last executing test programs: 10m18.182821748s ago: executing program 4 (id=44): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x1, 0x101, 0x5, {0xd, 0x200, 0x1}}) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast1, 0x8}, 0x1c) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x418103, 0x20, 0xf}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x24000}, 0x24008004) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = mq_open(&(0x7f0000001380)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r7, 0x2, 0x0) r8 = dup(r1) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x72bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x4800) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0xf030000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0xfffffffc, '\x00', @p_u8=0x0}}) 10m16.800621748s ago: executing program 4 (id=49): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r0, 0x3, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x727780, 0x0) fcntl$dupfd(r2, 0x0, r2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x7fff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x18}}], 0x1, 0x40500f0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/45, 0x2d}, {&(0x7f0000000600)=""/168, 0xa8}], 0x3}, 0x1}], 0x1, 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x86, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e303005e000000002000"}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000009"], 0x50) socket(0x10, 0x3, 0x0) 10m12.891653172s ago: executing program 4 (id=55): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xdd48, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e23, 0x6462, @empty, 0x5e}, 0x0, {[0x3, 0x9, 0x3a, 0x2, 0x0, 0x8000c, 0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0xa, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) io_uring_enter(r1, 0x4584, 0xbf84, 0x14, &(0x7f0000000040)={[0x2]}, 0x8) 10m12.192733332s ago: executing program 4 (id=59): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 5) 10m11.062701373s ago: executing program 4 (id=62): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x357, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="b21a007de676", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x321, 0x3a, 0xff, @local, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x9, '\x00', {0xa, 0x6, "6919e4", 0xeb07, 0x29, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [@srh={0x33, 0x8, 0x4, 0x4, 0x3, 0x60, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, @private1]}, @hopopts={0x33, 0xf, '\x00', [@generic={0x1, 0x43, "4d274e1e0278cf76caa75524bbdd1f44c942eda7c2b91b201dc59c14ec4113b2a830b799974eb59015154bbc652a7eb868ba4c16f8372e6855c36322bf689ead2cdfea"}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0x3, [0x8, 0x8, 0xffffffff00000000, 0x4, 0x100]}}]}, @dstopts={0x2c, 0x1f, '\x00', [@generic={0x1, 0xd9, "92f8300b8645b9feb5b4b05c58b6cc9ae587ac69257019c511bbfbe789de35e3723e63a38277ac70c41d31846ac91626e2a8a1def2ed42a1d77ec5c0e8da71e30f318a37bd20c879d1fe46743846400c50f2dfbf4730f5000a4aab5517839e8777b426b1414ae176c964f26914495bb2e55c44a89cf58bde5efe70597a0c042dcf4fc7877e98cbe19c6ed9a16f5605c502c5ffc7fd7a351b789ab72c0b9c7ad4c35b8fda1e71c7f2b8fe884905c2775365b094476422e351411e7633c0de7474ee35bd617c1c4f2c1a73eaab0f39c5c8b0a4c4e018c3d1083e"}, @generic={0xff}, @jumbo={0xc2, 0x4, 0x32d1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x2, [0x48]}}, @pad1, @jumbo={0xc2, 0x4, 0xb2}]}, @routing={0x3a, 0x10, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}], "7c99feee5b22a81f91ad151aaab2e504f9034ee7ef2d78c046777b706684ae9664ef8a9f831ee48b652416bc04f791e5b200a6d83df85e7b56cf04720af373aabb5f80c9ffdbce1ba568a8e577426bdee31e9bc3d272a82c288834139fe747ade6893c94a1381276c0344d111df71eae4ae61b78063a31d1466ad596762f95076502cf7ed16cd969fb37d831553aa5aa03"}}}}}}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10m9.054911648s ago: executing program 4 (id=64): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xb2}}], 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x1, @empty, 0x4e24, 0x0, 'lc\x00', 0x38, 0x8, 0x15}, {@multicast1, 0x4e22, 0x2000, 0x5, 0xfffffffc, 0x240000}}, 0x44) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 9m53.44956251s ago: executing program 32 (id=64): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xb2}}], 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x1, @empty, 0x4e24, 0x0, 'lc\x00', 0x38, 0x8, 0x15}, {@multicast1, 0x4e22, 0x2000, 0x5, 0xfffffffc, 0x240000}}, 0x44) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 9m12.656925218s ago: executing program 0 (id=145): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xe8962, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x9) 9m12.220735063s ago: executing program 0 (id=147): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async, rerun: 32) setns(0xc9, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5, 0xff) clock_gettime(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) (async) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) (async) move_pages(0x0, 0x0, 0x0, &(0x7f0000001800), 0x0, 0x2) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000340)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0]}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x6, 0xfff1}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000009700000018010000696c6c2500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xf, 0x0, &(0x7f0000000100)="85e455918b0c2e974a814063eadc12", 0x0, 0xf361, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m11.280966115s ago: executing program 0 (id=149): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xd46080ae, @remote, 0x1}, 0x1c, 0x0}}], 0x1, 0x2004c0d0) (async) syz_clone3(&(0x7f00000000c0)={0x280040700, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0xf2}, 0x5d) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ce617ebf1b"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000020}, 0x4) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000540)=0x7b1) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e23, 0x5f9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0xffffffffffffffff, {[0x3, 0x1, 0xfff, 0x6, 0xffffffff, 0x0, 0x200000, 0x8]}}, 0x5c) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x420, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e", 0x37) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfd, 0x4) 9m10.94462328s ago: executing program 0 (id=151): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08060001080806"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9m9.772940662s ago: executing program 0 (id=152): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) write$9p(r0, &(0x7f0000000380)="a3", 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x6], 0x0, 0x0, 0x1, 0x1}}, 0x40) 9m7.62450127s ago: executing program 0 (id=156): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 8m52.451375051s ago: executing program 33 (id=156): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 5m51.262032956s ago: executing program 1 (id=387): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 5m50.667226052s ago: executing program 1 (id=389): mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)='-#-\\\x00', 0x2000, &(0x7f0000000100)={@_ha_fsid={[0x7, 0x30a4]}, {0x1, 0xa3, 0xa, 0xe}}, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x5}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @multicast2}, 0x11, 0x0, 0x0, 0x0, 0xa1e, &(0x7f0000000280)='wg2\x00', 0x7ff, 0xff, 0x7}) pipe2$9p(&(0x7f0000000240), 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r2 = inotify_init() mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0) inotify_add_watch(r2, &(0x7f0000000300)='./file0\x00', 0x6000189) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x43) mount(0x0, 0x0, &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x121003, 0x1ac) 5m47.709537549s ago: executing program 1 (id=390): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1, 0x0, 0x4, 0x10001}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f00000003c0)={0x20, r1, 0x2, 0xff2f, &(0x7f0000000380)=[{}, {}]}) 5m47.400969027s ago: executing program 1 (id=393): getegid() openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x5}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m46.948809638s ago: executing program 1 (id=394): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e28, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r6, 0x73}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r6, 0x2}}, 0x18) fsopen(0x0, 0x1) 5m44.837812277s ago: executing program 1 (id=395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5435, 0x0) unshare(0x2c020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000019c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xffffffffffffff29) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000480)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x30, 0x2, 0x1, {0x22, 0x3b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x91, 0x2, 0x23}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) tee(r4, r4, 0xac7f, 0x4) capget(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048090}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 5m43.536281976s ago: executing program 2 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r5, &(0x7f0000000070)='sy', 0x2) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20) 5m41.449264109s ago: executing program 2 (id=398): mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)='-#-\\\x00', 0x2000, &(0x7f0000000100)={@_ha_fsid={[0x7, 0x30a4]}, {0x1, 0xa3, 0xa, 0xe}}, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x5}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @multicast2}, 0x11, 0x0, 0x0, 0x0, 0xa1e, &(0x7f0000000280)='wg2\x00', 0x7ff, 0xff, 0x7}) pipe2$9p(&(0x7f0000000240), 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r2 = inotify_init() mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0) inotify_add_watch(r2, &(0x7f0000000300)='./file0\x00', 0x6000189) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x43) mount(0x0, 0x0, &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x121003, 0x1ac) 5m38.095457695s ago: executing program 2 (id=400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000000)='%pK \x00'}, 0x20) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0xa}) syz_open_dev$MSR(&(0x7f0000000040), 0x800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000001400)={0x0, 0x3, 0x0, 0xdce2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5m33.849431426s ago: executing program 2 (id=401): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x0, 0xffff, 0x8}}, 0x26) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) read$mtd(r6, 0x0, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, 0x0, 0x0) listen(r7, 0xffffffff) accept4(r7, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x280880, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000080)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f0007"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 5m32.233859528s ago: executing program 2 (id=403): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x80, 0x1, 0x7}}, 0x14) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x20040000) r3 = socket(0x10, 0x3, 0x0) setreuid(0x0, 0xee00) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x10, 0x10, 0x6078, 0x5, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x66, 0x0, 0x41, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x572, 0x6a0000) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) syncfs(r0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000980)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003}) 5m29.464712265s ago: executing program 34 (id=395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5435, 0x0) unshare(0x2c020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000019c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xffffffffffffff29) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000480)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x30, 0x2, 0x1, {0x22, 0x3b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x91, 0x2, 0x23}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) tee(r4, r4, 0xac7f, 0x4) capget(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048090}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 5m27.507028849s ago: executing program 2 (id=408): unshare(0x40000000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b75000905", @ANYRES8], 0x0) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000004000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil], &(0x7f0000001800)=[0x1], &(0x7f0000000100), 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000140), &(0x7f0000000340)='./file0\x00', 0x8, 0x3) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r5, r6, r7], 0x3, 0x80800}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b0001006e756d67656e00001c0002800800024000000002080001400000001308000340000800010900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 5m10.668493019s ago: executing program 35 (id=408): unshare(0x40000000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b75000905", @ANYRES8], 0x0) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000004000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil], &(0x7f0000001800)=[0x1], &(0x7f0000000100), 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000140), &(0x7f0000000340)='./file0\x00', 0x8, 0x3) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r5, r6, r7], 0x3, 0x80800}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b0001006e756d67656e00001c0002800800024000000002080001400000001308000340000800010900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 1m43.240579741s ago: executing program 3 (id=561): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m43.12234145s ago: executing program 3 (id=562): mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)='-#-\\\x00', 0x2000, &(0x7f0000000100)={@_ha_fsid={[0x7, 0x30a4]}, {0x1, 0xa3, 0xa, 0xe}}, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0x5}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @multicast2}, 0x11, 0x0, 0x0, 0x0, 0xa1e, &(0x7f0000000280)='wg2\x00', 0x7ff, 0xff, 0x7}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) r2 = inotify_init() mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0) inotify_add_watch(r2, &(0x7f0000000300)='./file0\x00', 0x6000189) r3 = fanotify_init(0x20, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(r3, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 1m40.314093178s ago: executing program 3 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r4, &(0x7f0000000070)='sy', 0x2) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) r5 = dup(r3) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r7, 0x4}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0400000900"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="040000000100"/28], 0x50) 1m38.442722625s ago: executing program 3 (id=564): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x6614d074a83d74b8}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m38.30744522s ago: executing program 3 (id=565): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7fffff}, 0x94) timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r4, &(0x7f0000000600)='dir .', 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r5, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m36.648883301s ago: executing program 3 (id=566): getegid() openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x5}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m21.36216495s ago: executing program 36 (id=566): getegid() openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x5}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.823551363s ago: executing program 6 (id=169): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000100)='\x00', 0x1, 0x40, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x300, 0x0, 0x0) 45.394650118s ago: executing program 6 (id=573): r0 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r0, 0x0, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$inet6(0xa, 0x3, 0x5) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup2(r1, r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_dev$sg(&(0x7f0000000100), 0x8c, 0x400000) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/ipc\x00') 45.138911587s ago: executing program 6 (id=575): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 44.81508396s ago: executing program 6 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0xa, 0xeac8) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) r6 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x7fff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000000001056fcc261f000740000003fb"], 0x1c}}, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000480)={r7, 0x4, {0x0, 0x0, 0x0, 0x207, 0x5, 0x0, 0x12, 0x9, 0x8, "85674b7a7e31fcff443256b9a161109e3d380aa44be7382fddacc5ab7072969183df13ca5c9f7e3fa5482bd47202a1bc7be4b7f2e07ac2821c8e9f7c42ac02f6", "18a1fcf172ea6e2479253d0d44b12a23fa61521e38f365fd9ba0db182d661b7f6e0452b5d5b17a37f620faf47a6d5629d1ac62e0fbd2abdd62986237b5494ab3", "63fd74fe294edbcd5205f6aee8764ee2c3e8c733b0ff88fc0293b9ff55765f45", [0x4, 0x10001]}}) r9 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 39.703386847s ago: executing program 6 (id=581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7fffff}, 0x94) timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, &(0x7f0000000600)='dir .', 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r4, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 38.598769177s ago: executing program 6 (id=582): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000025c0)='8', 0x1}, {&(0x7f0000000000)="8e", 0x1}], 0x2) (fail_nth: 3) 22.437321951s ago: executing program 37 (id=582): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000025c0)='8', 0x1}, {&(0x7f0000000000)="8e", 0x1}], 0x2) (fail_nth: 3) 19.940696573s ago: executing program 5 (id=606): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x59}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x26b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28) fchdir(r1) (async) fchdir(r1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r3, &(0x7f0000000680)="a9", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x29) (async) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x29) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @private=0xa010102, 0x1, "103ddea1080ccd149bc203201089001e0a96a2acf04e42a64ad6ec6528956adb", 0xf, 0x1c00000, 0xfffffff8, 0x6}, 0x3c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x640100fe, @in=@remote, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x84, 0x0, 0xee01}, {0x2e6, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x9, 0x7ff, 0x4001, 0x6}}, 0xe4) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0xe, 0x4, 0x0, 0x1, 0x72, 0x68, 0x0, 0x3, 0x21, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, {[@generic={0x44, 0x2}, @lsrr={0x83, 0x1f, 0x96, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, @local, @multicast2]}, @noop]}}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x419efd372c78be41, 0x0, "de43dc", 0x9, "9a6800"}, "14a2b5165ce3bc2ce3bb95ef81ff6619f5898124bab8e6c4fa48530bc99a3c7689c7471b930c8d868658"}}}}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f42000) 18.278041575s ago: executing program 5 (id=609): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) gettid() r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0xffffffffffffffff) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) getrlimit(0x4, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) getrlimit(0xb, &(0x7f00000001c0)) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3) syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex$unlock_wake_list32(&(0x7f0000003580)=0x9, 0x68a, 0x10, 0x0, 0x0, 0xffffffff) 15.818057549s ago: executing program 5 (id=611): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1, 0x0, 0x300}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha3-384\x00'}}, 0x0, 0x0) (fail_nth: 6) 12.273296679s ago: executing program 9 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r4, &(0x7f0000000070)='sy', 0x2) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) r5 = dup(r3) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r7, 0x4}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0400000900"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="040000000100"/28], 0x50) 10.073242429s ago: executing program 9 (id=621): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000e00000000000000000000000000200000", 0x17) (fail_nth: 6) 9.078387647s ago: executing program 5 (id=622): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000000)=0x52) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) ioprio_set$pid(0x2, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, r2}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40000005, 0x0, 0x0, 0x8, 0x8, 0xb}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) 8.466341128s ago: executing program 5 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0xa, 0xeac8) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) r6 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x7fff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000000001056fcc261f000740000003fb"], 0x1c}}, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000480)={r7, 0x4, {0x0, 0x0, 0x0, 0x207, 0x5, 0x0, 0x12, 0x9, 0x8, "85674b7a7e31fcff443256b9a161109e3d380aa44be7382fddacc5ab7072969183df13ca5c9f7e3fa5482bd47202a1bc7be4b7f2e07ac2821c8e9f7c42ac02f6", "18a1fcf172ea6e2479253d0d44b12a23fa61521e38f365fd9ba0db182d661b7f6e0452b5d5b17a37f620faf47a6d5629d1ac62e0fbd2abdd62986237b5494ab3", "63fd74fe294edbcd5205f6aee8764ee2c3e8c733b0ff88fc0293b9ff55765f45", [0x4, 0x10001]}}) r9 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.387684663s ago: executing program 7 (id=626): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @multicast2}, 0x11, 0x0, 0x0, 0x0, 0xa1e, &(0x7f0000000280)='wg2\x00', 0x7ff, 0xff, 0x7}) pipe2$9p(&(0x7f0000000240), 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x3) r1 = inotify_init() mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0) inotify_add_watch(r1, &(0x7f0000000300)='./file0\x00', 0x6000189) r2 = fanotify_init(0x20, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(r2, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x43) mount(0x0, 0x0, &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x121003, 0x1ac) 8.157615298s ago: executing program 9 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4) (fail_nth: 6) 7.413728181s ago: executing program 9 (id=628): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf, 0xff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x1000, 0x3, {{0x30, 0x4, 0x2, 0x5, 0xc0, 0x68, 0x0, 0xd, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@generic={0x82, 0xa, "3a2c6a002da09b7f"}, @timestamp={0x44, 0x8, 0x6f, 0x0, 0x5, [0x6]}, @rr={0x7, 0xb, 0x8d, [@empty, @remote]}, @noop, @timestamp_addr={0x44, 0x4c, 0xea, 0x1, 0x8, [{@multicast1, 0x8}, {@remote}, {@rand_addr=0x64010102, 0x9}, {@local, 0x429}, {@private=0xa010102, 0xb2}, {@loopback, 0x5}, {@loopback, 0x40}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010102, 0x5}]}, @rr={0x7, 0xf, 0xd4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}, @cipso={0x86, 0x2f, 0xfffffffffffffffc, [{0x2, 0x3, "f9"}, {0x6, 0x2}, {0x2, 0x10, "c6101489311a5a5f627e6ea27f1b"}, {0x2, 0x10, "30306ed7398fda47ad99f123de87"}, {0x5, 0x4, "1909"}]}, @ra={0x94, 0x4, 0x3ff}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x20, 0x8, 0xb4, 0x73f, {{0x14, 0x4, 0x0, 0x5, 0x50, 0x66, 0x0, 0x10, 0x2f, 0x0, @empty, @broadcast, {[@end, @end, @timestamp_prespec={0x44, 0xc, 0x8a, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x27a6}]}, @lsrr={0x83, 0xf, 0xc8, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x82, 0xe, "2bddd86f9563d7f985ce858c"}, @timestamp={0x44, 0x10, 0x74, 0x0, 0xd, [0x2, 0x1, 0xd]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x160, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x36c8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r5}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x810}, 0x4000001) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000540)=0x2, 0x4) write$rfkill(r0, &(0x7f0000000580)={0x4, 0x3, 0x1, 0x1, 0x1}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x0, @sdr={0x30395056, 0x6}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/partitions\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000700)={0xa, 0x4e23, 0x2, @mcast1, 0x3108ef12}, 0x1c) r8 = syz_open_dev$vim2m(&(0x7f0000000740), 0x4ca1, 0x2) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000780)={0x1, 0xfffe, "04098b", 0xf, 0xd4}) read$FUSE(r0, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(r9, &(0x7f0000002800)='gid_map\x00') readv(r0, &(0x7f00000048c0)=[{&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/102, 0x66}], 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000004900)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004940)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0xfffffffb, '\x00', 0x0, r6, 0x2, 0x2, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004c80)=@bpf_ext={0x1c, 0xf, &(0x7f00000049c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xb}, [@alu={0x3, 0x0, 0xb, 0x6, 0xbac95c932492a275, 0xffffffffffffffc0, 0x1}, @alu={0x4, 0x1, 0xc, 0x3, 0xb, 0x0, 0xfffffffffffffff0}, @generic={0x2, 0x4, 0x9, 0x9, 0xfffffff8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x2, 0x1, 0x0, 0x3, 0x3, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000004a40)='GPL\x00', 0x8, 0xa8, &(0x7f0000004a80)=""/168, 0x41000, 0xc, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004b40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000004b80)={0x4, 0xf, 0x4, 0xfffffff9}, 0x10, 0x2179d, r0, 0x5, &(0x7f0000004bc0)=[r6, r6], &(0x7f0000004c00)=[{0x1, 0x4, 0x0, 0x9}, {0x4, 0x4, 0x3, 0x1}, {0x4, 0x1, 0xa, 0x1}, {0x0, 0x4, 0x8, 0xa}, {0x3, 0x1, 0x8, 0x7}], 0x10, 0x1}, 0x94) getpid() r12 = socket(0x25, 0x5, 0xfffffff9) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000004d40)={0x10}) r13 = syz_open_dev$dmmidi(&(0x7f0000004d80), 0x0, 0x428280) ioctl$F2FS_IOC_COMPRESS_FILE(r13, 0xf518, 0x0) accept4$inet6(r10, &(0x7f0000004dc0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000004e00)=0x1c, 0xc00) accept(r12, &(0x7f0000004e40)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000004ec0)=0x80) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000004f00)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)=@delchain={0x2c, 0x65, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xffff, 0xa}, {0x3, 0xb}, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xe0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4045}, 0x20000004) 3.404184666s ago: executing program 7 (id=629): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) socket(0x40000000015, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) io_destroy(r0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) io_getevents(r0, 0x5, 0x0, 0x0, 0x0) r6 = gettid() r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0x7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268", 0x5}], 0x2}, 0x40) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) setresuid(0xee01, 0x0, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r10, &(0x7f0000000040)='fdinfo/3\x00') 3.40304566s ago: executing program 9 (id=630): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x3}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212090502"], 0x10}}, 0x10) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xfc, 0xb4, 0x5, 0x40, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000140)=@md0, 0x0, &(0x7f0000000180)='./file0\x00') syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="200a09000000090902"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.317535958s ago: executing program 5 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r4, &(0x7f0000000070)='sy', 0x2) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) r5 = dup(r3) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r7, 0x4}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0400000900"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="040000000100"/28], 0x50) 2.469669487s ago: executing program 7 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.804269384s ago: executing program 7 (id=633): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) writev(r0, 0x0, 0x0) 910.801038ms ago: executing program 9 (id=634): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x44, r1, 0x0, 0x0, 0x4010, 0x0, 0x65aee9a9ce9dc6b4}]) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)={0xc8, 0x3, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10000}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x498365d30294e34a) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$sock(r4, &(0x7f00000007c0)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x80000000, @local, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="fece155fa9cc950541179ec7362723e70746f5352caac893f9107d3d1b096dedd29f5fd6cc88ebc4af0d353f8069c537d0d92268dc35eb469f62fa36d0169a03022281d486d1b3954399a95c686e8b5d3b2ec15fd815c75d34b87c0e374652483172599dbc5e361911ceb114d984ba7d0e28735c2bdcea51044b3f319062aba8efd538795e48c7a53d905dd696f132bcdb05fefa266c67705525c0028fc5c4a0cfbd7eaed7fb9608f502d241fc6eb84f0a9dab29e50a18c181d895312804ecdb5989c7bdd0e939ab8bdc13caa317875eda0de0", 0xd3}, {&(0x7f0000000500)="91d875e1274a1d76a19db7d0d0eda6ba484c4526835eaffeb4ffabc40897785b", 0x20}, {&(0x7f0000000540)="723787bbdffb95d354e8f5752e0a95c6623ff0e29c885a8b8b078606a23c52fd1e147c29d9e8e55216f8", 0x2a}, {&(0x7f0000000580)="33692cc1882199b79c020d6fe810d38bab4c00fb7f16c8fdfb482602d10b24b965507285f958ec8f8dfef4dcc1daf0c397c9ec75feccc34be176955e4a1800f954b751388f0c7e2f84b1704c5a81e46ae2e019d95a29bc47676dc3f3fa1c397bb7ec164dc2a82febaac0751fb42ab39279", 0x71}, {&(0x7f0000000600)="91b662bf45b205be52eddc66f4d55d8337c22aa3ea4e4c9c1668775f66ac453f3e5aa4ff905b3a5f399602d3f966f864770536b100efac9eb7d1a19c6249030705e95f633987a5c5dd8279656a9ffb86d03bd29aa2299303ca523bd8462d493ec429d44a8bcee3d02354f85ad56767ae723276e3435d36736cab1b744eb3e1b3be53fde5e784a9a9aa54720a4311e928c4f5295f74ac89a6e0281f9d4480d037eaff388d32498792dd4925d23b5220a073ffa606eb8d142235a2", 0xba}], 0x5, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x60}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x2eb, 0x40, 0x2000000000000, 0x4}, 0x0, 0x0, 0x0, 0x0) r5 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_labels_list(r5, &(0x7f0000000080)={[{'-\\\'&'}, {'/dev/dvb/adapter#/dvr#\x00'}]}, 0x1e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r4, 0x27, 0x80000}) 826.032238ms ago: executing program 7 (id=635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ce617ebf1b"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240088a0}, 0x4) 0s ago: executing program 7 (id=636): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2000, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000"], 0x50) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x3}, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000200)=0x6e, 0x80000) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): 119 : does not exist [ 533.715157][ T198] usb 4-1: 0:120 : does not exist [ 533.715174][ T198] usb 4-1: 0:121 : does not exist [ 533.715189][ T198] usb 4-1: 0:122 : does not exist [ 533.715206][ T198] usb 4-1: 0:123 : does not exist [ 533.715223][ T198] usb 4-1: 0:124 : does not exist [ 533.715239][ T198] usb 4-1: 0:125 : does not exist [ 533.715255][ T198] usb 4-1: 0:126 : does not exist [ 533.715272][ T198] usb 4-1: 0:127 : does not exist [ 533.715288][ T198] usb 4-1: 0:128 : does not exist [ 533.715305][ T198] usb 4-1: 0:129 : does not exist [ 533.715321][ T198] usb 4-1: 0:130 : does not exist [ 533.715338][ T198] usb 4-1: 0:131 : does not exist [ 533.715354][ T198] usb 4-1: 0:132 : does not exist [ 533.723195][ T198] usb 4-1: 0:133 : does not exist [ 533.723219][ T198] usb 4-1: 0:134 : does not exist [ 533.723235][ T198] usb 4-1: 0:135 : does not exist [ 533.723252][ T198] usb 4-1: 0:136 : does not exist [ 533.723268][ T198] usb 4-1: 0:137 : does not exist [ 533.723285][ T198] usb 4-1: 0:138 : does not exist [ 533.723301][ T198] usb 4-1: 0:139 : does not exist [ 533.723317][ T198] usb 4-1: 0:140 : does not exist [ 533.723333][ T198] usb 4-1: 0:141 : does not exist [ 533.723349][ T198] usb 4-1: 0:142 : does not exist [ 533.723364][ T198] usb 4-1: 0:143 : does not exist [ 533.723380][ T198] usb 4-1: 0:144 : does not exist [ 533.723397][ T198] usb 4-1: 0:145 : does not exist [ 533.723412][ T198] usb 4-1: 0:146 : does not exist [ 533.723428][ T198] usb 4-1: 0:147 : does not exist [ 533.723444][ T198] usb 4-1: 0:148 : does not exist [ 533.723460][ T198] usb 4-1: 0:149 : does not exist [ 533.723476][ T198] usb 4-1: 0:150 : does not exist [ 533.723492][ T198] usb 4-1: 0:151 : does not exist [ 533.723507][ T198] usb 4-1: 0:152 : does not exist [ 533.723524][ T198] usb 4-1: 0:153 : does not exist [ 533.723541][ T198] usb 4-1: 0:154 : does not exist [ 533.723556][ T198] usb 4-1: 0:155 : does not exist [ 533.723572][ T198] usb 4-1: 0:156 : does not exist [ 533.723588][ T198] usb 4-1: 0:157 : does not exist [ 533.723604][ T198] usb 4-1: 0:158 : does not exist [ 533.723620][ T198] usb 4-1: 0:159 : does not exist [ 533.723635][ T198] usb 4-1: 0:160 : does not exist [ 533.723650][ T198] usb 4-1: 0:161 : does not exist [ 533.723666][ T198] usb 4-1: 0:162 : does not exist [ 533.723682][ T198] usb 4-1: 0:163 : does not exist [ 533.723698][ T198] usb 4-1: 0:164 : does not exist [ 533.723714][ T198] usb 4-1: 0:165 : does not exist [ 533.723729][ T198] usb 4-1: 0:166 : does not exist [ 533.723745][ T198] usb 4-1: 0:167 : does not exist [ 533.723761][ T198] usb 4-1: 0:168 : does not exist [ 533.723776][ T198] usb 4-1: 0:169 : does not exist [ 533.723792][ T198] usb 4-1: 0:170 : does not exist [ 533.723808][ T198] usb 4-1: 0:171 : does not exist [ 533.723839][ T198] usb 4-1: 0:172 : does not exist [ 533.723855][ T198] usb 4-1: 0:173 : does not exist [ 533.723871][ T198] usb 4-1: 0:174 : does not exist [ 533.723887][ T198] usb 4-1: 0:175 : does not exist [ 533.723904][ T198] usb 4-1: 0:176 : does not exist [ 533.723920][ T198] usb 4-1: 0:177 : does not exist [ 533.723936][ T198] usb 4-1: 0:178 : does not exist [ 533.792094][ T198] usb 4-1: 0:179 : does not exist [ 533.792116][ T198] usb 4-1: 0:180 : does not exist [ 533.792133][ T198] usb 4-1: 0:181 : does not exist [ 533.792148][ T198] usb 4-1: 0:182 : does not exist [ 533.792165][ T198] usb 4-1: 0:183 : does not exist [ 533.792182][ T198] usb 4-1: 0:184 : does not exist [ 533.792199][ T198] usb 4-1: 0:185 : does not exist [ 533.792216][ T198] usb 4-1: 0:186 : does not exist [ 533.792234][ T198] usb 4-1: 0:187 : does not exist [ 533.792250][ T198] usb 4-1: 0:188 : does not exist [ 533.792267][ T198] usb 4-1: 0:189 : does not exist [ 533.792284][ T198] usb 4-1: 0:190 : does not exist [ 533.792301][ T198] usb 4-1: 0:191 : does not exist [ 533.792317][ T198] usb 4-1: 0:192 : does not exist [ 533.792334][ T198] usb 4-1: 0:193 : does not exist [ 533.792351][ T198] usb 4-1: 0:194 : does not exist [ 533.792366][ T198] usb 4-1: 0:195 : does not exist [ 533.792382][ T198] usb 4-1: 0:196 : does not exist [ 533.792398][ T198] usb 4-1: 0:197 : does not exist [ 533.792413][ T198] usb 4-1: 0:198 : does not exist [ 533.792429][ T198] usb 4-1: 0:199 : does not exist [ 533.792445][ T198] usb 4-1: 0:200 : does not exist [ 533.792461][ T198] usb 4-1: 0:201 : does not exist [ 533.792476][ T198] usb 4-1: 0:202 : does not exist [ 533.792493][ T198] usb 4-1: 0:203 : does not exist [ 533.792509][ T198] usb 4-1: 0:204 : does not exist [ 533.792526][ T198] usb 4-1: 0:205 : does not exist [ 533.792541][ T198] usb 4-1: 0:206 : does not exist [ 533.792557][ T198] usb 4-1: 0:207 : does not exist [ 533.792571][ T198] usb 4-1: 0:208 : does not exist [ 533.792588][ T198] usb 4-1: 0:209 : does not exist [ 533.792604][ T198] usb 4-1: 0:210 : does not exist [ 533.792619][ T198] usb 4-1: 0:211 : does not exist [ 533.792634][ T198] usb 4-1: 0:212 : does not exist [ 533.792650][ T198] usb 4-1: 0:213 : does not exist [ 533.792665][ T198] usb 4-1: 0:214 : does not exist [ 533.792681][ T198] usb 4-1: 0:215 : does not exist [ 533.792696][ T198] usb 4-1: 0:216 : does not exist [ 533.792712][ T198] usb 4-1: 0:217 : does not exist [ 533.792727][ T198] usb 4-1: 0:218 : does not exist [ 533.792743][ T198] usb 4-1: 0:219 : does not exist [ 533.792759][ T198] usb 4-1: 0:220 : does not exist [ 533.792774][ T198] usb 4-1: 0:221 : does not exist [ 533.792790][ T198] usb 4-1: 0:222 : does not exist [ 533.792805][ T198] usb 4-1: 0:223 : does not exist [ 533.792822][ T198] usb 4-1: 0:224 : does not exist [ 533.792837][ T198] usb 4-1: 0:225 : does not exist [ 533.792853][ T198] usb 4-1: 0:226 : does not exist [ 533.792868][ T198] usb 4-1: 0:227 : does not exist [ 533.792884][ T198] usb 4-1: 0:228 : does not exist [ 533.792899][ T198] usb 4-1: 0:229 : does not exist [ 533.792915][ T198] usb 4-1: 0:230 : does not exist [ 533.792930][ T198] usb 4-1: 0:231 : does not exist [ 533.792946][ T198] usb 4-1: 0:232 : does not exist [ 533.792961][ T198] usb 4-1: 0:233 : does not exist [ 533.792977][ T198] usb 4-1: 0:234 : does not exist [ 533.792992][ T198] usb 4-1: 0:235 : does not exist [ 533.793017][ T198] usb 4-1: 0:236 : does not exist [ 533.793033][ T198] usb 4-1: 0:237 : does not exist [ 533.793049][ T198] usb 4-1: 0:238 : does not exist [ 533.793064][ T198] usb 4-1: 0:239 : does not exist [ 533.793080][ T198] usb 4-1: 0:240 : does not exist [ 533.793096][ T198] usb 4-1: 0:241 : does not exist [ 533.793111][ T198] usb 4-1: 0:242 : does not exist [ 533.793127][ T198] usb 4-1: 0:243 : does not exist [ 533.793142][ T198] usb 4-1: 0:244 : does not exist [ 533.793157][ T198] usb 4-1: 0:245 : does not exist [ 533.793173][ T198] usb 4-1: 0:246 : does not exist [ 533.793188][ T198] usb 4-1: 0:247 : does not exist [ 533.793203][ T198] usb 4-1: 0:248 : does not exist [ 533.793219][ T198] usb 4-1: 0:249 : does not exist [ 533.793234][ T198] usb 4-1: 0:250 : does not exist [ 533.793250][ T198] usb 4-1: 0:251 : does not exist [ 533.793266][ T198] usb 4-1: 0:252 : does not exist [ 533.793282][ T198] usb 4-1: 0:253 : does not exist [ 533.928183][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.929947][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.027498][ T198] usb 4-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 535.293844][ T198] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 535.315190][ T198] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 535.726151][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 535.768433][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 536.579538][ T5317] usb 4-1: USB disconnect, device number 28 [ 538.793001][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.830294][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.859421][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.867964][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.878280][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.572536][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 539.635778][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 539.639596][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 539.643142][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 539.644430][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.765600][ T5722] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 540.915757][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 540.916605][ T5722] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 540.918283][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.918306][ T5722] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.921430][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.921455][ T5722] usb 4-1: Product: syz [ 540.921470][ T5722] usb 4-1: Manufacturer: syz [ 540.921485][ T5722] usb 4-1: SerialNumber: syz [ 540.973302][ T5722] usb 4-1: config 0 descriptor?? [ 541.005516][ T5601] Bluetooth: hci0: command tx timeout [ 541.564089][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.572807][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.573035][ T8266] bridge_slave_0: entered allmulticast mode [ 541.578217][ T8266] bridge_slave_0: entered promiscuous mode [ 541.584836][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.610130][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.610836][ T8266] bridge_slave_1: entered allmulticast mode [ 541.643559][ T8266] bridge_slave_1: entered promiscuous mode [ 541.725521][ T5601] Bluetooth: hci3: command tx timeout [ 541.923756][ T8266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.947655][ T8266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.318153][ T8266] team0: Port device team_slave_0 added [ 542.369458][ T8266] team0: Port device team_slave_1 added [ 542.519705][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.519719][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.519738][ T8266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.610988][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.611007][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.611036][ T8266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.013444][ T8266] hsr_slave_0: entered promiscuous mode [ 543.014509][ T8266] hsr_slave_1: entered promiscuous mode [ 543.015236][ T8266] debugfs: 'hsr0' already exists in 'hsr' [ 543.015255][ T8266] Cannot create hsr debugfs directory [ 543.110993][ T5601] Bluetooth: hci0: command tx timeout [ 543.575100][ T5722] usb 4-1: USB disconnect, device number 29 [ 543.785079][ T8112] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 543.815652][ T5601] Bluetooth: hci3: command tx timeout [ 543.853947][ T8112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.937151][ T8112] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 543.986294][ T8112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.010331][ T7011] IPVS: stop unused estimator thread 0... [ 544.028263][ T8112] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.069585][ T8112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.120799][ T8112] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.149208][ T8112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.473992][ T5605] Bluetooth: hci0: command tx timeout [ 546.474490][ T5605] Bluetooth: hci3: command tx timeout [ 547.432197][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 547.432214][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'. [ 547.610662][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.610851][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.611078][ T8400] bridge_slave_0: entered allmulticast mode [ 547.613984][ T8400] bridge_slave_0: entered promiscuous mode [ 547.659868][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.659999][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.660229][ T8391] bridge_slave_0: entered allmulticast mode [ 547.671758][ T8391] bridge_slave_0: entered promiscuous mode [ 547.714141][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.714301][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.714547][ T8400] bridge_slave_1: entered allmulticast mode [ 547.743382][ T8400] bridge_slave_1: entered promiscuous mode [ 547.754837][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.755176][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.773405][ T8391] bridge_slave_1: entered allmulticast mode [ 547.785851][ T8391] bridge_slave_1: entered promiscuous mode [ 547.989762][ T5605] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 548.217834][ T1000] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 548.268473][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.375573][ T1000] usb 4-1: Using ep0 maxpacket: 32 [ 548.401940][ T1000] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 548.409141][ T1000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.409214][ T1000] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.450019][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.450049][ T1000] usb 4-1: Product: syz [ 548.450064][ T1000] usb 4-1: Manufacturer: syz [ 548.450079][ T1000] usb 4-1: SerialNumber: syz [ 548.495175][ T1000] usb 4-1: config 0 descriptor?? [ 548.525690][ T5605] Bluetooth: hci3: command tx timeout [ 548.525703][ T5601] Bluetooth: hci0: command tx timeout [ 548.529288][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.557785][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.564201][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.866452][ T8400] team0: Port device team_slave_0 added [ 549.014181][ T8391] team0: Port device team_slave_0 added [ 549.026076][ T8400] team0: Port device team_slave_1 added [ 549.234800][ T8391] team0: Port device team_slave_1 added [ 549.486412][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.486430][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.486459][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.492254][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.492272][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.492300][ T8391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.613809][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.613823][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.613843][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.660134][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.660153][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.660180][ T8391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.049896][ T8400] hsr_slave_0: entered promiscuous mode [ 550.050989][ T8400] hsr_slave_1: entered promiscuous mode [ 550.051697][ T8400] debugfs: 'hsr0' already exists in 'hsr' [ 550.051723][ T8400] Cannot create hsr debugfs directory [ 550.119617][ T8391] hsr_slave_0: entered promiscuous mode [ 550.120786][ T8391] hsr_slave_1: entered promiscuous mode [ 550.121493][ T8391] debugfs: 'hsr0' already exists in 'hsr' [ 550.121509][ T8391] Cannot create hsr debugfs directory [ 551.009950][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.056226][ T5722] usb 4-1: USB disconnect, device number 30 [ 551.505572][ T5722] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 551.679223][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 551.692361][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 551.692413][ T5722] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 551.693503][ T5722] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 551.693527][ T5722] usb 4-1: config 4 has no interface number 0 [ 551.693556][ T5722] usb 4-1: config 4 interface 127 has no altsetting 0 [ 551.728301][ T5722] usb 4-1: string descriptor 0 read error: -22 [ 551.728447][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.789650][ T8266] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 551.875940][ T8266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.921210][ T8266] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 552.001048][ T8266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.023736][ T8266] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 552.051300][ T8266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.309268][ T8497] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 552.388515][ T8497] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 552.390791][ T1245] usb 4-1: USB disconnect, device number 31 [ 552.912112][ T8266] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 552.949457][ T8266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.993098][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.120660][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.120816][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.361022][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.361170][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.284005][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 556.331996][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 556.334480][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 556.357595][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 556.358518][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.569770][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 559.359263][ T5601] Bluetooth: hci5: command tx timeout [ 561.617656][ T5601] Bluetooth: hci5: command tx timeout [ 562.115732][ T8266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.924979][ T8266] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.013154][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.013229][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.223901][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.233742][ T7016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.312373][ T5601] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 563.389639][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.390250][ T7016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.517120][ T7011] bridge_slave_1: left allmulticast mode [ 563.517148][ T7011] bridge_slave_1: left promiscuous mode [ 563.517343][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.585633][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 563.638365][ T7011] bridge_slave_0: left allmulticast mode [ 563.638394][ T7011] bridge_slave_0: left promiscuous mode [ 563.638572][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.647001][ T5601] Bluetooth: hci5: command tx timeout [ 563.735821][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 563.739140][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 563.740849][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.740874][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.743234][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.743258][ T9] usb 4-1: Product: syz [ 563.743287][ T9] usb 4-1: Manufacturer: syz [ 563.743297][ T9] usb 4-1: SerialNumber: syz [ 563.763968][ T9] usb 4-1: config 0 descriptor?? [ 563.917353][ T7011] bridge_slave_1: left allmulticast mode [ 563.917393][ T7011] bridge_slave_1: left promiscuous mode [ 563.917643][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.016691][ T7011] bridge_slave_0: left allmulticast mode [ 564.016718][ T7011] bridge_slave_0: left promiscuous mode [ 564.016897][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.225776][ T7011] bridge_slave_1: left allmulticast mode [ 564.225809][ T7011] bridge_slave_1: left promiscuous mode [ 564.226001][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.346887][ T7011] bridge_slave_0: left allmulticast mode [ 564.346914][ T7011] bridge_slave_0: left promiscuous mode [ 564.350244][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.555770][ T7011] bridge_slave_1: left allmulticast mode [ 564.555799][ T7011] bridge_slave_1: left promiscuous mode [ 564.555987][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.657353][ T7011] bridge_slave_0: left allmulticast mode [ 564.657382][ T7011] bridge_slave_0: left promiscuous mode [ 564.657584][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.336354][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.456395][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.519121][ T7011] bond0 (unregistering): Released all slaves [ 565.725933][ T5601] Bluetooth: hci5: command tx timeout [ 566.016147][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.106807][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.167851][ T7011] bond0 (unregistering): Released all slaves [ 566.300215][ T9] usb 4-1: USB disconnect, device number 32 [ 568.506200][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.590985][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.608057][ T7011] bond0 (unregistering): Released all slaves [ 569.225861][ T8552] binder: 8551:8552 ioctl c00c620f 2000000021c0 returned -22 [ 569.227329][ T8552] binder: 8551:8552 ioctl 82307201 200000002380 returned -22 [ 569.227724][ T8552] binder: 8551:8552 ioctl 810c9365 200000002600 returned -22 [ 569.501283][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.701153][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 570.526181][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.191291][ T7011] bond0 (unregistering): Released all slaves [ 576.181877][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 576.241153][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 576.293587][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 576.534315][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 576.535284][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 577.966902][ T7011] hsr_slave_0: left promiscuous mode [ 578.005592][ T7011] hsr_slave_1: left promiscuous mode [ 578.006408][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.039297][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.505'. [ 578.077354][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.236004][ T7011] hsr_slave_0: left promiscuous mode [ 578.255588][ T7011] hsr_slave_1: left promiscuous mode [ 578.256512][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.311892][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.465640][ T7011] hsr_slave_0: left promiscuous mode [ 578.505706][ T7011] hsr_slave_1: left promiscuous mode [ 578.506906][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.536565][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.695831][ T7011] hsr_slave_0: left promiscuous mode [ 578.736022][ T7011] hsr_slave_1: left promiscuous mode [ 578.736868][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.767436][ T5601] Bluetooth: hci1: command tx timeout [ 578.768441][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.288354][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 579.346221][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 579.826422][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 579.886416][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 