last executing test programs: 14m10.442391155s ago: executing program 3 (id=376): request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x3d8, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x3a2, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x6, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc5186a3ff03c13a185e1a664d5e4"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a70507000000ddde250bff5b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) 14m8.584859552s ago: executing program 3 (id=380): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x3d8, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x3a2, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x6, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc5186a3ff03c13a185e1a664d5e4"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a70507000000ddde250bff5b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) 14m6.317081049s ago: executing program 3 (id=383): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000280)=@secondary) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r5, 0x10d, 0x21}, 0x0, &(0x7f0000000780)="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"/269, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r3) 14m4.564495482s ago: executing program 3 (id=387): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r6 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x20000014}, 0x2c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4) 14m3.519170669s ago: executing program 3 (id=391): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x80000006}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xa, 0xfffffffffffffedc, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1009, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x94) eventfd(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) wait4(r1, &(0x7f0000000140), 0x2, &(0x7f0000000580)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r4 = syz_open_dev$vcsa(&(0x7f0000000480), 0x1, 0x121000) tee(r4, r4, 0x180, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 14m0.71383963s ago: executing program 3 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ptrace$pokeuser(0x6, r0, 0x9, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r5 = socket(0x2a, 0x2, 0x5) connect$inet6(r5, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x5, 0x0, 0x7ff, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r7, @ANYRESOCT], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r10, 0x4) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x30, 0x30]}}, 0x0, 0x28, 0x0, 0x9}, 0x28) 13m44.217461534s ago: executing program 32 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ptrace$pokeuser(0x6, r0, 0x9, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r5 = socket(0x2a, 0x2, 0x5) connect$inet6(r5, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x5, 0x0, 0x7ff, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r7, @ANYRESOCT], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r10, 0x4) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x30, 0x30]}}, 0x0, 0x28, 0x0, 0x9}, 0x28) 10m44.307532856s ago: executing program 1 (id=726): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 10m39.299567542s ago: executing program 1 (id=730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a51811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m39.129788037s ago: executing program 1 (id=733): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r3, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0xa, @raw_data="748e189b5b3c80b3ffad34ee6e250d197a5780e78d978ea08852aa4d9759421cae87261fcb397eff5eb6477cf4727b833af826308164c5e1ef66c15652a673defef96689be9ddd7f4f1e526c9607199ae811b88455b0af569a758131232a0c6e92b8118da9152ead75e4336b1e51ab2199f0c0837faba24ae25074f84307a46efb4578cf58f7688e14140dac0837c76945d40d62a605886eea3494b7074af460654820bdea036f02a2584daa49cbe86f5b9daeadbe6fe2b469b71b975ddf125418d5b28b9f3a0def"}) 10m35.476970101s ago: executing program 1 (id=737): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) 10m34.520349236s ago: executing program 1 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m33.248672729s ago: executing program 1 (id=741): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x9, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r6 = socket(0x2a, 0x2, 0x5) connect$inet6(r6, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x5, 0x0, 0x7ff, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r8, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES16=r8, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r11, 0x4) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x30, 0x30]}}, 0x0, 0x28, 0x0, 0x9}, 0x28) 10m17.316828961s ago: executing program 33 (id=741): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x9, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r6 = socket(0x2a, 0x2, 0x5) connect$inet6(r6, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x5, 0x0, 0x7ff, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r8, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES16=r8, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r11, 0x4) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x30, 0x30]}}, 0x0, 0x28, 0x0, 0x9}, 0x28) 10m9.356528896s ago: executing program 2 (id=778): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 10m6.075456521s ago: executing program 2 (id=784): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 10m4.343501706s ago: executing program 2 (id=786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 10m2.811549836s ago: executing program 2 (id=789): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) 9m59.519426891s ago: executing program 2 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) socket$netlink(0x10, 0x3, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r4, 0xffffffffffffffff, 0x0) 9m56.226123196s ago: executing program 2 (id=798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 9m40.047872745s ago: executing program 34 (id=798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 1m14.727704958s ago: executing program 0 (id=1439): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x2000000000000018, 0x0, 0x48) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) listen(r2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xbe0fd63fc648614b}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) 1m10.093501657s ago: executing program 0 (id=1441): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="17830000000000000415000002dcca70a464000000bd2458583a258d765c7e2fe5cb0db7feac1aaa3386b48c6c7ded5bc9f66dc1f58c145a363ce50ab0b28b69485255b30a44d976a363ce68cd02e2245a9f0a33fab711d116a1aa8dc4a9da567f0469d067151f94dc6b5afe025d530787c7c8102226190a2b3161ed414684c0ef9b0ea367ad22c7e6e8596885fcdc4a595e4b089e5764db52525323886b38e8f1cdabfa8bde54b647d648f5a462e017729665ad08c7a34901d9d56cfcaaced9e29ee92baaad214347167accd8ebff806bea1e2e0d3020af070c33dce506f19c68f1ef3afb8085ca89e7e07e08fcb94a7287c9b529dfafe1a056d6b0f71bafa04563536c988916", @ANYRES32, @ANYBLOB="ee6b5fd600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x3d8, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x3a2, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x6, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc5186a3ff03c13a185e1a664d5e4"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a70507000000ddde250bff5b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) 1m9.784000116s ago: executing program 0 (id=1442): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r3 = socket(0x10, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000100)={0x1f, @none}, 0x8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f00000004c0)={0x1f, @none}, 0x14) listen(r4, 0x3ff) listen(r5, 0xc) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) lsetxattr$security_ima(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x4) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000800)={&(0x7f00000003c0)={{@hyper, 0x7}, {@any, 0x1}, 