ago: executing program 3 (id=71): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir ./f', 0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0xcca7, 0x1, 0x2, 0x34a}, 0x0, &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0x3, 0xb, 0x0, 0x18) write(r0, &(0x7f0000000700)='bind', 0x4) mkdir(0x0, 0x20) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x5a) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x6, 0x3ff, 0x5}) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 11.008409975s ago: executing program 1 (id=72): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 9.979325236s ago: executing program 0 (id=73): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 8.97949529s ago: executing program 4 (id=74): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write(r0, &(0x7f0000000130)='0x0200\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cfg/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 8.938507512s ago: executing program 3 (id=75): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r0, 0x21da}], 0x1, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x118, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) 8.784120792s ago: executing program 2 (id=76): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.596995149s ago: executing program 1 (id=77): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) close(0x3) r5 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="9476505f0f7f5b822f81e9094800220000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtfilter={0x90, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0xd}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 6.576969121s ago: executing program 0 (id=78): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r7, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept4(r7, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a80)={r10, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0x0) pipe(&(0x7f0000000080)) 6.401529316s ago: executing program 2 (id=79): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write(r1, &(0x7f0000000130)='0x0200\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) kexec_load(0x800, 0xa, &(0x7f00000019c0)=[{&(0x7f00000002c0)="6cb41888dee9ee63", 0x8, 0x7737, 0xffffffc0}, {&(0x7f0000000340)="68fb1304cab79ac6d59c0e4e30e5d527ea5223bcd042c27d66e5adea62ee2a74b6fe24771b51210cc20f1b395243d7681a4ec86cd997817a018264c77c9421f3a779fece3896dcbe7fd061f1fd5a7dcf423ad5a2cbfd9d39d9d9cbe14815bd828c8adc889e65b7d28bbda202761ee80ffb1cbef951249333f7f5faf5a54e8f7babd4e367c03d383b60efb6ec539c7053", 0x90, 0x7, 0x8}, {&(0x7f0000000480)="4238f895f0a02fe6ff3954d039d549253835ad13a71241099de081abfe88f0b48d55a30c839ea31e722b1f2c9a0c528bd61e23490c3d68a2a053439b617f65e0bf2ebac24efaebffcd84cc02387cd032ac55695672ce29b6e06730e35474bcb7e75de63f57f2b4fdaa1c94368c673a1bc2fa90f8ba3a0bac4675372f93a16e14", 0x80, 0x7fffffff, 0xffffffff}, {&(0x7f0000000540)="b854d3de260b10e04312279a8b8a8a692871fc94519b7a2e7efe0b41952a962fd8e86ec5dcba41b93493287da05ccedc2e59627d68925dbce4d9bfe8a0f7d7afccc4ce822c5c79bcaf31fb93f4089abe394cdc25ad9320057acd7cb0121d82d4a9332bd2d9b55377706b134ab375c759a09d6cef429ccbba4fbe71ade7531c21c17c11f53df17cff77dfdce318e605b14844aacb8fa3048669afc0e4dfe02a32b63e32bc4a295c04b6241fbe50bad41dd6de529dd166a4bb", 0xb8, 0x4, 0xa8b}, {&(0x7f0000000600), 0x0, 0x1, 0x40}, {&(0x7f0000000700)="285b8dc238f5fe406c766157fab0aa8b092a7bc2f179c73d8d1990f0b0bf758ca0a94834", 0x24, 0x8, 0xafc8}, {&(0x7f0000000740)="82e01f5710289ccbc4216e82163abd9e823a40af1257fc08a89225b5d7572092794c19e208302ee4325705a7edd12f003e63d31239a021db42039a4ad25db96b8df16ece4c149d73fee8c35fc950b0fe141ebe32e29848a2a974fcf8dd3bd7a158c69050629b32367a56e6e40d35d562522aee7ac9bc568d46b932c095d96e0cd90407c39eb05b650ea7", 0x8a, 0x7fffffff, 0xd}, {&(0x7f0000000800)="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", 0xc00, 0x7, 0xffff}, {&(0x7f0000001800)="fc4218387f050932c40bcc0b480509aef6792b42c4474432085d12ca64c10156cb0459274dbf73efb82e98b7012e12e3344c07444db874cff9f4f7acf2fc", 0x3e, 0x1, 0x10001}, {&(0x7f0000001900)="a473ce463598eb862cc7f14e1c88d49d7da9b6b1c6e17753838699d41f19082f1a5a09388cd91a488fe5dc5a130decd9b51d822ab919a1059abf4d7c1753118624945688b82eab53f48670aa97dd19a2908c2fc112034499f6e7f4b89d0acc34fb4d331fe9a0894cabb52211dc63a3f6605965157984f3db8e826730a11bc0f573119572de6350e9040c912308e7500752d480c19dcc6aae5fffaf4d90b34b3ff2d16f351961", 0xa6, 0x8, 0x9}], 0x3e0001) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') 6.093506877s ago: executing program 4 (id=80): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 6.092546687s ago: executing program 2 (id=81): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000100)) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) dup3(r15, r14, 0x80000) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) lseek(r12, 0x851, 0x0) syz_ublk_setup_queues(r10, r9, 0x0, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r10, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r8, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) r16 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r16, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.206659673s ago: executing program 1 (id=82): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.128300017s ago: executing program 3 (id=83): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x100000000) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90f, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) syz_clone(0x8000011, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)) 970.762569ms ago: executing program 2 (id=84): r0 = socket(0x11, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x0, @mcast2, 0x9}, {0xa, 0x4e23, 0x61, @loopback, 0x7}, 0x0, {[0x100, 0x100, 0xd19, 0xea, 0x100, 0x3, 0x8, 0x6]}}, 0x5c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x80, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x4, 0x7fff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0xffc0, 0x3, 0x8, 0x3]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x80}, 0x1, 0x0, 0x0, 0x48040}, 0x40040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000190001002dbd7000fedbdf25fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000030a0020303a0000b3c356e2a9355e5d9f5579baea00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000009000000000000000400000000000000fffffbffffffffff000000000000000000000000000000000000000000000000000a000000000008feffffffff7f40000200000000000008000000000000000001010200"], 0xb4}}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x87) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000380)=@llc={0x1a, 0x5, 0x5, 0x84, 0xd5, 0x6}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="1140679a", 0x4}], 0x1}, 0x40810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/raw_syscalls/sys_enter/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) 941.418367ms ago: executing program 4 (id=85): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r1, 0x4, 0x800) ioctl(r1, 0x8934, &(0x7f00000002c0)="657468310000000000000000000000cf06000000c40ff3075b04dc727a8b9bc395a2e0f662de91f6b95cfbf004c8bcf76d2bba4f29276179f5ebe0d3a4f3f508a34cc0015792690151925b083904b755ffaf8415d5ef35b2493f5f97b125c30dd2e8148024e60cb8646ccf3e8366fd7469577f7ca0419d1e0dc47d7a3ebebe4a082cb14e418d3362f11cf5a9abaeb32c5c7ec13b30f73137654dcbcd47d417c366a317c4a41a13a00483208bd603042496419eb89e36febeae1a31dc8d9a717905c1b4a09e8689719b2f1332e09f336f2a4c499aebc0b8cf98") ioctl(r1, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="66bfdcf8156709246ddd266fa0f213eb5a3351", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4020044) bind$x25(r1, &(0x7f0000000080), 0x12) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 736.926495ms ago: executing program 0 (id=86): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir ./f', 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0xcca7, 0x1, 0x2, 0x34a}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r2, 0x0, 0x3, 0xb, 0x0, 0x18) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newnexthop={0x38, 0x68, 0x405, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1234567812345678}}]}, 0x38}}, 0x0) write(r0, &(0x7f0000000700)='bind', 0x4) mkdir(&(0x7f00000002c0)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x5a) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) write(r3, &(0x7f0000000400)='dummy_udc.0', 0xb) 526.648148ms ago: executing program 4 (id=87): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="2c67ae819799bad8130f6fcc8469e62276f5b0be77b06f60b2ec8b9693c35a273496", 0x22, 0x18854, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 334.187626ms ago: executing program 2 (id=88): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x14}], 0x1}, 0x0) 226.274729ms ago: executing program 0 (id=89): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 102.827412ms ago: executing program 4 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=91): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write(r1, &(0x7f0000000130)='0x0200\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) kexec_load(0x800, 0xa, &(0x7f00000019c0)=[{&(0x7f00000002c0)="6cb41888dee9ee63", 0x8, 0x7737, 0xffffffc0}, {&(0x7f0000000340)="68fb1304cab79ac6d59c0e4e30e5d527ea5223bcd042c27d66e5adea62ee2a74b6fe24771b51210cc20f1b395243d7681a4ec86cd997817a018264c77c9421f3a779fece3896dcbe7fd061f1fd5a7dcf423ad5a2cbfd9d39d9d9cbe14815bd828c8adc889e65b7d28bbda202761ee80ffb1cbef951249333f7f5faf5a54e8f7babd4e367c03d383b60efb6ec539c7053", 0x90, 0x7, 0x8}, {&(0x7f0000000480)="4238f895f0a02fe6ff3954d039d549253835ad13a71241099de081abfe88f0b48d55a30c839ea31e722b1f2c9a0c528bd61e23490c3d68a2a053439b617f65e0bf2ebac24efaebffcd84cc02387cd032ac55695672ce29b6e06730e35474bcb7e75de63f57f2b4fdaa1c94368c673a1bc2fa90f8ba3a0bac4675372f93a16e14", 0x80, 0x7fffffff, 0xffffffff}, {&(0x7f0000000540)="b854d3de260b10e04312279a8b8a8a692871fc94519b7a2e7efe0b41952a962fd8e86ec5dcba41b93493287da05ccedc2e59627d68925dbce4d9bfe8a0f7d7afccc4ce822c5c79bcaf31fb93f4089abe394cdc25ad9320057acd7cb0121d82d4a9332bd2d9b55377706b134ab375c759a09d6cef429ccbba4fbe71ade7531c21c17c11f53df17cff77dfdce318e605b14844aacb8fa3048669afc0e4dfe02a32b63e32bc4a295c04b6241fbe50bad41dd6de529dd166a4bb", 0xb8, 0x4, 0xa8b}, {&(0x7f0000000600), 0x0, 0x1, 0x40}, {&(0x7f0000000700)="285b8dc238f5fe406c766157fab0aa8b092a7bc2f179c73d8d1990f0b0bf758ca0a94834", 0x24, 0x8, 0xafc8}, {&(0x7f0000000740)="82e01f5710289ccbc4216e82163abd9e823a40af1257fc08a89225b5d7572092794c19e208302ee4325705a7edd12f003e63d31239a021db42039a4ad25db96b8df16ece4c149d73fee8c35fc950b0fe141ebe32e29848a2a974fcf8dd3bd7a158c69050629b32367a56e6e40d35d562522aee7ac9bc568d46b932c095d96e0cd90407c39eb05b650ea7", 0x8a, 0x7fffffff, 0xd}, {&(0x7f0000000800)="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", 0xc00, 0x7, 0xffff}, {&(0x7f0000001800)="fc4218387f050932c40bcc0b480509aef6792b42c4474432085d12ca64c10156cb0459274dbf73efb82e98b7012e12e3344c07444db874cff9f4f7acf2fc", 0x3e, 0x1, 0x10001}, {&(0x7f0000001900)="a473ce463598eb862cc7f14e1c88d49d7da9b6b1c6e17753838699d41f19082f1a5a09388cd91a488fe5dc5a130decd9b51d822ab919a1059abf4d7c1753118624945688b82eab53f48670aa97dd19a2908c2fc112034499f6e7f4b89d0acc34fb4d331fe9a0894cabb52211dc63a3f6605965157984f3db8e826730a11bc0f573119572de6350e9040c912308e7500752d480c19dcc6aae5fffaf4d90b34b3ff2d16f351961", 