580.408163][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 580.457207][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 580.845582][ T5601] Bluetooth: hci1: command tx timeout [ 580.986094][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 581.036215][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 581.370156][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 583.557164][ T5601] Bluetooth: hci1: command tx timeout [ 584.240286][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 584.482377][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.482604][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.482835][ T8515] bridge_slave_0: entered allmulticast mode [ 584.486337][ T8515] bridge_slave_0: entered promiscuous mode [ 584.490730][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.491271][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.492708][ T8515] bridge_slave_1: entered allmulticast mode [ 584.503847][ T8515] bridge_slave_1: entered promiscuous mode [ 584.682541][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.697842][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.951996][ T8515] team0: Port device team_slave_0 added [ 584.970757][ T8515] team0: Port device team_slave_1 added [ 585.565917][ T5601] Bluetooth: hci1: command tx timeout [ 586.755253][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.755272][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.755301][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.987420][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.987438][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.987469][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.653905][ T8515] hsr_slave_0: entered promiscuous mode [ 587.656692][ T8515] hsr_slave_1: entered promiscuous mode [ 587.657706][ T8515] debugfs: 'hsr0' already exists in 'hsr' [ 587.657731][ T8515] Cannot create hsr debugfs directory [ 588.064881][ T8400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 588.090550][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.136242][ T1000] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 588.190441][ T8400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 588.276404][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.295523][ T1000] usb 4-1: Using ep0 maxpacket: 16 [ 588.299466][ T1000] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 588.326034][ T1000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.326093][ T1000] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.332317][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.332345][ T1000] usb 4-1: Product: syz [ 588.332360][ T1000] usb 4-1: Manufacturer: syz [ 588.332375][ T1000] usb 4-1: SerialNumber: syz [ 588.405302][ T1000] usb 4-1: config 0 descriptor?? [ 588.500150][ T8400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 588.560993][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.896975][ T8400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 589.020671][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.416244][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.416343][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.416558][ T8573] bridge_slave_0: entered allmulticast mode [ 589.419211][ T8573] bridge_slave_0: entered promiscuous mode [ 589.495168][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.495302][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.498171][ T8573] bridge_slave_1: entered allmulticast mode [ 589.510946][ T8573] bridge_slave_1: entered promiscuous mode [ 589.590147][ T5246] 8021q: adding VLAN 0 to HW filter on device eth17 [ 589.850445][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.969317][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.365105][ T8391] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.424615][ T8391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.458869][ T8573] team0: Port device team_slave_0 added [ 590.497271][ T8391] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 590.543669][ T8391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.557250][ T8573] team0: Port device team_slave_1 added [ 590.894932][ T1000] usb 4-1: USB disconnect, device number 33 [ 593.731667][ T8391] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 593.760101][ T8391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.843507][ T5601] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 593.844212][ T5246] 8021q: adding VLAN 0 to HW filter on device eth18 [ 593.862382][ T8391] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.908077][ T8391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.953220][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.953257][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.953286][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.007614][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.007633][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.007662][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.145530][ T1000] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 594.327750][ T1000] usb 4-1: Using ep0 maxpacket: 32 [ 594.328459][ T1000] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 594.329712][ T1000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.329736][ T1000] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.333837][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.333862][ T1000] usb 4-1: Product: syz [ 594.333878][ T1000] usb 4-1: Manufacturer: syz [ 594.333894][ T1000] usb 4-1: SerialNumber: syz [ 594.431332][ T1000] usb 4-1: config 0 descriptor?? [ 594.764780][ T8573] hsr_slave_0: entered promiscuous mode [ 594.774922][ T8573] hsr_slave_1: entered promiscuous mode [ 594.784499][ T8573] debugfs: 'hsr0' already exists in 'hsr' [ 594.784528][ T8573] Cannot create hsr debugfs directory [ 595.216861][ T5246] 8021q: adding VLAN 0 to HW filter on device eth19 [ 595.943458][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.094497][ T5246] 8021q: adding VLAN 0 to HW filter on device eth20 [ 596.261594][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.388499][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.388715][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.508080][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.508243][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.563925][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.913279][ T5832] usb 4-1: USB disconnect, device number 34 [ 597.144962][ T5246] 8021q: adding VLAN 0 to HW filter on device eth14 [ 598.140148][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 598.221337][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 598.281783][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 598.307667][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 598.308675][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 600.947479][ T5605] Bluetooth: hci2: command tx timeout [ 601.362829][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.402101][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.454713][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.463604][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.477473][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 603.005596][ T5601] Bluetooth: hci2: command tx timeout [ 604.074152][ T5601] Bluetooth: hci0: command tx timeout [ 604.895969][ T7011] bridge_slave_1: left allmulticast mode [ 604.896008][ T7011] bridge_slave_1: left promiscuous mode [ 604.896291][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.068752][ T7011] bridge_slave_0: left allmulticast mode [ 605.068791][ T7011] bridge_slave_0: left promiscuous mode [ 605.069071][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.085920][ T5601] Bluetooth: hci2: command tx timeout [ 605.366059][ T7011] bridge_slave_1: left allmulticast mode [ 605.366096][ T7011] bridge_slave_1: left promiscuous mode [ 605.366345][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.551376][ T7011] bridge_slave_0: left allmulticast mode [ 605.551414][ T7011] bridge_slave_0: left promiscuous mode [ 605.551687][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.973816][ T5601] Bluetooth: hci0: command tx timeout [ 607.186115][ T5601] Bluetooth: hci2: command tx timeout [ 607.617234][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.736305][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.797610][ T7011] bond0 (unregistering): Released all slaves [ 608.396296][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.459752][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.498355][ T7011] bond0 (unregistering): Released all slaves [ 609.008765][ T5601] Bluetooth: hci0: command tx timeout [ 610.057464][ T7011] hsr_slave_0: left promiscuous mode [ 610.095714][ T7011] hsr_slave_1: left promiscuous mode [ 610.096448][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.146744][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.360620][ T7011] hsr_slave_0: left promiscuous mode [ 610.383748][ T7011] hsr_slave_1: left promiscuous mode [ 610.384479][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.429209][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.105034][ T5601] Bluetooth: hci0: command tx timeout [ 613.378031][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 613.456406][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 615.609191][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.653216][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.654776][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.679081][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.680711][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.946266][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 616.027700][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 617.032889][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.033133][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.033358][ T8762] bridge_slave_0: entered allmulticast mode [ 617.037086][ T8762] bridge_slave_0: entered promiscuous mode [ 617.348085][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.349782][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.349972][ T8762] bridge_slave_1: entered allmulticast mode [ 617.353702][ T8762] bridge_slave_1: entered promiscuous mode [ 617.780289][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.805625][ T5601] Bluetooth: hci3: command tx timeout [ 617.809868][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.470619][ T8762] team0: Port device team_slave_0 added [ 618.506859][ T8762] team0: Port device team_slave_1 added [ 619.010369][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.010389][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.010419][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.121492][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.121510][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.121537][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.885527][ T5601] Bluetooth: hci3: command tx timeout [ 620.904050][ T8762] hsr_slave_0: entered promiscuous mode [ 620.912372][ T8762] hsr_slave_1: entered promiscuous mode [ 620.913434][ T8762] debugfs: 'hsr0' already exists in 'hsr' [ 620.913459][ T8762] Cannot create hsr debugfs directory [ 621.127694][ T5832] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 621.181173][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.181398][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.181609][ T8798] bridge_slave_0: entered allmulticast mode [ 621.191441][ T8798] bridge_slave_0: entered promiscuous mode [ 621.358677][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.358810][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.359067][ T8798] bridge_slave_1: entered allmulticast mode [ 621.396997][ T8798] bridge_slave_1: entered promiscuous mode [ 621.967501][ T5601] Bluetooth: hci3: command tx timeout [ 622.299818][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.669426][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.096420][ T5601] Bluetooth: hci3: command tx timeout [ 625.235489][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.235564][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.885065][ T8798] team0: Port device team_slave_0 added [ 625.942959][ T8798] team0: Port device team_slave_1 added [ 626.932428][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.932447][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.932475][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.279826][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.279853][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.279883][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.530614][ T8573] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 627.568137][ T8573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 627.778227][ T5601] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 627.898680][ T8573] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 627.933981][ T8573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.015621][ T1000] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 628.165599][ T1000] usb 4-1: Using ep0 maxpacket: 32 [ 628.166459][ T1000] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 628.171122][ T1000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.217800][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.217830][ T1000] usb 4-1: Product: syz [ 628.217845][ T1000] usb 4-1: Manufacturer: syz [ 628.217860][ T1000] usb 4-1: SerialNumber: syz [ 628.223547][ T1000] usb 4-1: config 0 descriptor?? [ 628.312851][ T1000] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 628.436673][ T1000] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 628.437802][ T1000] quatech2 4-1:0.0: probe with driver quatech2 failed with error -8 [ 628.624378][ T8573] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 628.641036][ T8573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.673792][ T8798] hsr_slave_0: entered promiscuous mode [ 628.685760][ T8798] hsr_slave_1: entered promiscuous mode [ 628.686785][ T8798] debugfs: 'hsr0' already exists in 'hsr' [ 628.686810][ T8798] Cannot create hsr debugfs directory [ 628.688282][ T1000] usb 4-1: USB disconnect, device number 36 [ 628.690617][ T8573] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 628.772325][ T8573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.851662][ T8903] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.851880][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.852066][ T8903] bridge_slave_0: entered allmulticast mode [ 628.854124][ T8903] bridge_slave_0: entered promiscuous mode [ 629.125298][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.126640][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.153796][ T8903] bridge_slave_1: entered allmulticast mode [ 629.159503][ T8903] bridge_slave_1: entered promiscuous mode [ 629.545759][ T5706] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 629.714719][ T8903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.717991][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 629.718923][ T5706] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 629.724705][ T5706] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 629.724733][ T5706] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 629.724755][ T5706] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 629.724775][ T5706] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 629.724795][ T5706] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 629.724817][ T5706] usb 4-1: config 0 has no interface number 0 [ 629.724865][ T5706] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 629.724894][ T5706] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 629.724918][ T5706] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 629.724954][ T5706] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.724983][ T5706] usb 4-1: config 0 interface 125 has no altsetting 0 [ 629.725001][ T5706] usb 4-1: config 0 interface 125 has no altsetting 2 [ 629.843926][ T8903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.863398][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.863426][ T5706] usb 4-1: Product: syz [ 629.863442][ T5706] usb 4-1: Manufacturer: syz [ 629.863457][ T5706] usb 4-1: SerialNumber: syz [ 629.914049][ T5706] usb 4-1: config 0 descriptor?? [ 629.934197][ T5706] usb 4-1: selecting invalid altsetting 2 [ 630.791109][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 630.810297][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.818399][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.832270][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 631.604951][ T5706] get_1284_register timeout [ 631.656366][ C1] usb 4-1: async_complete: urb error -104 [ 631.668079][ C1] usb 4-1: async_complete: urb error -104 [ 631.668158][ C1] usb 4-1: async_complete: urb error -104 [ 631.669849][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 631.775964][ T8903] team0: Port device team_slave_0 added [ 631.932915][ T8903] team0: Port device team_slave_1 added [ 632.087969][ T8903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.087988][ T8903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.088015][ T8903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.158055][ T8903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.158070][ T8903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.158092][ T8903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.436271][ T7011] bridge_slave_1: left allmulticast mode [ 632.436307][ T7011] bridge_slave_1: left promiscuous mode [ 632.436578][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.567813][ T7011] bridge_slave_0: left allmulticast mode [ 632.567850][ T7011] bridge_slave_0: left promiscuous mode [ 632.568230][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.985456][ T8493] usb 4-1: USB disconnect, device number 37 [ 633.045985][ T7011] bridge_slave_1: left