0x400, "e4b417c5c06db8c40994625370d49ecdd7274777b4000568dc2e2ac0d5c349a06adf427fd4e0fc36134403e58fe6ce46a17ee746bb1ec403de00e31b742879cd5626b3e62903e05b70fb1d77d6fb1155998ee5963d0b87928e6feca915384b3759eb8925a49674c898d6723da0e6b82f1bebebdff76e6f410cd650ea04aebbf5efb91b77f5663e934ffe9fdbc8902508fc7aff4409572f0314e53e242a5ed44b8e872b11862ce0044d8faed7e12b917a06de1916cf127864b634f74a02dda059deed7c626e269ce1e9a05ee992693537c0b0d6bccd16ccf75b668143c0efeab4a5b39d478e36a3ae0df7f62c760e1f02230f2b030690dd9b46ae066a7c15854207c4b9c288842257d2a72b7d58b7dd2b9d1efed9e46b536d9d3d00a43ee669b9b5107b004d30bddeb28cfa4fc41a715e218f47c5ab9949f7ede815e7976804ea85ada0d0e01a772e01465adec34bf22033e22d3506e477c6e9d19936fe20d46c11c43f2205ab1a9358f445b62d86c61c25e4b15c905c72f39e21334ec1a75dce1b835d630d9ce1ac160b8a177249b0a7dbaf874d5382bcfd564d0cb7452635b33424a244476b4607398c9190bf8babbbfe77e879d360cf11b6a1f7e4573b9642b6b0cbcc80c5dbf3ae971dec1ccd83576907e5f0d14cf7bd23cfa02c83abc8a2abf22aff5262a7d441fadf7aea718323527d1b5a6fe7e2d165dac064b47e42ade34ab2d94b8543f2084471bbd3ad476413a65593c8697fff4512dc3f537a657a736802b4ae4bc045ee537e1e75beaca0155f3e3d00f06a42d58c165089f176b81a7eeed3d3ce468493caf596d59886cec3f61a040161df8c765320cf6ff46bd7d54ba7eda3bea8815a4c25090b9ceeac93593bf3220b14f7c283b51b7a772630fc6864853c8c928538a107c23590edff4d03c91982d29fbfadfa26fe3feb1607ce8f95b05033de2cf874c4e3b2567bcf4219badf50cffdd4772535a7c80ac304a6879c8d0f482868e729de98cb0f6ab22ea18fc33aef07e8c9fe81219ad8c37310847edb560fdf46bcc2aa69bca9b3c41daa3734578166bcb9801e09d9bfbc11ab7e8ea28650eb2f6013b1a28f46f9498bfd6081ebc4eafa27ff8e7499740626519009c4b9644a68a0a3fb6ea888b2262a4925d0cb7a421bab70973f0e60735254b2a7cc73a49f7839cbb88d5ea9f499c84582f464b0698c33993472ab5bda8e937cb9a28923b8b233a2d178864c1f09f5d4258c59f62c45be5bf163f07456a4bd0f598823dfe9c683bdd27936ebd547bf442e0f1f8583806e4d889e2a397a73aceed4a934f901a10607d9e949320b4ae9fcc49c95c8fac8fe92abc20387c38d93813bc08b6a6356c9bddb632d8f27e8e957e32dea813cc7891b779f3f29de86368b059d5f1c9b1df35315f46a4b809e2298d1d25d120d3694c879ef8ff15de8"}, 0x418, 0x7}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) 1m6.165395089s ago: executing program 0 (id=1445): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket(0x1f, 0x5, 0x8) bind(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) shutdown(r5, 0x2) setreuid(0x0, 0xee00) 1m4.20066811s ago: executing program 0 (id=1446): fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0x9, 0x2f93) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x80002, 0x0) 56.431507861s ago: executing program 0 (id=1451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, @in=@multicast1, 0x32, 0x0, 0x0, 0x2, 0x2}, {@in6=@local, @in=@loopback, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 40.462722514s ago: executing program 35 (id=1451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, @in=@multicast1, 0x32, 0x0, 0x0, 0x2, 0x2}, {@in6=@local, @in=@loopback, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14.32090557s ago: executing program 5 (id=1475): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000640)={{0x8, 0x4, 0xfff, 0xcf, 'syz0\x00', 0x8d20}, 0x3, 0x1a3, 0x1, 0xffffffffffffffff, 0x1, 0x9, 'syz1\x00', &(0x7f00000001c0)=['/dev/video#\x00'], 0xc}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) preadv(r5, 0x0, 0x0, 0x10001, 0x80) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x0) 12.888906246s ago: executing program 6 (id=765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 11.742834066s ago: executing program 5 (id=1476): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000240)={0x990000, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0}) 11.739913176s ago: executing program 4 (id=1477): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x9201}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xfffb, 0xffff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(0xffffffffffffffff, 0x200) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) lseek(r0, 0x4000, 0x4) 10.609528026s ago: executing program 7 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r3 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r3, 0x80007) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.157726783s ago: executing program 6 (id=765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 8.537876149s ago: executing program 5 (id=1478): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 8.535737749s ago: executing program 4 (id=1479): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) 7.865344806s ago: executing program 7 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r3 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r3, 0x80007) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.861891322s ago: executing program 6 (id=765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 6.398076034s ago: executing program 5 (id=1480): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 6.396925094s ago: executing program 4 (id=1481): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) 5.80059216s ago: executing program 7 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r3 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r3, 0x80007) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.206246235s ago: executing program 8 (id=1461): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'dmm32at\x00', [0xcf7, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff7, 0xfd, 0xfffffffe, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x5, 0x3, 0x7, 0x3, 0x9, 0x4006, 0x0, 0x3]}) 4.599375071s ago: executing program 6 (id=765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 4.168491002s ago: executing program 5 (id=1482): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) lseek(0xffffffffffffffff, 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x67, &(0x7f0000000380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x31, 0x6, 0xfe, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x9}, {"9dc770f9f07bbbff40c3634483e487fd9a42a20f213e08e3ccf2a2f18a"}}}}}}}, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) 4.168206252s ago: executing program 4 (id=1483): mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1700, 0x800}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write$tun(r2, &(0x7f00000001c0)=ANY=[], 0xffe) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4004000) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2815\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0x4f, 0x2000006, 0x77fd]}) 4.168088242s ago: executing program 8 (id=1461): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'dmm32at\x00', [0xcf7, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff7, 0xfd, 0xfffffffe, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x5, 0x3, 0x7, 0x3, 0x9, 0x4006, 0x0, 0x3]}) 3.720232793s ago: executing program 7 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r3 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r3, 0x80007) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.351006523s ago: executing program 8 (id=1461): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'dmm32at\x00', [0xcf7, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff7, 0xfd, 0xfffffffe, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x5, 0x3, 0x7, 0x3, 0x9, 0x4006, 0x0, 0x3]}) 3.003681022s ago: executing program 6 (id=765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 2.646716801s ago: executing program 4 (id=1484): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xfe46) sendmsg$NFT_BATCH(r1, 0x0, 0x20040040) r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) 2.646595771s ago: executing program 8 (id=1461): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'dmm32at\x00', [0xcf7, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff7, 0xfd, 0xfffffffe, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x5, 0x3, 0x7, 0x3, 0x9, 0x4006, 0x0, 0x3]}) 2.284760061s ago: executing program 7 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r3 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r3, 0x80007) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.940756049s ago: executing program 5 (id=1485): socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 1.92668529s ago: executing program 8 (id=1461): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'dmm32at\x00', [0xcf7, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff7, 0xfd, 0xfffffffe, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x5, 0x3, 0x7, 0x3, 0x9, 0x4006, 0x0, 0x3]}) 1.55007775s ago: executing program 6 (id=765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$describe(0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 1.234672688s ago: executing program 4 (id=1486): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) getrlimit(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, 0x0) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x4004004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 1.234470138s ago: executing program 8 (id=1461): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'dmm32at\x00', [0xcf7, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff7, 0xfd, 0xfffffffe, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x5, 0x3, 0x7, 0x3, 0x9, 0x4006, 0x0, 0x3]}) 0s ago: executing program 7 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r3 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r3, 0x80007) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 839.992276][T10262] Dev loop7: unable to read RDB block 0 [ 840.007665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 840.490372][T10282] blktrace: Concurrent blktraces are not allowed on loop0 [ 841.055501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 841.067630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 841.077134][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 841.085158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 841.093977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 841.109070][T10262] loop7: unable to read partition table [ 