0xa6, 0x8, 0x9}], 0x3e0001) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 91.007417][ T5570] cgroup: Unknown subsys name 'net' [ 91.267865][ T5570] cgroup: Unknown subsys name 'cpuset' [ 91.313078][ T5570] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.930683][ T1000] cfg80211: failed to load regulatory.db [ 93.258941][ T5570] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.939849][ T5588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.945607][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.970410][ T5588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.978316][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.979301][ T5588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.000162][ T5590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.003979][ T5588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.008474][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.008847][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.014777][ T5590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.111372][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.143460][ T5593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.145440][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.165400][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.178517][ T5593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.179890][ T5593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.181087][ T5593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.190695][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.194390][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.195482][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.276435][ T5588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.309430][ T5588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.327188][ T5588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.332008][ T5588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.353600][ T5588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.143882][ T5588] Bluetooth: hci1: command tx timeout [ 98.144473][ T5590] Bluetooth: hci0: command tx timeout [ 98.302801][ T5588] Bluetooth: hci2: command tx timeout [ 98.302984][ T5590] Bluetooth: hci3: command tx timeout [ 98.472877][ T5590] Bluetooth: hci4: command tx timeout [ 98.883563][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.884354][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.884489][ T5583] bridge_slave_0: entered allmulticast mode [ 98.886386][ T5583] bridge_slave_0: entered promiscuous mode [ 98.963218][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.963332][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.963522][ T5583] bridge_slave_1: entered allmulticast mode [ 98.965406][ T5583] bridge_slave_1: entered promiscuous mode [ 98.980322][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.980627][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.986461][ T5585] bridge_slave_0: entered allmulticast mode [ 98.993800][ T5585] bridge_slave_0: entered promiscuous mode [ 99.006664][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.007001][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.024961][ T5586] bridge_slave_0: entered allmulticast mode [ 99.038089][ T5586] bridge_slave_0: entered promiscuous mode [ 99.097365][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.097508][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.097614][ T5585] bridge_slave_1: entered allmulticast mode [ 99.099310][ T5585] bridge_slave_1: entered promiscuous mode [ 99.100580][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.100685][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.101018][ T5586] bridge_slave_1: entered allmulticast mode [ 99.104643][ T5586] bridge_slave_1: entered promiscuous mode [ 99.132296][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.132665][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.133149][ T5582] bridge_slave_0: entered allmulticast mode [ 99.144725][ T5582] bridge_slave_0: entered promiscuous mode [ 99.245636][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.245839][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.246362][ T5582] bridge_slave_1: entered allmulticast mode [ 99.248396][ T5582] bridge_slave_1: entered promiscuous mode [ 99.257480][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.258245][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.258521][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.258973][ T5584] bridge_slave_0: entered allmulticast mode [ 99.270905][ T5584] bridge_slave_0: entered promiscuous mode [ 99.354919][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.355165][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.355292][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.355412][ T5584] bridge_slave_1: entered allmulticast mode [ 99.357280][ T5584] bridge_slave_1: entered promiscuous mode [ 99.362168][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.380216][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.453953][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.456471][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.459299][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.540636][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.547878][ T5583] team0: Port device team_slave_0 added [ 99.560457][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.610707][ T5583] team0: Port device team_slave_1 added [ 99.618856][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.628879][ T5585] team0: Port device team_slave_0 added [ 99.631346][ T5586] team0: Port device team_slave_0 added [ 99.698240][ T5585] team0: Port device team_slave_1 added [ 99.702152][ T5586] team0: Port device team_slave_1 added [ 99.716034][ T5582] team0: Port device team_slave_0 added [ 99.779542][ T5582] team0: Port device team_slave_1 added [ 99.780520][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.780529][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.780547][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.790905][ T5584] team0: Port device team_slave_0 added [ 99.867850][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.867862][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.867880][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.870410][ T5584] team0: Port device team_slave_1 added [ 99.871065][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.871073][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.871089][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.872073][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.872084][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.872109][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.026455][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.026467][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.026486][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.028495][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.028506][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.028525][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.029800][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.029809][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.029827][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.172883][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.172895][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.172914][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.174693][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.174703][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.174719][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.223392][ T5590] Bluetooth: hci0: command tx timeout [ 100.223404][ T5588] Bluetooth: hci1: command tx timeout [ 100.270924][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.270982][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.271055][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.382710][ T5590] Bluetooth: hci3: command tx timeout [ 100.382742][ T5590] Bluetooth: hci2: command tx timeout [ 100.542597][ T5590] Bluetooth: hci4: command tx timeout [ 100.752107][ T5583] hsr_slave_0: entered promiscuous mode [ 100.756701][ T5583] hsr_slave_1: entered promiscuous mode [ 100.834742][ T5586] hsr_slave_0: entered promiscuous mode [ 100.835741][ T5586] hsr_slave_1: entered promiscuous mode [ 100.836560][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 100.836651][ T5586] Cannot create hsr debugfs directory [ 100.849840][ T5585] hsr_slave_0: entered promiscuous mode [ 100.853327][ T5585] hsr_slave_1: entered promiscuous mode [ 100.855759][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 100.855820][ T5585] Cannot create hsr debugfs directory [ 100.934042][ T5582] hsr_slave_0: entered promiscuous mode [ 100.934979][ T5582] hsr_slave_1: entered promiscuous mode [ 100.935653][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 100.935670][ T5582] Cannot create hsr debugfs directory [ 100.988382][ T5584] hsr_slave_0: entered promiscuous mode [ 100.989322][ T5584] hsr_slave_1: entered promiscuous mode [ 100.990041][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 100.990058][ T5584] Cannot create hsr debugfs directory [ 101.967570][ T5583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.016081][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.021688][ T5583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.058773][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.071530][ T5583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.106401][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.137259][ T5583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.167818][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.290271][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.302675][ T5590] Bluetooth: hci1: command tx timeout [ 102.302707][ T5590] Bluetooth: hci0: command tx timeout [ 102.326973][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.330478][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.377431][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.391342][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.418683][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.457932][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.462831][ T5590] Bluetooth: hci3: command tx timeout [ 102.463091][ T5588] Bluetooth: hci2: command tx timeout [ 102.488920][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.622704][ T5588] Bluetooth: hci4: command tx timeout [ 102.629064][ T5582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.676359][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.683905][ T5582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.717391][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.721874][ T5582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.756714][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.787484][ T5582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.817104][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.972254][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.006397][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.026866][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.046296][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.051159][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.086462][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.117101][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.147227][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.250179][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.327358][ T5584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.367980][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.380061][ T5584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.407321][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.411589][ T5584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.447853][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.466700][ T5584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.507757][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.568359][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.630418][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.668727][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.668952][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.722128][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.731543][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.816869][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.850555][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.866490][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.866620][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.961304][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.961451][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.039526][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.087863][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.088182][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.127842][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.193697][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.193863][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.350803][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.389909][ T5588] Bluetooth: hci1: command tx timeout [ 104.389920][ T5590] Bluetooth: hci0: command tx timeout [ 104.414219][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.449646][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.449861][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.515153][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.515322][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.543097][ T5588] Bluetooth: hci2: command tx timeout [ 104.543129][ T5588] Bluetooth: hci3: command tx timeout [ 104.627452][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.713057][ T5590] Bluetooth: hci4: command tx timeout [ 104.714504][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.714748][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.810499][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.810706][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.292207][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.679883][ T5583] veth0_vlan: entered promiscuous mode [ 105.741277][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.781928][ T5583] veth1_vlan: entered promiscuous mode [ 105.986533][ T5583] veth0_macvtap: entered promiscuous mode [ 106.030402][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.041703][ T5583] veth1_macvtap: entered promiscuous mode [ 106.159604][ T5585] veth0_vlan: entered promiscuous mode [ 106.191406][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.270372][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.295668][ T5585] veth1_vlan: entered promiscuous mode [ 106.380131][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.883935][ T5585] veth0_macvtap: entered promiscuous mode [ 106.905611][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.929909][ T5585] veth1_macvtap: entered promiscuous mode [ 107.038128][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.038154][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.051893][ T5586] veth0_vlan: entered promiscuous mode [ 107.100339][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.156435][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.181372][ T5586] veth1_vlan: entered promiscuous mode [ 107.251243][ T5582] veth0_vlan: entered promiscuous mode [ 107.261977][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.261998][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.454902][ T5582] veth1_vlan: entered promiscuous mode [ 107.485196][ T5584] veth0_vlan: entered promiscuous mode [ 107.732717][ T5586] veth0_macvtap: entered promiscuous mode [ 107.757711][ T5584] veth1_vlan: entered promiscuous mode [ 107.829146][ T5586] veth1_macvtap: entered promiscuous mode [ 108.039245][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.039268][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.145785][ T5582] veth0_macvtap: entered promiscuous mode [ 108.178192][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.271700][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.284948][ T5582] veth1_macvtap: entered promiscuous mode [ 108.345505][ T5584] veth0_macvtap: entered promiscuous mode [ 108.346236][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.346254][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.453666][ T5584] veth1_macvtap: entered promiscuous mode [ 