allmulticast mode [ 633.046023][ T7011] bridge_slave_1: left promiscuous mode [ 633.046198][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.552585][ T7011] bridge_slave_0: left allmulticast mode [ 634.552624][ T7011] bridge_slave_0: left promiscuous mode [ 634.552873][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.833669][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 634.900515][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 634.902122][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 634.903970][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 634.936064][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 636.076389][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.136519][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.159857][ T7011] bond0 (unregistering): Released all slaves [ 636.706368][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.826485][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.893959][ T7011] bond0 (unregistering): Released all slaves [ 636.934067][ T9086] 9p: Could not find request transport: fd0x0000000000000004 [ 637.074149][ T5605] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 637.090579][ T5605] Bluetooth: hci5: command tx timeout [ 637.355487][ T5719] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 637.563418][ T8903] hsr_slave_0: entered promiscuous mode [ 637.564640][ T8903] hsr_slave_1: entered promiscuous mode [ 637.574936][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 637.583725][ T5719] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 637.584422][ T8903] debugfs: 'hsr0' already exists in 'hsr' [ 637.584447][ T8903] Cannot create hsr debugfs directory [ 637.614532][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.649311][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.649342][ T5719] usb 4-1: Product: syz [ 637.649358][ T5719] usb 4-1: Manufacturer: syz [ 637.649374][ T5719] usb 4-1: SerialNumber: syz [ 637.734481][ T5719] usb 4-1: config 0 descriptor?? [ 637.761075][ T5719] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 637.935664][ T7011] hsr_slave_0: left promiscuous mode [ 637.968488][ T5719] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 637.968744][ T5719] quatech2 4-1:0.0: probe with driver quatech2 failed with error -8 [ 638.012913][ T7011] hsr_slave_1: left promiscuous mode [ 638.013937][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.040150][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.199514][ T5725] usb 4-1: USB disconnect, device number 38 [ 638.285607][ T7011] hsr_slave_0: left promiscuous mode [ 638.332921][ T7011] hsr_slave_1: left promiscuous mode [ 638.333942][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.376429][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.033627][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 639.087214][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 639.165495][ T5605] Bluetooth: hci5: command tx timeout [ 639.626294][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 639.686204][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 640.433335][ T9117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.433442][ T9117] IPv6: NLM_F_CREATE should be set when creating new route [ 641.245711][ T5605] Bluetooth: hci5: command tx timeout [ 643.325469][ T5605] Bluetooth: hci5: command tx timeout [ 643.780771][ T9144] 9p: Could not find request transport: fd0x0000000000000004 [ 645.557632][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.557841][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.558035][ T9078] bridge_slave_0: entered allmulticast mode [ 645.573913][ T9078] bridge_slave_0: entered promiscuous mode [ 645.630932][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.631058][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.631237][ T9078] bridge_slave_1: entered allmulticast mode [ 645.648609][ T9078] bridge_slave_1: entered promiscuous mode [ 645.870170][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.883901][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.873839][ T9078] team0: Port device team_slave_0 added [ 648.589783][ T9078] team0: Port device team_slave_1 added [ 648.590110][ T8762] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 648.702151][ T8762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.767907][ T8762] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 648.818910][ T8762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.986332][ T8762] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 649.071832][ T8762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.098505][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.098519][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.098539][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.101023][ T8762] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 650.753537][ T8762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.764110][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.764127][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.764160][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.572817][ T9078] hsr_slave_0: entered promiscuous mode [ 651.573898][ T9078] hsr_slave_1: entered promiscuous mode [ 651.574580][ T9078] debugfs: 'hsr0' already exists in 'hsr' [ 651.574598][ T9078] Cannot create hsr debugfs directory [ 651.674069][ T9192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.674176][ T9192] IPv6: NLM_F_CREATE should be set when creating new route [ 652.866531][ T9198] 9p: Could not find request transport: fd0x0000000000000004 [ 654.667626][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 654.668437][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 655.101473][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.307491][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.332979][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.333234][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.352654][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.352904][ T7016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.284127][ T8798] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 656.419042][ T8798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.610455][ T8798] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 656.715900][ T8798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.719200][ T8798] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 656.800791][ T9229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.800897][ T9229] IPv6: NLM_F_CREATE should be set when creating new route [ 657.487534][ T8798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.769266][ T8798] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 657.821246][ T8798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.415702][ T7011] bridge_slave_1: left allmulticast mode [ 658.415782][ T7011] bridge_slave_1: left promiscuous mode [ 658.416043][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.529792][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 658.569860][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 658.571332][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 658.573730][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 658.574355][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 658.765532][ T7011] bridge_slave_0: left allmulticast mode [ 658.765567][ T7011] bridge_slave_0: left promiscuous mode [ 658.765812][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.838442][ T9255] 9pnet_fd: Insufficient options for proto=fd [ 660.846575][ T5601] Bluetooth: hci1: command tx timeout [ 660.938910][ T7011] bridge_slave_1: left allmulticast mode [ 660.938948][ T7011] bridge_slave_1: left promiscuous mode [ 660.939224][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.096838][ T7011] bridge_slave_0: left allmulticast mode [ 661.096865][ T7011] bridge_slave_0: left promiscuous mode [ 661.097084][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.546237][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.632093][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.679797][ T7011] bond0 (unregistering): Released all slaves [ 663.521013][ T5601] Bluetooth: hci1: command tx timeout [ 664.530614][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.572992][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.582708][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 664.602358][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 664.604403][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 665.994741][ T5601] Bluetooth: hci1: command tx timeout [ 666.186316][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.306480][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.389690][ T7011] bond0 (unregistering): Released all slaves [ 666.808923][ T5601] Bluetooth: hci2: command tx timeout [ 667.689952][ T7011] hsr_slave_0: left promiscuous mode [ 667.725609][ T7011] hsr_slave_1: left promiscuous mode [ 667.726686][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.782240][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.955573][ T7011] hsr_slave_0: left promiscuous mode [ 668.007527][ T7011] hsr_slave_1: left promiscuous mode [ 668.008403][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.046482][ T5601] Bluetooth: hci1: command tx timeout [ 668.047553][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.678756][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 668.756258][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 668.845493][ T5601] Bluetooth: hci2: command tx timeout [ 669.496283][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 669.557702][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 670.937279][ T5601] Bluetooth: hci2: command tx timeout [ 673.032870][ T5601] Bluetooth: hci2: command tx timeout [ 673.392429][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.394048][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.394218][ T9272] bridge_slave_0: entered allmulticast mode [ 673.417954][ T9272] bridge_slave_0: entered promiscuous mode [ 673.446383][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.446510][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.446737][ T9272] bridge_slave_1: entered allmulticast mode [ 673.449650][ T9272] bridge_slave_1: entered promiscuous mode [ 673.673283][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.673382][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.673580][ T9251] bridge_slave_0: entered allmulticast mode [ 673.680384][ T9251] bridge_slave_0: entered promiscuous mode [ 673.740890][ T9272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.741130][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.741225][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.741395][ T9251] bridge_slave_1: entered allmulticast mode [ 673.782623][ T9251] bridge_slave_1: entered promiscuous mode [ 673.806990][ T8903] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 673.848013][ T8903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.878158][ T9272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.273112][ T8903] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 674.310425][ T8903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.434614][ T8903] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 674.470765][ T8903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.550459][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.609892][ T8903] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 674.640270][ T8903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.656098][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.658925][ T9272] team0: Port device team_slave_0 added [ 674.972685][ T9272] team0: Port device team_slave_1 added [ 675.153677][ T9251] team0: Port device team_slave_0 added [ 675.210416][ T9251] team0: Port device team_slave_1 added [ 675.593746][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.593764][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.594086][ T9272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.756407][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.756427][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.756456][ T9272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.831484][ T9078] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 675.865273][ T9078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.942940][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.942959][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.942986][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.988287][ T9078] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 676.038513][ T9078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.083348][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.083368][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.083396][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.420826][ T9078] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 676.478560][ T9078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.639303][ T9078] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 676.748158][ T9078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 676.912949][ T9272] hsr_slave_0: entered promiscuous mode [ 676.922631][ T9272] hsr_slave_1: entered promiscuous mode [ 676.926619][ T9272] debugfs: 'hsr0' already exists in 'hsr' [ 676.926646][ T9272] Cannot create hsr debugfs directory [ 677.040393][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.079685][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.081053][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.103929][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.111028][ T9251] hsr_slave_0: entered promiscuous mode [ 677.114321][ T9251] hsr_slave_1: entered promiscuous mode [ 677.133372][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.296005][ T9251] debugfs: 'hsr0' already exists in 'hsr' [ 677.296034][ T9251] Cannot create hsr debugfs directory [ 679.247150][ T5601] Bluetooth: hci0: command tx timeout [ 680.909559][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 680.974453][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 681.004484][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.019129][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.022543][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 681.335688][ T5605] Bluetooth: hci0: command tx timeout [ 682.983520][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.133705][ T9078] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.165852][ T5605] Bluetooth: hci3: command tx timeout [ 683.384108][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.384259][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.409465][ T5605] Bluetooth: hci0: command tx timeout [ 683.557161][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.557252][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.582275][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.582393][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.582824][ T9343] bridge_slave_0: entered allmulticast mode [ 683.606975][ T9343] bridge_slave_0: entered promiscuous mode [ 683.633905][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.634083][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.634337][ T9343] bridge_slave_1: entered allmulticast mode [ 683.638844][ T9343] bridge_slave_1: entered promiscuous mode [ 683.780188][ T9343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.885773][ T7011] bridge_slave_1: left allmulticast mode [ 683.885813][ T7011] bridge_slave_1: left promiscuous mode [ 683.886040][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.017515][ T7011] bridge_slave_0: left allmulticast mode [ 684.017542][ T7011] bridge_slave_0: left promiscuous mode [ 684.017733][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.215761][ T7011] bridge_slave_1: left allmulticast mode [ 684.215791][ T7011] bridge_slave_1: left promiscuous mode [ 684.215982][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.356756][ T7011] bridge_slave_0: left allmulticast mode [ 684.356786][ T7011] bridge_slave_0: left promiscuous mode [ 684.357035][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.864129][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.937969][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.997264][ T7011] bond0 (unregistering): Released all slaves [ 685.245787][ T5605] Bluetooth: hci3: command tx timeout [ 685.485681][ T5605] Bluetooth: hci0: command tx timeout [ 685.558957][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.616075][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.659764][ T7011] bond0 (unregistering): Released all slaves [ 685.698553][ T9343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.889216][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.889288][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.100941][ T9343] team0: Port device team_slave_0 added [ 686.198553][ T9343] team0: Port device team_slave_1 added [ 686.399563][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.399582][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.399611][ T9343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.481621][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.481640][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.481670][ T9343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.686035][ T7011] hsr_slave_0: left promiscuous mode [ 686.705565][ T7011] hsr_slave_1: left promiscuous mode [ 686.706367][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.748756][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.885636][ T7011] hsr_slave_0: left promiscuous mode [ 686.926083][ T7011] hsr_slave_1: left promiscuous mode [ 686.927548][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.948866][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.326498][ T5605] Bluetooth: hci3: command tx timeout [ 687.476216][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 