841.114868][T10262] loop7: partition table beyond EOD, truncated [ 841.121829][T10262] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 841.366176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 841.397363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 841.448433][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 841.477440][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 841.538741][ T9991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 841.965191][T10245] chnl_net:caif_netlink_parms(): no params data found [ 842.397992][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 842.405509][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 842.459568][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.480294][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.507106][T10245] device bridge_slave_0 entered promiscuous mode [ 842.540697][ T9991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.954496][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.984706][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.137306][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 843.153567][T10245] device bridge_slave_1 entered promiscuous mode [ 844.334893][T10245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.483303][T10245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.556415][T10245] team0: Port device team_slave_0 added [ 845.216799][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 845.395379][T10245] team0: Port device team_slave_1 added [ 845.842935][T10339] syz.0.1209: attempt to access beyond end of device [ 845.842935][T10339] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 845.957956][T10245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.016059][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.042934][T10245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.055573][T10245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.063049][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.090256][T10245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.779793][T10245] device hsr_slave_0 entered promiscuous mode [ 846.847034][T10245] device hsr_slave_1 entered promiscuous mode [ 846.878116][T10245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.885767][T10245] Cannot create hsr debugfs directory [ 847.503922][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 847.514449][T10361] syz.4.1211: attempt to access beyond end of device [ 847.514449][T10361] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 847.532490][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 847.542592][T10352] loop7: detected capacity change from 0 to 7 [ 847.554980][ C1] blk_print_req_error: 5 callbacks suppressed [ 847.554991][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 847.570278][ C1] buffer_io_error: 5 callbacks suppressed [ 847.570291][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 847.778378][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 848.342138][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 848.351385][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 848.360151][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 848.369356][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 848.380531][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 848.396951][ T9991] device veth0_vlan entered promiscuous mode [ 848.413926][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 848.423716][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 848.438842][ T9991] device veth1_vlan entered promiscuous mode [ 848.491529][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 848.500804][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 848.536244][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 848.564987][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 849.693372][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 849.702615][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 849.743353][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 849.752589][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 849.769736][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 849.770902][ T9991] device veth0_macvtap entered promiscuous mode [ 849.778920][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 849.793377][T10250] ldm_validate_partition_table(): Disk read failed. [ 849.812020][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 849.821175][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 849.836350][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 849.845518][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 849.862076][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 849.871271][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 849.880130][T10250] Dev loop7: unable to read RDB block 0 [ 849.889249][T10250] loop7: unable to read partition table [ 849.894997][T10250] loop7: partition table beyond EOD, truncated [ 849.980346][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 850.918138][ T9991] device veth1_macvtap entered promiscuous mode [ 851.093063][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.132035][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.147251][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.173955][ T3639] ldm_validate_partition_table(): Disk read failed. [ 851.182212][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.202311][ T3639] Dev loop7: unable to read RDB block 0 [ 851.209667][ T3639] loop7: unable to read partition table [ 851.218897][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.229999][ T3639] loop7: partition table beyond EOD, truncated [ 851.246762][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.383557][ T9991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.679249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 851.722179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 852.058506][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.136799][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.197265][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.244893][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.332172][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.479900][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.649108][ T9991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.726221][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 852.770291][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 853.000105][ T9991] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.088954][ T9991] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.208136][ T9991] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.292405][ T9991] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.361286][ T4420] device hsr_slave_0 left promiscuous mode [ 853.454394][ T4420] device hsr_slave_1 left promiscuous mode [ 853.502656][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.567509][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.697856][ T4420] device bridge_slave_1 left promiscuous mode [ 853.791796][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.996555][ T4420] device bridge_slave_0 left promiscuous mode [ 854.092745][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.280610][T10440] loop7: detected capacity change from 0 to 7 [ 859.618167][ C0] blk_print_req_error: 26 callbacks suppressed [ 859.618187][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 859.633519][ C0] buffer_io_error: 25 callbacks suppressed [ 859.633528][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.687715][ T4420] team0 (unregistering): Port device team_slave_1 removed [ 859.732351][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 859.741559][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.749880][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 859.759246][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.780476][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 859.789831][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.887575][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 859.896950][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.949789][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 859.959195][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 859.967354][T10440] ldm_validate_partition_table(): Disk read failed. [ 860.021665][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 860.031055][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 860.076854][ T4420] team0 (unregistering): Port device team_slave_0 removed [ 860.155821][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 860.165052][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 861.030629][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.039887][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 861.047961][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.057167][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 861.065111][T10440] Dev loop7: unable to read RDB block 0 [ 861.279773][T10440] loop7: unable to read partition table [ 861.285537][T10440] loop7: partition table beyond EOD, truncated [ 861.292102][T10440] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 861.427403][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.437061][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.442005][ T4420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.454835][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.465470][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.478674][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 861.485966][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 862.505148][ T4420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.847922][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 864.865495][ T4420] bond0 (unregistering): Released all slaves [ 865.398804][T10245] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 865.458812][T10245] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 865.479265][T10245] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 865.538482][T10245] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 866.298917][T10475] loop7: detected capacity change from 0 to 7 [ 866.646018][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 866.664155][ C1] blk_print_req_error: 5 callbacks suppressed [ 866.664170][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 866.679521][ C1] buffer_io_error: 5 callbacks suppressed [ 866.679533][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 866.693985][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 866.703200][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 866.733984][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 866.743213][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 866.751737][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 866.760987][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 866.769460][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 866.778705][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 866.834463][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 866.843707][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 866.851688][T10475] ldm_validate_partition_table(): Disk read failed. [ 866.920321][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 866.929592][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 866.976109][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 866.985379][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 867.090744][T10245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.107016][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 867.116274][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 867.170137][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 867.179399][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 867.187417][T10475] Dev loop7: unable to read RDB block 0 [ 867.197947][T10475] loop7: unable to read partition table [ 867.203709][T10475] loop7: partition table beyond EOD, truncated [ 867.209931][T10475] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 867.309003][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 867.330269][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 867.372112][T10245] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.404922][T10450] chnl_net:caif_netlink_parms(): no params data found [ 867.440896][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 867.455465][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 867.527408][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.534748][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.560432][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 867.639528][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 867.730613][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 867.811424][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.818609][ T6532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.069672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 868.328855][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 868.492957][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 868.502154][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 868.519434][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 868.535362][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 868.544711][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 868.553659][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 868.597105][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 868.604974][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 868.614607][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 868.632960][T10245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 868.656825][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 868.668031][T10450] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.675235][T10450] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.689445][T10450] device bridge_slave_0 entered promiscuous mode [ 868.717586][T10450] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.725998][T10450] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.886587][T10450] device bridge_slave_1 entered promiscuous mode [ 869.575043][ T4420] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.672690][T10450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.922991][ T4420] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.019301][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.025739][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.126277][T10450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.693997][ T4420] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.737260][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 870.782129][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 870.836401][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 870.930661][ T4420] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.996327][T10450] team0: Port device team_slave_0 added [ 871.080031][T10450] team0: Port device team_slave_1 added [ 871.092590][T10245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.263433][T10450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.326777][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.411916][T10450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.484799][T10450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.491864][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.529509][T10450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.486869][T10522] loop7: detected capacity change from 0 to 7 [ 874.021013][T10450] device hsr_slave_0 entered promiscuous mode [ 874.057514][T10450] device hsr_slave_1 entered promiscuous mode [ 874.081661][T10450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.104377][T10450] Cannot create hsr debugfs directory [ 874.149962][T10529] syz.0.1247: attempt to access beyond end of device [ 874.149962][T10529] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 875.397058][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 875.405865][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 876.182156][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 876.231683][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 876.312752][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 876.320743][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 876.431354][T10245] device veth0_vlan entered promiscuous mode [ 877.633392][T10245] device veth1_vlan entered promiscuous mode [ 877.823622][ T4420] device hsr_slave_0 left promiscuous mode [ 877.870343][ T4420] device hsr_slave_1 left promiscuous mode [ 877.882981][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.904399][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.930527][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.963474][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.992538][ T4420] device bridge_slave_1 left promiscuous mode [ 878.007974][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.063651][ T4420] device bridge_slave_0 left promiscuous mode [ 878.076779][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.197450][ T4420] device veth1_macvtap left promiscuous mode [ 878.216556][ T4420] device veth0_macvtap left promiscuous mode [ 878.236791][ T4420] device veth1_vlan left promiscuous mode [ 878.246293][ T4420] device veth0_vlan left promiscuous mode [ 879.198370][T10564] loop7: detected capacity change from 0 to 7 [ 879.587380][ C0] blk_print_req_error: 5 callbacks suppressed [ 879.587408][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.602803][ C0] buffer_io_error: 5 callbacks suppressed [ 