108.517732][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.683276][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.794319][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.992980][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.497574][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.497611][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.365207][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.365223][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.792675][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.792703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.444745][ T5822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.444790][ T5822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.168291][ T5828] overlayfs: failed to resolve './file1': -2 [ 115.366136][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.366157][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.511755][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.511777][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.573560][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.695353][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.133181][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.139189][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.139315][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.139476][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.139526][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.139687][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.323569][ T3299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.459526][ T1279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.987606][ T1279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.127554][ T1279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.244127][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.263361][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.306794][ T1279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.308292][ T1279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.308690][ T1279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.309079][ T1279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.309462][ T1279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.415230][ T1279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.417146][ T1279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.417359][ T1279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.786590][ T5851] veth0: entered promiscuous mode [ 120.141099][ T5851] veth0: left promiscuous mode [ 120.159696][ T5857] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 122.202452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.371996][ T5880] binder: 5873:5880 ioctl c0306201 200000000040 returned -14 [ 125.132468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.452615][ T5883] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 126.823389][ T5894] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.562787][ T36] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 130.329072][ T36] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 130.382824][ T5916] Zero length message leads to an empty skb [ 132.366552][ T5588] Bluetooth: hci4: command 0x0405 tx timeout [ 134.394425][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.395355][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.199100][ T36] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 135.199130][ T36] usb 2-1: can't read configurations, error -71 [ 136.141975][ T5928] overlayfs: failed to resolve './file0': -2 [ 138.431668][ T5940] CacheFiles: No cache directory specified [ 138.472462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.791780][ T5952] syzkaller0: entered promiscuous mode [ 139.791807][ T5952] syzkaller0: entered allmulticast mode [ 140.242535][ T5929] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 140.527805][ T5929] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.583681][ T5929] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 140.583764][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 140.583786][ T5929] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.583806][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 140.583826][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 140.585626][ T5929] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 140.585680][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 140.585706][ T5929] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.585734][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 140.585752][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 140.586918][ T5929] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 140.586953][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 140.586973][ T5929] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.586991][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 140.587009][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 140.834641][ T5929] usb 4-1: string descriptor 0 read error: -22 [ 140.834814][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.719586][ T5929] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 142.692800][ T5920] usb 4-1: USB disconnect, device number 2 [ 142.737625][ T6015] 9pnet_virtio: no channels available for device syz [ 142.820086][ T6013] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 144.049892][ T6029] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 145.146315][ T6034] tipc: Started in network mode [ 145.146332][ T6034] tipc: Node identity , cluster identity 4711 [ 145.146347][ T6034] tipc: Failed to obtain node identity [ 145.146379][ T6034] tipc: Enabling of bearer rejected, failed to enable media [ 145.231236][ T6036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.51'. [ 145.653848][ T6039] loop5: detected capacity change from 0 to 7 [ 145.676026][ T6039] Dev loop5: unable to read RDB block 7 [ 145.676793][ T6039] loop5: AHDI p1 p2 p3 [ 145.676875][ T6039] loop5: partition table partially beyond EOD, truncated [ 145.758826][ T6039] loop5: p1 start 1601398130 is beyond EOD, truncated [ 145.758901][ T6039] loop5: p2 start 1702059890 is beyond EOD, truncated [ 146.522461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.068045][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.068668][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.822637][ T5691] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 148.823049][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 150.822433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.243149][ T5691] usb 5-1: device descriptor read/64, error -32 [ 153.618585][ T6074] overlayfs: failed to resolve './file0': -2 [ 153.788320][ T6073] jffs2: notice: (6073) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 154.197213][ T5704] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 154.369957][ T5704] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.417226][ T5704] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 154.417287][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.417316][ T5704] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.417344][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.417369][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.500574][ T5704] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 154.500627][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.500652][ T5704] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.500676][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.500700][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 155.619460][ T6092] tipc: Started in network mode [ 155.619519][ T6092] tipc: Node identity , cluster identity 4711 [ 155.619580][ T6092] tipc: Failed to obtain node identity [ 155.619670][ T6092] tipc: Enabling of bearer rejected, failed to enable media [ 156.642447][ T5704] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 156.642617][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.642691][ T5704] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.642756][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.642832][ T5704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 157.793773][ T5704] usb 3-1: string descriptor 0 read error: -71 [ 157.793939][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.831578][ T5704] usb 3-1: can't set config #168, error -71 [ 157.876697][ T5704] usb 3-1: USB disconnect, device number 2 [ 158.812445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 160.035586][ T6109] CacheFiles: Failed to register: -2 [ 165.919918][ T6154] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 165.958438][ T6154] binder: 6153:6154 ioctl c0306201 200000000040 returned -22 [ 168.427235][ T6166] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 168.520436][ T6168] syz.4.85 (6168) used greatest stack depth: 19464 bytes left [ 170.242463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.262471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.272467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.282496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.469186][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 170.469279][ C0] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 170.469355][ C0] preempt_count: 0, expected: 0 [ 170.469368][ C0] RCU nest depth: 2, expected: 0 [ 170.469436][ C0] 4 locks held by ktimers/0/16: [ 170.469452][ C0] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 170.469699][ C0] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 170.469879][ C0] #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 170.470023][ C0] #3: ffff888033888358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 170.470227][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.470261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.470284][ C0] Call Trace: [ 170.470293][ C0] [ 170.470303][ C0] dump_stack_lvl+0xe8/0x150 [ 170.470342][ C0] __might_resched+0x329/0x480 [ 170.470372][ C0] ? preempt_schedule_irq+0x3d/0xa0 [ 170.470409][ C0] lock_sock_nested+0x56/0x130 [ 170.470449][ C0] x25_kill_by_neigh+0x134/0x2a0 [ 170.470484][ C0] ? x25_kill_by_neigh+0x2b/0x2a0 [ 170.470525][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 170.470555][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 170.470588][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 170.470620][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 170.470646][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 170.470687][ C0] lapbeth_napi_poll+0x45/0x90 [ 170.470716][ C0] __napi_poll+0xae/0x550 [ 170.470756][ C0] net_rx_action+0x621/0xd70 [ 170.470808][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 170.470867][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 170.470906][ C0] handle_softirqs+0x1d9/0x6c0 [ 170.470945][ C0] run_ktimerd+0x69/0x100 [ 170.470977][ C0] smpboot_thread_fn+0x57c/0xa80 [ 170.471010][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 170.471049][ C0] kthread+0x388/0x470 [ 170.471084][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 170.471112][ C0] ? __pfx_kthread+0x10/0x10 [ 170.471147][ C0] ret_from_fork+0x514/0xb70 [ 170.471193][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 170.471228][ C0] ? __switch_to+0xc89/0x1420 [ 170.471262][ C0] ? __pfx_kthread+0x10/0x10 [ 170.471297][ C0] ret_from_fork_asm+0x1a/0x30 [ 170.471352][ C0]