687.527037][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 688.027741][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 688.086308][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 688.567469][ T9343] hsr_slave_0: entered promiscuous mode [ 688.568824][ T9343] hsr_slave_1: entered promiscuous mode [ 688.569622][ T9343] debugfs: 'hsr0' already exists in 'hsr' [ 688.569642][ T9343] Cannot create hsr debugfs directory [ 689.027038][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.027215][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.027380][ T9385] bridge_slave_0: entered allmulticast mode [ 689.030611][ T9385] bridge_slave_0: entered promiscuous mode [ 689.059810][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.059938][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.060136][ T9385] bridge_slave_1: entered allmulticast mode [ 689.073084][ T9385] bridge_slave_1: entered promiscuous mode [ 689.316497][ T9385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.415850][ T5605] Bluetooth: hci3: command tx timeout [ 689.439814][ T9385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.743005][ T9385] team0: Port device team_slave_0 added [ 689.792592][ T9385] team0: Port device team_slave_1 added [ 689.851321][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.851339][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.851366][ T9385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.004402][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.004415][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.004436][ T9385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.440478][ T9385] hsr_slave_0: entered promiscuous mode [ 690.441938][ T9385] hsr_slave_1: entered promiscuous mode [ 690.442910][ T9385] debugfs: 'hsr0' already exists in 'hsr' [ 690.442953][ T9385] Cannot create hsr debugfs directory [ 690.443524][ T9272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 690.490464][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.494624][ T9272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 690.552224][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.580871][ T9272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 690.601674][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.667597][ T9272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 690.703524][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.775060][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.258624][ T9251] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 691.290046][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.333101][ T9251] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 691.388745][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.414169][ T9251] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 691.434053][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.453104][ T9251] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 691.501377][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.083848][ T7011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.589226][ T7011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.630039][ T9078] veth0_vlan: entered promiscuous mode [ 692.706494][ T9078] veth1_vlan: entered promiscuous mode [ 693.079918][ T7011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.349007][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.550641][ T7011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.617149][ T9272] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.641404][ T9078] veth0_macvtap: entered promiscuous mode [ 693.699070][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.699245][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.738337][ T9078] veth1_macvtap: entered promiscuous mode [ 693.763161][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.763260][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.787497][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.968155][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.016179][ T9251] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.044433][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.089208][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.089300][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.243473][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.243746][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.366166][ T7011] bridge_slave_1: left allmulticast mode [ 695.366193][ T7011] bridge_slave_1: left promiscuous mode [ 695.366383][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.476712][ T7011] bridge_slave_0: left allmulticast mode [ 695.476739][ T7011] bridge_slave_0: left promiscuous mode [ 695.477005][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.715746][ T7011] bridge_slave_1: left allmulticast mode [ 695.715775][ T7011] bridge_slave_1: left promiscuous mode [ 695.715961][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.859734][ T7011] bridge_slave_0: left allmulticast mode [ 695.860108][ T7011] bridge_slave_0: left promiscuous mode [ 695.860306][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.189634][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 696.194842][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 696.241494][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 696.243491][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 696.244295][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 697.206391][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.288076][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.308466][ T7011] bond0 (unregistering): Released all slaves [ 697.606311][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.696464][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.757600][ T7011] bond0 (unregistering): Released all slaves [ 698.095702][ T7011] ovs-system: left promiscuous mode [ 698.293860][ T9343] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 698.383292][ T9343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.492725][ T9343] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 698.525806][ T5601] Bluetooth: hci4: command tx timeout [ 698.571168][ T9343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.601524][ T9343] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 698.642339][ T9343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.743638][ T9343] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 698.802566][ T9343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.118071][ T9385] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 700.201040][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.291200][ T9385] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 700.318733][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.335556][ T9385] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 700.360218][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.375168][ T9385] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 700.420249][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.453202][ T9272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.605721][ T5601] Bluetooth: hci4: command tx timeout [ 700.667842][ T7011] hsr_slave_0: left promiscuous mode [ 700.705532][ T7011] hsr_slave_1: left promiscuous mode [ 700.706363][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.706384][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.750018][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.750052][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.905833][ T7011] hsr_slave_0: left promiscuous mode [ 700.946389][ T7011] hsr_slave_1: left promiscuous mode [ 700.947440][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.996500][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.059173][ T7011] veth1_macvtap: left promiscuous mode [ 701.059246][ T7011] veth0_macvtap: left promiscuous mode [ 701.059412][ T7011] veth1_vlan: left promiscuous mode [ 701.059547][ T7011] veth0_vlan: left promiscuous mode [ 702.048865][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 702.106884][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 702.685900][ T5605] Bluetooth: hci4: command tx timeout [ 702.706397][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 702.756178][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 703.940250][ T9343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.136886][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.199145][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.554677][ T9343] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.556060][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.556190][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.556405][ T9458] bridge_slave_0: entered allmulticast mode [ 704.562206][ T9458] bridge_slave_0: entered promiscuous mode [ 704.614861][ T9272] veth0_vlan: entered promiscuous mode [ 704.632257][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.632437][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.632639][ T9458] bridge_slave_1: entered allmulticast mode [ 704.664775][ T9458] bridge_slave_1: entered promiscuous mode [ 704.765588][ T5605] Bluetooth: hci4: command tx timeout [ 704.807132][ T9385] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.809234][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.809408][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.838885][ T5246] 8021q: adding VLAN 0 to HW filter on device eth15 [ 704.933181][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.961166][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.068036][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.068169][ T7016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.071051][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.071262][ T7016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.190002][ T9272] veth1_vlan: entered promiscuous mode [ 705.251553][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.251786][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.305257][ T9458] team0: Port device team_slave_0 added [ 705.332938][ T9458] team0: Port device team_slave_1 added [ 705.569669][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.569690][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.569727][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.661492][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.661510][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.661544][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.958819][ T9458] hsr_slave_0: entered promiscuous mode [ 705.960273][ T9458] hsr_slave_1: entered promiscuous mode [ 706.149789][ T7011] IPVS: stop unused estimator thread 0... [ 706.150393][ T9272] veth0_macvtap: entered promiscuous mode [ 706.336845][ T9272] veth1_macvtap: entered promiscuous mode [ 706.343670][ T9251] veth0_vlan: entered promiscuous mode [ 706.601530][ T9251] veth1_vlan: entered promiscuous mode [ 706.961206][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.061406][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.793481][ T9251] veth0_macvtap: entered promiscuous mode [ 707.871109][ T9251] veth1_macvtap: entered promiscuous mode [ 708.534510][ T5246] 8021q: adding VLAN 0 to HW filter on device eth16 [ 708.769655][ T7012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.769680][ T7012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.807243][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.213020][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.254107][ T9343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.272816][ T9385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.518954][ T7009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.518978][ T7009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.391217][ T7013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.391239][ T7013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.800934][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.800958][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.187784][ T9626] 9pnet_fd: Insufficient options for proto=fd [ 711.957593][ T7011] bridge_slave_1: left allmulticast mode [ 711.957619][ T7011] bridge_slave_1: left promiscuous mode [ 711.957807][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.106695][ T7011] bridge_slave_0: left allmulticast mode [ 712.106723][ T7011] bridge_slave_0: left promiscuous mode [ 712.106930][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.605465][ T5706] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 715.626120][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.707636][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.727793][ T7011] bond0 (unregistering): Released all slaves [ 715.755463][ T5706] usb 6-1: Using ep0 maxpacket: 32 [ 715.756363][ T5706] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 715.757607][ T5706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.760023][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.760048][ T5706] usb 6-1: Product: syz [ 715.760062][ T5706] usb 6-1: Manufacturer: syz [ 715.760077][ T5706] usb 6-1: SerialNumber: syz [ 715.764529][ T5706] usb 6-1: config 0 descriptor?? [ 715.829133][ T5706] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 715.848209][ T5246] 8021q: adding VLAN 0 to HW filter on device eth21 [ 715.976210][ T5706] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 715.976458][ T5706] quatech2 6-1:0.0: probe with driver quatech2 failed with error -8 [ 716.175091][ T5693] usb 6-1: USB disconnect, device number 2 [ 716.982644][ T9668] 9pnet_fd: Insufficient options for proto=fd [ 717.027896][ T9385] veth0_vlan: entered promiscuous mode [ 717.171521][ T9343] veth0_vlan: entered promiscuous mode [ 717.177741][ T9385] veth1_vlan: entered promiscuous mode [ 718.981495][ T5693] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 719.175462][ T5693] usb 7-1: Using ep0 maxpacket: 16 [ 719.176346][ T5693] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 719.177577][ T5693] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 719.177616][ T5693] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 719.177637][ T5693] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 719.177656][ T5693] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 719.177675][ T5693] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 719.177696][ T5693] usb 7-1: config 0 has no interface number 0 [ 719.177751][ T5693] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 719.177776][ T5693] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 719.177797][ T5693] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 719.177829][ T5693] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.179803][ T5693] usb 7-1: config 0 interface 125 has no altsetting 0 [ 719.179825][ T5693] usb 7-1: config 0 interface 125 has no altsetting 2 [ 719.183465][ T5693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.183490][ T5693] usb 7-1: Product: syz [ 719.183504][ T5693] usb 7-1: Manufacturer: syz [ 719.183519][ T5693] usb 7-1: SerialNumber: syz [ 719.229317][ T7011] hsr_slave_0: left promiscuous mode [ 719.354676][ T5693] usb 7-1: config 0 descriptor?? [ 719.366205][ T5693] usb 7-1: selecting invalid altsetting 2 [ 719.404296][ T7011] hsr_slave_1: left promiscuous mode [ 719.407791][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.407837][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.458363][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.458389][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.626041][ T7011] veth1_macvtap: left promiscuous mode [ 719.626167][ T7011] veth0_macvtap: left promiscuous mode [ 719.626437][ T7011] veth1_vlan: left promiscuous mode [ 719.626633][ T7011] veth0_vlan: left promiscuous mode [ 720.267531][ T9693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.268163][ T9693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.140481][ T5693] get_1284_register timeout [ 721.140649][ C1] usb 7-1: async_complete: urb error -104 [ 721.140753][ C1] usb 7-1: async_complete: urb error -104 [ 721.140844][ C1] usb 7-1: async_complete: urb error -104 [ 721.702073][ T9702] FAULT_INJECTION: forcing a failure. [ 721.702073][ T9702] name fail_futex, interval 1, probability 0, space 0, times 1 [ 721.702139][ T9702] CPU: 0 UID: 0 PID: 9702 Comm: syz.5.579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 721.702165][ T9702] Tainted: [L]=SOFTLOCKUP [ 721.702171][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 721.702183][ T9702] Call Trace: [ 721.702189][ T9702] [ 721.702197][ T9702] dump_stack_lvl+0xe8/0x150 [ 721.702228][ T9702] should_fail_ex+0x467/0x600 [ 721.702259][ T9702] get_futex_key+0xf11/0x1580 [ 721.702287][ T9702] ? __asan_memset+0x22/0x50 [ 721.702314][ T9702] ? __pfx_get_futex_key+0x10/0x10 [ 721.702330][ T9702] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 721.702358][ T9702] ? hrtimer_setup_sleeper_on_stack+0xb5/0x110 [ 721.702383][ T9702] ? ktime_add_safe+0x38/0x70 [ 721.702407][ T9702] futex_lock_pi+0x25f/0xac0 [ 721.702440][ T9702] ? __pfx_futex_lock_pi+0x10/0x10 [ 721.702468][ T9702] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 721.702492][ T9702] ? __lock_acquire+0x683/0x2ce0 [ 721.702521][ T9702] ? get_pid_task+0x20/0x1f0 [ 721.702544][ T9702] ? get_pid_task+0x20/0x1f0 [ 721.702570][ T9702] ? __pfx_futex_wake_mark+0x10/0x10 [ 721.702615][ T9702] do_futex+0x330/0x4e0 [ 721.702640][ T9702] ? __pfx_do_futex+0x10/0x10 [ 721.702660][ T9702] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 721.702694][ T9702] __se_sys_futex+0x3a8/0x450 [ 721.702721][ T9702] ? __pfx___se_sys_futex+0x10/0x10 [ 721.702742][ T9702] ? __pfx_ksys_write+0x10/0x10 [ 721.702768][ T9702] ? __x64_sys_futex+0x21/0xf0 [ 721.702798][ T9702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.702817][ T9702] do_syscall_64+0x174/0x580 [ 721.702838][ T9702] ? trace_irq_disable+0x3b/0x140 [ 721.702865][ T9702] ? clear_bhb_loop+0x70/0xc0 [ 721.702887][ T9702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.702905][ T9702] RIP: 0033:0x7f88ad38e0d9 [ 721.702922][ T9702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.702938][ T9702] RSP: 002b:00007f88ab5e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 721.702958][ T9702] RAX: ffffffffffffffda RBX: 00007f88ad615fa0 RCX: 00007f88ad38e0d9 [ 721.702971][ T9702] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 721.702982][ T9702] RBP: 00007f88ab5e6090 R08: 0000000000000000 R09: 0000000000000002 [ 721.702992][ T9702] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.703003][ T9702] R13: 00007f88ad616038 R14: 00007f88ad615fa0 R15: 00007fffcfb8cd48 [ 721.703030][ T9702] [ 722.281899][ T5598] usb 7-1: USB disconnect, device number 2 [ 722.420609][ T9247] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 722.631985][ T9247] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 722.671808][ T9247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.671839][ T9247] usb 6-1: Product: syz [ 722.671862][ T9247] usb 6-1: Manufacturer: syz [ 722.671878][ T9247] usb 6-1: SerialNumber: syz [ 722.831518][ T9247] usb 6-1: config 0 descriptor?? [ 723.046744][ T9247] usb 6-1: ignoring: probably an ADSL modem [ 723.258863][ T9247] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 723.290880][ T9247] usb 6-1: USB disconnect, device number 3 [ 724.015779][ T9710] 9pnet_fd: Insufficient options for proto=fd [ 725.907025][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 725.996839][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 726.360394][ T9343] veth1_vlan: entered promiscuous mode [ 727.362256][ T9385] veth0_macvtap: entered promiscuous mode [ 727.392155][ T9385] veth1_macvtap: entered promiscuous mode [ 727.543204][ T9343] veth0_macvtap: entered promiscuous mode [ 727.664623][ T9343] veth1_macvtap: entered promiscuous mode [ 727.699791][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.880877][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.959127][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.066311][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.105464][ T5598] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 728.376441][ T5598] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 728.378091][ T5598] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 728.378148][ T5598] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 728.378172][ T5598] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 728.378195][ T5598] usb 6-1: config 1 interface 0 has no altsetting 0 [ 728.378239][ T5598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.458312][ T5598] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 728.679826][ T5598] scsi host1: usb-storage 6-1:1.0 [ 729.912024][ T7018] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 730.751067][ T8492] usb 6-1: USB disconnect, device number 4 [ 731.216842][ T7018] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 731.290241][ T7016] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 731.291113][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.291130][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.292778][ T7016] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 731.292899][ T7016] sd 1:0:0:0: [sdb] Sense not available. [ 731.293264][ T7016] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 731.293303][ T7016] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 731.293441][ T7016] sd 1:0:0:0: [sdb] Write Protect is off [ 731.384394][ T7016] sd 1:0:0:0: [sdb] Asking for cache data failed [ 731.384463][ T7016] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 731.838601][ T7009] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.842113][ T7009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.842135][ T7009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.842560][ T7009] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.844649][ T7009] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.845142][ T7009] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.850617][ T7009] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.873995][ T7009] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.879317][ T7009] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.884137][ T7009] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.895203][ T7009] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.993978][ T7016] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 732.448453][ T7013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.448473][ T7013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.535604][ T7008] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.662942][ T7013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.663273][ T7013] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.919100][ T9458] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 732.983924][ T9458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 733.011566][ T9458] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 733.168121][ T9458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 733.172036][ T7013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.172057][ T7013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.173775][ T9458] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 733.317632][ T9458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.327222][ T9458] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 733.505840][ T9458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.795535][ T8492] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 733.945440][ T8492] usb 6-1: Using ep0 maxpacket: 16 [ 733.946127][ T8492] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 733.947353][ T8492] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 733.947380][ T8492] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 733.947402][ T8492] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 733.947422][ T8492] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 733.947443][ T8492] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 733.947464][ T8492] usb 6-1: config 0 has no interface number 0 [ 733.947511][ T8492] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 733.947538][ T8492] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 733.947560][ T8492] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 733.947597][ T8492] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 733.947625][ T8492] usb 6-1: config 0 interface 125 has no altsetting 0 [ 733.947643][ T8492] usb 6-1: config 0 interface 125 has no altsetting 2 [ 734.084071][ T8492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.084099][ T8492] usb 6-1: Product: syz [ 734.084114][ T8492] usb 6-1: Manufacturer: syz [ 734.084128][ T8492] usb 6-1: SerialNumber: syz [ 734.124727][ T8492] usb 6-1: config 0 descriptor?? [ 734.135126][ T8492] usb 6-1: selecting invalid altsetting 2 [ 734.190682][ T90] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.301567][ C0] usb 6-1: async_complete: urb error -71 [ 734.301674][ C0] usb 6-1: async_complete: urb error -71 [ 734.301772][ C0] usb 6-1: async_complete: urb error -71 [ 734.301861][ C0] usb 6-1: async_complete: urb error -71 [ 734.305156][ T8492] get_1284_register: usb error -71 [ 734.362363][ T8492] usb 6-1: USB disconnect, device number 5 [ 734.485774][ T7008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.588186][ T9794] comedi comedi1: Minor 47 could not be opened [ 734.609518][ T9795] usb usb8: usbfs: process 9795 (syz.9.589) did not claim interface 0 before use [ 734.679072][ T7019] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.111608][ T9458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.231936][ T9458] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.246566][ T42] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.362772][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.362913][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.423912][ T9812] 9pnet_fd: Insufficient options for proto=fd [ 735.469516][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.469705][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.976502][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.595'. [ 735.983633][ T9820] smc: net device lo applied user defined pnetid SYZ0 [ 737.355443][ T5832] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 737.446671][ T9719] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 737.515400][ T5832] usb 10-1: Using ep0 maxpacket: 16 [ 737.521267][ T5832] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 737.522633][ T5832] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 737.522663][ T5832] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 737.522686][ T5832] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 737.522709][ T5832] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 737.522731][ T5832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 737.522755][ T5832] usb 10-1: config 0 has no interface number 0 [ 737.522822][ T5832] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 737.522851][ T5832] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 737.522875][ T5832] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 737.522915][ T5832] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 737.522944][ T5832] usb 10-1: config 0 interface 125 has no altsetting 0 [ 737.522962][ T5832] usb 10-1: config 0 interface 125 has no altsetting 2 [ 737.645593][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.645621][ T5832] usb 10-1: Product: syz [ 737.645638][ T5832] usb 10-1: Manufacturer: syz [ 737.645653][ T5832] usb 10-1: SerialNumber: syz [ 737.701047][ T5832] usb 10-1: config 0 descriptor?? [ 737.742361][ T5832] usb 10-1: selecting invalid altsetting 2 [ 737.766690][ T9719] usb 6-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 737.768513][ T9719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.768538][ T9719] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 737.768652][ T9719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.543971][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.9.597'. [ 738.563475][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.568833][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.240708][ T5832] get_1284_register timeout [ 739.255859][ C0] usb 10-1: async_complete: urb error -104 [ 739.255949][ C0] usb 10-1: async_complete: urb error -104 [ 739.256020][ C0] usb 10-1: async_complete: urb error -104 [ 739.792880][ T43] usb 6-1: USB disconnect, device number 6 [ 739.882770][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.932666][ T5246] 8021q: adding VLAN 0 to HW filter on device eth13 [ 740.229955][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 740.311030][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 740.312492][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 740.339397][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 740.343913][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.591984][ T9784] usb 10-1: USB disconnect, device number 2 [ 741.081653][ T9885] FAULT_INJECTION: forcing a failure. [ 741.081653][ T9885] name failslab, interval 1, probability 0, space 0, times 0 [ 741.081694][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.5.601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 741.081723][ T9885] Tainted: [L]=SOFTLOCKUP [ 741.081730][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.081742][ T9885] Call Trace: [ 741.081750][ T9885] [ 741.081759][ T9885] dump_stack_lvl+0xe8/0x150 [ 741.081796][ T9885] should_fail_ex+0x467/0x600 [ 741.081846][ T9885] should_failslab+0xa8/0x100 [ 741.081874][ T9885] kmem_cache_alloc_noprof+0xa4/0x650 [ 741.081910][ T9885] ? skb_clone+0x212/0x3a0 [ 741.081938][ T9885] ? skb_clone+0x212/0x3a0 [ 741.081975][ T9885] skb_clone+0x212/0x3a0 [ 741.082001][ T9885] ? raw6_local_deliver+0x57f/0x8e0 [ 741.082036][ T9885] raw6_local_deliver+0x593/0x8e0 [ 741.082066][ T9885] ? raw6_local_deliver+0xfa/0x8e0 [ 741.082099][ T9885] ip6_protocol_deliver_rcu+0x41d/0x1680 [ 741.082162][ T9885] ip6_input_finish+0x191/0x370 [ 741.082196][ T9885] NF_HOOK+0x336/0x3c0 [ 741.082226][ T9885] ? __pfx_ip6_input_finish+0x10/0x10 [ 741.082254][ T9885] ? NF_HOOK+0x9e/0x3c0 [ 741.082279][ T9885] ? __pfx_NF_HOOK+0x10/0x10 [ 741.082308][ T9885] ? __pfx_ip6_input_finish+0x10/0x10 [ 741.082338][ T9885] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 741.082382][ T9885] ip6_input+0x16a/0x270 [ 741.082407][ T9885] ? ip6_input+0x23/0x270 [ 741.082436][ T9885] ip6_mc_input+0x64d/0xbc0 [ 741.082471][ T9885] ? __pfx_ip6_mc_input+0x10/0x10 [ 741.082507][ T9885] ? ip6_rcv_finish+0x265/0x280 [ 741.082537][ T9885] NF_HOOK+0x336/0x3c0 [ 741.082563][ T9885] ? __pfx_sock_wfree+0x10/0x10 [ 741.082593][ T9885] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 741.082620][ T9885] ? NF_HOOK+0x9e/0x3c0 [ 741.082645][ T9885] ? __pfx_NF_HOOK+0x10/0x10 [ 741.082668][ T9885] ? ip6_rcv_core+0xa1/0x1870 [ 741.082698][ T9885] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 741.082732][ T9885] ? netif_receive_skb+0x102/0xbf0 [ 741.082768][ T9885] netif_receive_skb+0x278/0xbf0 [ 741.082818][ T9885] ? __pfx_netif_receive_skb+0x10/0x10 [ 741.082853][ T9885] ? rcu_is_watching+0x15/0xb0 [ 741.082878][ T9885] ? __local_bh_disable_ip+0x3c/0x420 [ 741.082908][ T9885] ? tun_rx_batched+0x194/0x760 [ 741.082942][ T9885] ? tun_rx_batched+0x194/0x760 [ 741.082979][ T9885] tun_rx_batched+0x1f1/0x760 [ 741.083018][ T9885] ? rcu_is_watching+0x15/0xb0 [ 741.083046][ T9885] ? __pfx_tun_rx_batched+0x10/0x10 [ 741.083102][ T9885] ? tun_get_user+0x26f8/0x4380 [ 741.083137][ T9885] ? tun_get_user+0x26f8/0x4380 [ 741.083171][ T9885] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 741.083197][ T9885] ? lockdep_hardirqs_on+0x7a/0x110 [ 741.083229][ T9885] tun_get_user+0x2b3b/0x4380 [ 741.083259][ T9885] ? is_bpf_text_address+0x292/0x2b0 [ 741.083288][ T9885] ? tun_get_user+0x26f8/0x4380 [ 741.083343][ T9885] ? __pfx_tun_get_user+0x10/0x10 [ 741.083380][ T9885] ? __lock_acquire+0x683/0x2ce0 [ 741.083419][ T9885] ? ref_tracker_alloc+0x353/0x4c0 [ 741.083452][ T9885] ? get_pid_task+0x20/0x1f0 [ 741.083485][ T9885] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 741.083521][ T9885] ? tun_get+0x1c/0x2f0 [ 741.083555][ T9885] ? tun_get+0x1c/0x2f0 [ 741.083595][ T9885] ? tun_get+0x1c/0x2f0 [ 741.083627][ T9885] ? tun_get+0x1c/0x2f0 [ 741.083665][ T9885] tun_chr_write_iter+0x119/0x200 [ 741.083703][ T9885] vfs_write+0x61e/0xbb0 [ 741.083741][ T9885] ? __pfx_vfs_write+0x10/0x10 [ 741.083780][ T9885] ? __fget_files+0x2a/0x420 [ 741.083820][ T9885] ksys_write+0x156/0x270 [ 741.083850][ T9885] ? __pfx_ksys_write+0x10/0x10 [ 741.083886][ T9885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.083910][ T9885] do_syscall_64+0x174/0x580 [ 741.083935][ T9885] ? trace_irq_disable+0x3b/0x140 [ 741.083968][ T9885] ? clear_bhb_loop+0x70/0xc0 [ 741.083994][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.084015][ T9885] RIP: 0033:0x7f88ad34e90e [ 741.084036][ T9885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 741.084054][ T9885] RSP: 002b:00007f88ab5c4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 741.084077][ T9885] RAX: ffffffffffffffda RBX: 00007f88ab5c56c0 RCX: 00007f88ad34e90e [ 741.084093][ T9885] RDX: 000000000000004e RSI: 0000200000002e40 RDI: 00000000000000c8 [ 741.084107][ T9885] RBP: 00007f88ab5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 741.084119][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.084131][ T9885] R13: 00007f88ad616128 R14: 00007f88ad616090 R15: 00007fffcfb8cd48 [ 741.084166][ T9885] [ 741.732618][ T9887] 9pnet_fd: Insufficient options for proto=fd [ 742.515514][ T9247] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 742.538706][ T5605] Bluetooth: hci5: command tx timeout [ 742.539210][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.607'. [ 742.539228][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.607'. [ 742.539252][ T9907] netlink: 'syz.7.607': attribute type 7 has an invalid length. [ 742.676299][ T9247] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 742.677874][ T9247] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.683622][ T9247] usb 10-1: config 0 descriptor?? [ 742.721240][ T9247] cp210x 10-1:0.0: cp210x converter detected [ 745.725757][ T5605] Bluetooth: hci5: command tx timeout [ 745.958578][ T9247] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 745.959379][ T9247] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 745.959438][ T9247] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 746.007423][ T9247] usb 10-1: cp210x converter now attached to ttyUSB0 [ 746.132156][ T9247] usb 10-1: USB disconnect, device number 3 [ 746.158314][ T9247] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 746.159116][ T9247] cp210x 10-1:0.0: device disconnected [ 746.653667][ T42] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.742854][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.742931][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.749987][ T5605] Bluetooth: hci5: command tx timeout [ 749.583666][ T9940] gretap1: entered allmulticast mode [ 751.057774][ T5605] Bluetooth: hci5: command tx timeout [ 751.963297][ T42] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.417775][ T9955] FAULT_INJECTION: forcing a failure. [ 752.417775][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 752.417813][ T9955] CPU: 0 UID: 0 PID: 9955 Comm: syz.5.611 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 752.417842][ T9955] Tainted: [L]=SOFTLOCKUP [ 752.417850][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 752.417863][ T9955] Call Trace: [ 752.417871][ T9955] [ 752.417881][ T9955] dump_stack_lvl+0xe8/0x150 [ 752.417920][ T9955] should_fail_ex+0x467/0x600 [ 752.417960][ T9955] should_failslab+0xa8/0x100 [ 752.417988][ T9955] __kmalloc_cache_noprof+0xa0/0x6b0 [ 752.418015][ T9955] ? blocking_notifier_call_chain+0x54/0x90 [ 752.418045][ T9955] ? cryptomgr_notify+0x85/0x920 [ 752.418077][ T9955] ? cryptomgr_notify+0x85/0x920 [ 752.418118][ T9955] cryptomgr_notify+0x85/0x920 [ 752.418171][ T9955] notifier_call_chain+0x1a5/0x3d0 [ 752.418213][ T9955] blocking_notifier_call_chain+0x6a/0x90 [ 752.418248][ T9955] crypto_alg_mod_lookup+0x390/0x5d0 [ 752.418284][ T9955] crypto_alloc_tfm_node+0x135/0x3e0 [ 752.418325][ T9955] software_key_query+0x3ca/0xe20 [ 752.418367][ T9955] ? __pfx_software_key_query+0x10/0x10 [ 752.418397][ T9955] ? __might_fault+0xaf/0x130 [ 752.418443][ T9955] keyctl_pkey_params_get_2+0x23d/0x4b0 [ 752.418480][ T9955] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 752.418517][ T9955] ? __lock_acquire+0x683/0x2ce0 [ 752.418553][ T9955] keyctl_pkey_e_d_s+0xce/0x310 [ 752.418589][ T9955] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 752.418624][ T9955] ? do_raw_spin_lock+0x12b/0x2f0 [ 752.418667][ T9955] __se_sys_keyctl+0x494/0x9d0 [ 752.418695][ T9955] ? __pfx___se_sys_keyctl+0x10/0x10 [ 752.418716][ T9955] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 752.418746][ T9955] ? rt_mutex_slowunlock+0x219/0x460 [ 752.418781][ T9955] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 752.418811][ T9955] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 752.418857][ T9955] ? fput+0xa0/0xd0 [ 752.418890][ T9955] ? ksys_write+0x248/0x270 [ 752.418921][ T9955] ? __pfx_ksys_write+0x10/0x10 [ 752.418966][ T9955] ? __x64_sys_keyctl+0x20/0xc0 [ 752.419007][ T9955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.419032][ T9955] do_syscall_64+0x174/0x580 [ 752.419059][ T9955] ? trace_irq_disable+0x3b/0x140 [ 752.419093][ T9955] ? clear_bhb_loop+0x70/0xc0 [ 752.419122][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.419145][ T9955] RIP: 0033:0x7f88ad38e0d9 [ 752.419175][ T9955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.419193][ T9955] RSP: 002b:00007f88ab5e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 752.419216][ T9955] RAX: ffffffffffffffda RBX: 00007f88ad615fa0 RCX: 00007f88ad38e0d9 [ 752.419232][ T9955] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 000000000000001b [ 752.419246][ T9955] RBP: 00007f88ab5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 752.419259][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.419271][ T9955] R13: 00007f88ad616038 R14: 00007f88ad615fa0 R15: 00007fffcfb8cd48 [ 752.419306][ T9955] [ 753.210242][ T42] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.544357][ T9458] veth0_vlan: entered promiscuous mode [ 753.712417][ T9966] Bluetooth: MGMT ver 1.23 [ 753.716800][ T9966] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 753.729437][ T9966] FAULT_INJECTION: forcing a failure. [ 753.729437][ T9966] name failslab, interval 1, probability 0, space 0, times 0 [ 753.729474][ T9966] CPU: 0 UID: 0 PID: 9966 Comm: syz.9.621 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 753.729504][ T9966] Tainted: [L]=SOFTLOCKUP [ 753.729511][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.729524][ T9966] Call Trace: [ 753.729532][ T9966] [ 753.729542][ T9966] dump_stack_lvl+0xe8/0x150 [ 753.729580][ T9966] should_fail_ex+0x467/0x600 [ 753.729621][ T9966] should_failslab+0xa8/0x100 [ 753.729648][ T9966] kmem_cache_alloc_node_noprof+0xae/0x670 [ 753.729686][ T9966] ? __alloc_skb+0x1d7/0x7a0 [ 753.729709][ T9966] ? __alloc_skb+0x1d7/0x7a0 [ 753.729740][ T9966] __alloc_skb+0x1d7/0x7a0 [ 753.729769][ T9966] mgmt_cmd_status+0x42/0x570 [ 753.729810][ T9966] hci_mgmt_cmd+0xa2c/0xfc0 [ 753.729841][ T9966] ? mutex_lock_nested+0x152/0x1d0 [ 753.729884][ T9966] hci_sock_sendmsg+0x6e1/0xf50 [ 753.729927][ T9966] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 753.729967][ T9966] ? get_pid_task+0x20/0x1f0 [ 753.730000][ T9966] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 753.730032][ T9966] sock_sendmsg_nosec+0x13a/0x180 [ 753.730072][ T9966] sock_write_iter+0x2e4/0x3f0 [ 753.730115][ T9966] ? __pfx_sock_write_iter+0x10/0x10 [ 753.730156][ T9966] ? bpf_lsm_file_permission+0x9/0x20 [ 753.730187][ T9966] ? security_file_permission+0x75/0x260 [ 753.730221][ T9966] vfs_write+0x61e/0xbb0 [ 753.730258][ T9966] ? __pfx_vfs_write+0x10/0x10 [ 753.730297][ T9966] ? __fget_files+0x2a/0x420 [ 753.730330][ T9966] ksys_write+0x156/0x270 [ 753.730359][ T9966] ? __pfx_ksys_write+0x10/0x10 [ 753.730396][ T9966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.730421][ T9966] do_syscall_64+0x174/0x580 [ 753.730448][ T9966] ? trace_irq_disable+0x3b/0x140 [ 753.730483][ T9966] ? clear_bhb_loop+0x70/0xc0 [ 753.730511][ T9966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.730534][ T9966] RIP: 0033:0x7fed7b95e0d9 [ 753.730556][ T9966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.730575][ T9966] RSP: 002b:00007fed79bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 753.730599][ T9966] RAX: ffffffffffffffda RBX: 00007fed7bbe5fa0 RCX: 00007fed7b95e0d9 [ 753.730615][ T9966] RDX: 0000000000000017 RSI: 0000200000000000 RDI: 0000000000000004 [ 753.730628][ T9966] RBP: 00007fed79bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 753.730641][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.730652][ T9966] R13: 00007fed7bbe6038 R14: 00007fed7bbe5fa0 R15: 00007ffeb6687b08 [ 753.730688][ T9966] [ 753.945463][ T5706] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 754.125452][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 754.126420][ T5706] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 754.127674][ T5706] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 754.127701][ T5706] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 754.127722][ T5706] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 754.127744][ T5706] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 754.127764][ T5706] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 754.127787][ T5706] usb 6-1: config 0 has no interface number 0 [ 754.127834][ T5706] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 754.127865][ T5706] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 754.127887][ T5706] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 754.127925][ T5706] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.127953][ T5706] usb 6-1: config 0 interface 125 has no altsetting 0 [ 754.127973][ T5706] usb 6-1: config 0 interface 125 has no altsetting 2 [ 754.130429][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.130455][ T5706] usb 6-1: Product: syz [ 754.130471][ T5706] usb 6-1: Manufacturer: syz [ 754.130486][ T5706] usb 6-1: SerialNumber: syz [ 754.131580][ T9968] FAULT_INJECTION: forcing a failure. [ 754.131580][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 754.131616][ T9968] CPU: 0 UID: 0 PID: 9968 Comm: syz.9.627 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 754.131647][ T9968] Tainted: [L]=SOFTLOCKUP [ 754.131655][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.131668][ T9968] Call Trace: [ 754.131676][ T9968] [ 754.131685][ T9968] dump_stack_lvl+0xe8/0x150 [ 754.131724][ T9968] should_fail_ex+0x467/0x600 [ 754.131762][ T9968] should_failslab+0xa8/0x100 [ 754.131789][ T9968] kmem_cache_alloc_node_noprof+0xae/0x670 [ 754.131827][ T9968] ? __alloc_skb+0x1d7/0x7a0 [ 754.131851][ T9968] ? __alloc_skb+0x1d7/0x7a0 [ 754.131881][ T9968] __alloc_skb+0x1d7/0x7a0 [ 754.131909][ T9968] netlink_ack+0x136/0xb30 [ 754.131944][ T9968] ? irqentry_exit+0x218/0x8f0 [ 754.131981][ T9968] netlink_rcv_skb+0x2a4/0x4a0 [ 754.132010][ T9968] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 754.132039][ T9968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 754.132083][ T9968] ? bpf_lsm_capable+0x9/0x20 [ 754.132105][ T9968] ? security_capable+0x7e/0x2c0 [ 754.132139][ T9968] nfnetlink_rcv+0x2b9/0x28d0 [ 754.132162][ T9968] ? __local_bh_enable+0x1e1/0x2f0 [ 754.132195][ T9968] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 754.132220][ T9968] ? lockdep_hardirqs_on+0x7a/0x110 [ 754.132248][ T9968] ? __dev_queue_xmit+0x294/0x3880 [ 754.132281][ T9968] ? __dev_queue_xmit+0x1ee9/0x3880 [ 754.132321][ T9968] ? __dev_queue_xmit+0x294/0x3880 [ 754.132355][ T9968] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 754.132379][ T9968] ? __lock_acquire+0x683/0x2ce0 [ 754.132404][ T9968] ? __pfx___dev_queue_xmit+0x10/0x10 [ 754.132443][ T9968] ? ref_tracker_free+0x668/0x820 [ 754.132482][ T9968] ? __pfx_ref_tracker_free+0x10/0x10 [ 754.132527][ T9968] ? do_raw_spin_lock+0x12b/0x2f0 [ 754.132570][ T9968] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 754.132598][ T9968] ? lockdep_hardirqs_on+0x7a/0x110 [ 754.132625][ T9968] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 754.132652][ T9968] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 754.132710][ T9968] netlink_unicast+0x7f5/0x990 [ 754.132747][ T9968] netlink_sendmsg+0x813/0xb40 [ 754.132786][ T9968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.132817][ T9968] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 754.132849][ T9968] ? __kernel_text_address+0xd/0x30 [ 754.132883][ T9968] ? unwind_get_return_address+0x4d/0x90 [ 754.132909][ T9968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.132936][ T9968] sock_sendmsg_nosec+0x13a/0x180 [ 754.132974][ T9968] ____sys_sendmsg+0x565/0x870 [ 754.133001][ T9968] ? __might_fault+0xaf/0x130 [ 754.133031][ T9968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.133070][ T9968] ? import_iovec+0x73/0xa0 [ 754.133099][ T9968] ___sys_sendmsg+0x2a5/0x360 [ 754.133125][ T9968] ? __lock_acquire+0x683/0x2ce0 [ 754.133152][ T9968] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.133218][ T9968] ? __fget_files+0x2a/0x420 [ 754.133239][ T9968] ? __fget_files+0x3a8/0x420 [ 754.133272][ T9968] __x64_sys_sendmsg+0x1b7/0x290 [ 754.133304][ T9968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 754.133351][ T9968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.133375][ T9968] do_syscall_64+0x174/0x580 [ 754.133401][ T9968] ? trace_irq_disable+0x3b/0x140 [ 754.133435][ T9968] ? clear_bhb_loop+0x70/0xc0 [ 754.133462][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.133484][ T9968] RIP: 0033:0x7fed7b95e0d9 [ 754.133511][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.133529][ T9968] RSP: 002b:00007fed79bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.133551][ T9968] RAX: ffffffffffffffda RBX: 00007fed7bbe5fa0 RCX: 00007fed7b95e0d9 [ 754.133569][ T9968] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 754.133581][ T9968] RBP: 00007fed79bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 754.133593][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.133604][ T9968] R13: 00007fed7bbe6038 R14: 00007fed7bbe5fa0 R15: 00007ffeb6687b08 [ 754.133639][ T9968] [ 754.566155][ T5706] usb 6-1: config 0 descriptor?? [ 754.715499][ T5706] usb 6-1: selecting invalid altsetting 2 [ 754.746869][ T42] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.402788][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.625'. [ 755.422079][ T9978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.427523][ T9978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.975582][ T5706] get_1284_register timeout [ 755.975733][ C1] usb 6-1: async_complete: urb error -104 [ 755.975922][ C1] usb 6-1: async_complete: urb error -104 [ 755.976014][ C1] usb 6-1: async_complete: urb error -104 [ 757.951314][ T9458] veth1_vlan: entered promiscuous mode [ 758.686675][ T5706] usb 6-1: USB disconnect, device number 7 [ 759.199727][ T8493] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 759.357528][ T8493] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 759.359407][ T8493] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.359441][ T8493] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.359481][ T8493] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.492018][ T7016] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.548838][ T8493] hub 10-1:4.0: USB hub found [ 759.901298][ T8493] hub 10-1:4.0: 2 ports detected [ 759.901360][ T8493] usb 10-1: selecting invalid altsetting 1 [ 759.901378][ T8493] hub 10-1:4.0: Using single TT (err -22) [ 760.538680][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 760.610996][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 760.628782][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 760.646647][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 760.647467][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 761.039018][ T8493] usb 10-1: USB disconnect, device number 4 [ 762.194189][ T9458] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN PTI [ 762.194216][ T9458] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 762.194239][ T9458] CPU: 1 UID: 0 PID: 9458 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 762.194267][ T9458] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 762.194275][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.194287][ T9458] RIP: 0010:klist_remove+0x159/0x340 [ 762.194322][ T9458] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 7d a6 f3 f6 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5b a6 f3 f6 49 8b 84 24 98 00 00 00 48 89 [ 762.194340][ T9458] RSP: 0018:ffffc90003067640 EFLAGS: 00010202 [ 762.194359][ T9458] RAX: 0000000000000013 RBX: ffff88801dfdbe00 RCX: 0000000000000046 [ 762.194373][ T9458] RDX: 0000000000000003 RSI: ffffffff8daf4c16 RDI: 0000000000000098 [ 762.194385][ T9458] RBP: ffffc90003067740 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266 [ 762.194400][ T9458] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 0000000000000000 [ 762.194413][ T9458] R13: 1ffff1100bc3af14 R14: ffff88805e1d78a0 R15: dffffc0000000000 [ 762.194428][ T9458] FS: 0000000000000000(000[ 762.194428][ T9458] FS: 0000000000000000(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 762.194445][ T9458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.194458][ T9458] CR2: 00007f0394f35ff8 CR3: 000000002ba6c000 CR4: 00000000003526f0 [ 762.194476][ T9458] Call Trace: [ 762.194484][ T9458] [ 762.194495][ T9458] ? __pfx_klist_remove+0x10/0x10 [ 762.194524][ T9458] ? kobject_move+0x5e4/0x720 [ 762.194556][ T9458] ? __pfx_kobject_move+0x10/0x10 [ 762.194590][ T9458] ? get_device_parent+0x370/0x3a0 [ 762.194619][ T9458] device_move+0x194/0x720 [ 762.194650][ T9458] hci_conn_del_sysfs+0xb8/0x1a0 [ 762.194673][ T9458] hci_conn_del+0xc3d/0x1200 [ 762.194705][ T9458] hci_conn_hash_flush+0x189/0x260 [ 762.194742][ T9458] hci_dev_close_sync+0x7fc/0x10a0 [ 762.194780][ T9458] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 762.194810][ T9458] ? lockdep_hardirqs_on+0x7a/0x110 [ 762.194838][ T9458] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 762.194898][ T9458] ? mutex_lock_nested+0x152/0x1d0 [ 762.194931][ T9458] ? hci_unregister_dev+0x22a/0x5b0 [ 762.194958][ T9458] hci_unregister_dev+0x232/0x5b0 [ 762.194984][ T9458] vhci_release+0x170/0x1c0 [ 762.195006][ T9458] ? __pfx_vhci_release+0x10/0x10 [ 762.195027][ T9458] __fput+0x42a/0xa80 [ 762.195051][ T9458] task_work_run+0x1d9/0x270 [ 762.195086][ T9458] ? __pfx_task_work_run+0x10/0x10 [ 762.195119][ T9458] ? do_exit+0x735/0x2360 [ 762.195149][ T9458] ? kmem_cache_free+0x187/0x6c0 [ 762.195170][ T9458] ? put_net+0x191/0x260 [ 762.195191][ T9458] ? do_exit+0x735/0x2360 [ 762.195223][ T9458] do_exit+0x73a/0x2360 [ 762.195253][ T9458] ? lockdep_hardirqs_on+0x7a/0x110 [ 762.195281][ T9458] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 762.195309][ T9458] ? __pfx_do_exit+0x10/0x10 [ 762.195338][ T9458] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 762.195358][ T9458] ? rt_spin_lock+0x1e0/0x400 [ 762.195395][ T9458] ? rt_spin_unlock+0x157/0x200 [ 762.195416][ T9458] do_group_exit+0x22d/0x2f0 [ 762.195448][ T9458] ? rt_spin_unlock+0x163/0x200 [ 762.195469][ T9458] get_signal+0x121b/0x12c0 [ 762.195504][ T9458] arch_do_signal_or_restart+0xbb/0x860 [ 762.195535][ T9458] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 762.195562][ T9458] ? kmem_cache_free+0x526/0x6c0 [ 762.195592][ T9458] exit_to_user_mode_loop+0x104/0x730 [ 762.195626][ T9458] ? rcu_is_watching+0x15/0xb0 [ 762.195651][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.195674][ T9458] do_syscall_64+0x353/0x580 [ 762.195702][ T9458] ? clear_bhb_loop+0x70/0xc0 [ 762.195727][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.195749][ T9458] RIP: 0033:0x7fefb288e90e [ 762.195768][ T9458] Code: Unable to access opcode bytes at 0x7fefb288e8e4. [ 762.195779][ T9458] RSP: 002b:00007ffc00738ab8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 762.195800][ T9458] RAX: 000000000000002c RBX: 0000555571332500 RCX: 00007fefb288e90e [ 762.195815][ T9458] RDX: 000000000000002c RSI: 00007fefb3684670 RDI: 0000000000000003 [ 762.195828][ T9458] RBP: 0000000000000001 R08: 00007ffc00738b34 R09: 000000000000000c [ 762.195841][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 762.195862][ T9458] R13: 0000000000000000 R14: 00007fefb3684670 R15: 0000000000000000 [ 762.195885][ T9458] [ 762.195900][ T9458] Modules linked in: [ 762.195968][ T9458] ---[ end trace 0000000000000000 ]--- [ 762.345966][ T9458] RIP: 0010:klist_remove+0x159/0x340 [ 762.346077][ T9458] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 7d a6 f3 f6 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5b a6 f3 f6 49 8b 84 24 98 00 00 00 48 89 [ 762.346126][ T9458] RSP: 0018:ffffc90003067640 EFLAGS: 00010202 [ 762.346178][ T9458] RAX: 0000000000000013 RBX: ffff88801dfdbe00 RCX: 0000000000000046 [ 762.346217][ T9458] RDX: 0000000000000003 RSI: ffffffff8daf4c16 RDI: 0000000000000098 [ 762.346250][ T9458] RBP: ffffc90003067740 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266 [ 762.346289][ T9458] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 0000000000000000 [ 762.346313][ T9458] R13: 1ffff1100bc3af14 R14: ffff88805e1d78a0 R15: dffffc0000000000 [ 762.346358][ T9458] FS: 0000000000000000(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 762.346400][ T9458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.346459][ T9458] CR2: 00007f0394f14ff8 CR3: 0000000034436000 CR4: 00000000003526f0 [ 762.346527][ T9458] Kernel panic - not syncing: Fatal exception [ 762.347238][ T9458] Kernel Offset: disabled