879.602831][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.616858][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.626019][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.670875][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.680113][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.696854][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.706082][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.753642][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.762834][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.772202][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.781395][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.789392][T10564] ldm_validate_partition_table(): Disk read failed. [ 879.816420][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.825690][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.844720][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.854105][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.876529][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.885736][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.918988][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 879.928221][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 879.936200][T10564] Dev loop7: unable to read RDB block 0 [ 879.974317][T10564] loop7: unable to read partition table [ 879.980130][T10564] loop7: partition table beyond EOD, truncated [ 879.986305][T10564] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 885.506002][T10593] blktrace: Concurrent blktraces are not allowed on loop0 [ 886.040785][ T4420] team0 (unregistering): Port device team_slave_1 removed [ 886.906741][T10600] loop7: detected capacity change from 0 to 7 [ 887.243551][ C1] blk_print_req_error: 5 callbacks suppressed [ 887.243568][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.258867][ C1] buffer_io_error: 5 callbacks suppressed [ 887.258875][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.284229][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.293413][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.304354][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.313570][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.321690][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.330857][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.387645][ T4420] team0 (unregistering): Port device team_slave_0 removed [ 887.406848][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.416032][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.424347][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.433586][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.441582][T10600] ldm_validate_partition_table(): Disk read failed. [ 887.477743][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.486950][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.502202][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.511397][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.559627][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.568840][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.596798][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 887.605996][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 887.614011][T10600] Dev loop7: unable to read RDB block 0 [ 887.625158][T10600] loop7: unable to read partition table [ 887.630939][T10600] loop7: partition table beyond EOD, truncated [ 887.637216][T10600] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 888.587639][ T4420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.410918][ T4420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.185047][T10629] syz.5.1270: attempt to access beyond end of device [ 893.185047][T10629] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 893.211644][ T4420] bond0 (unregistering): Released all slaves [ 894.272142][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 894.338768][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 894.435046][T10245] device veth0_macvtap entered promiscuous mode [ 894.669876][T10450] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 894.689251][T10450] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 894.709465][T10450] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 894.738963][T10450] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 894.926483][T10450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.958156][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 894.966434][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 894.985186][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 894.999211][T10450] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.016874][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 895.037290][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 895.045882][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.053055][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.062435][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 895.108195][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 895.137368][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 895.192293][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.199491][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.151646][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 896.367549][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 896.608070][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 896.854955][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 896.982883][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 897.028572][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 897.072871][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 897.110263][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 898.700997][T10450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 898.728063][T10450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 898.759764][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 898.779301][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 898.798495][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 898.807212][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 898.815132][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 898.875376][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 899.630725][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 899.658832][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.698984][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 900.977009][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 902.440982][T10673] chnl_net:caif_netlink_parms(): no params data found [ 903.056713][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 903.614579][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.993256][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.027615][T10673] device bridge_slave_0 entered promiscuous mode [ 905.109351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 905.117725][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 905.138007][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.145124][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.146871][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 905.201339][T10673] device bridge_slave_1 entered promiscuous mode [ 905.224386][T10720] syz.4.1282: attempt to access beyond end of device [ 905.224386][T10720] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 905.294278][T10450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.609459][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.672794][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.226602][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 908.519571][T10673] team0: Port device team_slave_0 added [ 908.699317][T10673] team0: Port device team_slave_1 added [ 908.744616][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.802453][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.920479][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.148491][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.155474][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.660877][T10752] loop7: detected capacity change from 0 to 7 [ 911.091462][ C1] blk_print_req_error: 5 callbacks suppressed [ 911.091478][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 911.106814][ C1] buffer_io_error: 5 callbacks suppressed [ 911.106823][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 911.135075][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 911.144334][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 911.152433][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 911.153423][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.161604][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 911.198954][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 911.208142][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 911.216355][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 911.225592][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 911.277225][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 911.286551][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 911.294560][T10752] ldm_validate_partition_table(): Disk read failed. [ 912.186883][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 912.196084][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 912.338797][T10673] device hsr_slave_0 entered promiscuous mode [ 912.387497][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 912.396683][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 912.447736][T10673] device hsr_slave_1 entered promiscuous mode [ 912.478179][T10673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 912.485794][T10673] Cannot create hsr debugfs directory [ 912.487179][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 912.500307][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 912.516767][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 912.525935][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 912.533902][T10752] Dev loop7: unable to read RDB block 0 [ 912.552620][T10752] loop7: unable to read partition table [ 912.558550][T10752] loop7: partition table beyond EOD, truncated [ 912.564738][T10752] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 912.811795][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 912.827615][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 914.152025][T10450] device veth0_vlan entered promiscuous mode [ 914.250865][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 914.279187][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 914.292349][T10450] device veth1_vlan entered promiscuous mode [ 914.313096][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 914.321942][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 914.344239][ T4420] device hsr_slave_0 left promiscuous mode [ 914.374834][ T4420] device hsr_slave_1 left promiscuous mode [ 914.388551][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.396352][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.413896][ T4420] device bridge_slave_1 left promiscuous mode [ 914.443670][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.533689][ T4420] device bridge_slave_0 left promiscuous mode [ 914.568863][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.371043][ T4420] device veth0_macvtap left promiscuous mode [ 916.104145][ T4420] device veth1_vlan left promiscuous mode [ 916.302215][ T4420] device veth0_vlan left promiscuous mode [ 916.353682][T10776] syz.5.1293: attempt to access beyond end of device [ 916.353682][T10776] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 919.546631][ T4357] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 919.748135][ T4357] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.795238][ T4357] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 919.821611][ T4357] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 919.836179][ T4357] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 919.861792][ T4357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.732764][T10801] loop7: detected capacity change from 0 to 7 [ 921.062815][ T4357] cxacru 1-1:1.0: invalid response length to cm 0x90: 3 [ 921.081694][ T4357] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 921.095398][ C1] blk_print_req_error: 5 callbacks suppressed [ 921.095415][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.110693][ C1] buffer_io_error: 5 callbacks suppressed [ 921.110702][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.124449][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.124624][ T4357] cxacru: probe of 1-1:1.0 failed with error -22 [ 921.133626][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.168601][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.177846][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.247421][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.256653][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.265828][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.275050][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.296655][ T126] usb 1-1: USB disconnect, device number 21 [ 921.312453][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.321693][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.329682][T10801] ldm_validate_partition_table(): Disk read failed. [ 921.357776][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.366998][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.409572][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.418830][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.434251][ T4420] team0 (unregistering): Port device team_slave_1 removed [ 921.491362][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.500572][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.511069][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 921.520221][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 921.528558][T10801] Dev loop7: unable to read RDB block 0 [ 921.535173][T10801] loop7: unable to read partition table [ 921.540995][T10801] loop7: partition table beyond EOD, truncated [ 921.547175][T10801] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 921.761459][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 921.770713][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 921.778469][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 921.788025][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 921.796860][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 921.797398][ T4420] team0 (unregistering): Port device team_slave_0 removed [ 921.804149][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 922.205926][ T4420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.856644][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 924.447136][ T4420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.628233][ T4420] bond0 (unregistering): Released all slaves [ 925.936620][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 927.700223][T10850] loop7: detected capacity change from 0 to 7 [ 928.042055][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 928.054193][ C1] blk_print_req_error: 5 callbacks suppressed [ 928.054212][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 928.069596][ C1] buffer_io_error: 5 callbacks suppressed [ 928.069609][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 928.083452][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 928.092664][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 928.104181][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 928.113406][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 928.177204][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 928.186423][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 928.194522][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 928.203746][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 928.270995][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 928.280265][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 928.288278][T10850] ldm_validate_partition_table(): Disk read failed. [ 928.300208][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 928.309400][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 929.085630][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 929.094856][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 929.103003][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 929.112246][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 929.156059][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 929.165332][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 929.173397][T10850] Dev loop7: unable to read RDB block 0 [ 929.247208][T10850] loop7: unable to read partition table [ 929.252992][T10850] loop7: partition table beyond EOD, truncated [ 929.259198][T10850] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 929.506969][T10804] chnl_net:caif_netlink_parms(): no params data found [ 930.096930][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 930.823062][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.856742][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.864875][T10804] device bridge_slave_0 entered promiscuous mode [ 931.010693][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.054777][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.164761][T10804] device bridge_slave_1 entered promiscuous mode [ 931.458856][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.465447][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.005638][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.113853][T10673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 932.147807][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.061262][T10673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 933.228763][T10673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 933.377928][T10673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 933.493140][T10804] team0: Port device team_slave_0 added [ 933.543744][T10804] team0: Port device team_slave_1 added [ 934.147914][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.155366][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.235873][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.381235][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.396640][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.425342][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.412046][T10926] loop7: detected capacity change from 0 to 7 [ 935.756629][ C1] blk_print_req_error: 5 callbacks suppressed [ 935.756646][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 935.771971][ C1] buffer_io_error: 5 callbacks suppressed [ 935.771985][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 935.785799][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 935.794992][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 935.819870][T10804] device hsr_slave_0 entered promiscuous mode [ 935.849941][T10804] device hsr_slave_1 entered promiscuous mode [ 935.872410][T10804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.103103][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 936.112344][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 936.120476][T10804] Cannot create hsr debugfs directory [ 936.122250][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 936.135040][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 936.141942][T10673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.153902][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 936.163082][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 937.050141][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 937.059364][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 937.067369][T10926] ldm_validate_partition_table(): Disk read failed. [ 937.075150][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 937.084358][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 937.144506][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 937.153704][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 937.223369][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 937.232627][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 937.246790][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 937.255057][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 937.310301][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 937.316856][T10673] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.319553][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 937.334412][T10926] Dev loop7: unable to read RDB block 0 [ 937.389900][T10926] loop7: unable to read partition table [ 937.395727][T10926] loop7: partition table beyond EOD, truncated [ 937.402049][T10926] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 937.658927][T10940] syz.0.1321: attempt to access beyond end of device [ 937.658927][T10940] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 937.741342][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 938.587449][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 938.633706][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.640926][ T5523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.687668][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 938.864828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 938.883280][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 939.737065][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.744159][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.801225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 939.823531][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 940.859511][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 940.898182][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 940.960999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 941.018246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 941.058762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 941.087112][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 941.105489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 941.164863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 941.319315][T10673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 941.345204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 944.263529][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 944.388677][T10975] nvme nvme0: rdma_resolve_addr failed (-19). [ 944.503584][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 945.903262][T11004] befs: (nbd4): No write support. Marking filesystem read-only [ 945.912050][T11004] syz.4.1332: attempt to access beyond end of device [ 945.912050][T11004] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 945.991829][ T4420] device hsr_slave_0 left promiscuous mode [ 946.004930][ T4420] device hsr_slave_1 left promiscuous mode [ 946.016399][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.841334][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.888820][ T4420] device bridge_slave_1 left promiscuous mode [ 946.907728][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.917265][ T4420] device bridge_slave_0 left promiscuous mode [ 946.923436][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.004515][ T4420] device veth1_vlan left promiscuous mode [ 947.033146][ T4420] device veth0_vlan left promiscuous mode [ 947.246842][ T4319] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 947.468291][ T4319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.518611][ T4319] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 947.529063][ T4319] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.578102][ T4319] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 947.596660][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 947.631132][ T4319] usb 5-1: Product: syz [ 947.636455][ T4319] usb 5-1: Manufacturer: syz [ 947.672897][T11015] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 947.723739][ T4319] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 947.750085][ T4319] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 947.991281][ T14] usb 5-1: USB disconnect, device number 13 [ 948.044019][ T14] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 948.079149][ T14] garmin_gps 5-1:1.0: device disconnected [ 948.355903][ T4420] team0 (unregistering): Port device team_slave_1 removed [ 948.515843][ T4420] team0 (unregistering): Port device team_slave_0 removed [ 948.587615][ T4420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.645542][ T4420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.101529][ T4420] bond0 (unregistering): Released all slaves [ 949.266949][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.274388][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.348625][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.444357][T10804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 950.490313][T10804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 950.553464][T10804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 950.660416][T10804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 953.152328][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.275756][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.331604][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 953.343084][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 953.419021][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 953.452775][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 953.471774][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.478917][ T5523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.526935][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 953.563085][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 953.587370][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.594493][ T5523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.660875][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 953.727151][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 953.742461][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 953.768133][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 953.942176][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 954.076673][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 954.196461][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 954.312908][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 954.419345][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 954.537027][T10804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 954.634101][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 954.725508][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 954.827675][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 954.889620][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 955.580194][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 955.651146][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 956.438087][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 956.449383][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 956.459397][T10673] device veth0_vlan entered promiscuous mode [ 956.467199][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 956.475273][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 959.433170][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 959.469095][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 959.482614][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.845987][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 960.858092][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 960.865844][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 960.874718][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 960.882945][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 960.890362][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 962.748390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 962.785879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 962.865884][T11162] syz.4.1350: attempt to access beyond end of device [ 962.865884][T11162] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 962.885066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 962.976822][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 963.787319][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 963.803867][T11146] chnl_net:caif_netlink_parms(): no params data found [ 964.194586][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 964.204636][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 964.232089][T10804] device veth0_vlan entered promiscuous mode [ 964.279745][T10804] device veth1_vlan entered promiscuous mode [ 964.534106][T10804] device veth0_macvtap entered promiscuous mode [ 964.550491][T10804] device veth1_macvtap entered promiscuous mode [ 964.576812][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.592959][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.608723][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.635607][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.666719][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.736369][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.106667][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 965.283092][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.697903][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 965.710580][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 965.723288][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 965.927178][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 965.947856][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 966.353712][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.418015][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.526641][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.895180][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.146699][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 967.446557][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.482581][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.557965][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.611773][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 967.651598][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 967.684499][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 968.683243][T10804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.746571][T10804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.755320][T10804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.791529][T10804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.851663][T11146] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.859517][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.883740][T11146] device bridge_slave_0 entered promiscuous mode [ 969.227911][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 970.312699][T11146] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.660531][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.896182][T11146] device bridge_slave_1 entered promiscuous mode [ 971.962353][T11146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.081077][T11146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.306634][ T4315] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 972.506617][ T4315] usb 5-1: Using ep0 maxpacket: 16 [ 973.236720][ T4315] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 973.532375][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.541538][ T4315] usb 5-1: Product: syz [ 973.546013][ T4315] usb 5-1: Manufacturer: syz [ 973.552910][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.560870][ T4315] usb 5-1: SerialNumber: syz [ 973.569876][ T4315] usb 5-1: config 0 descriptor?? [ 973.584371][ T4315] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 973.588509][T11146] team0: Port device team_slave_0 added [ 973.673595][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.776356][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 973.791226][ T4315] ssu100: probe of 5-1:0.0 failed with error -32 [ 973.814690][ T4315] usb 5-1: USB disconnect, device number 14 [ 973.833690][T11146] team0: Port device team_slave_1 added [ 974.788674][ T4570] device hsr_slave_0 left promiscuous mode [ 974.881005][ T4570] device hsr_slave_1 left promiscuous mode [ 975.626843][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.651743][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.735780][ T4570] device bridge_slave_1 left promiscuous mode [ 975.752490][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.437751][ T4570] device bridge_slave_0 left promiscuous mode [ 976.443950][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.542887][ T4570] device veth0_vlan left promiscuous mode [ 979.871668][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 980.082978][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 980.249673][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.966972][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.111059][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 983.160119][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 983.434787][T11311] ceph: No mds server is up or the cluster is laggy [ 983.488151][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 983.494308][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 983.788984][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 983.798378][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 983.806402][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 983.815268][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 983.822911][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 983.830556][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 984.046989][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 984.053148][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 985.856642][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 986.747603][ T4570] bond0 (unregistering): Released all slaves [ 986.972231][T11146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.006727][T11146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.125771][T11146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.169611][T11146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.858174][T11346] Bluetooth: MGMT ver 1.22 [ 988.368548][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 988.576649][T11146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.939246][T11146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.067547][T11146] device hsr_slave_0 entered promiscuous mode [ 989.117904][T11146] device hsr_slave_1 entered promiscuous mode [ 989.156718][T11146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 989.164561][T11146] Cannot create hsr debugfs directory [ 990.417078][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 991.497697][T11319] chnl_net:caif_netlink_parms(): no params data found [ 992.506994][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 992.899807][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.906161][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.118702][T11319] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.146810][T11319] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.155055][T11319] device bridge_slave_0 entered promiscuous mode [ 994.263771][T11319] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.296724][T11319] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.345428][T11319] device bridge_slave_1 entered promiscuous mode [ 995.372160][ T4570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.608209][T11319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.654562][T11319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.710743][ T4570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.882765][ T4570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.941233][T11319] team0: Port device team_slave_0 added [ 995.976082][T11409] comedi comedi0: No hardware detected at I/O base 0x300 [ 995.990042][T11319] team0: Port device team_slave_1 added [ 996.061372][ T4570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.123538][T11146] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 996.195956][T11146] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 996.227519][T11319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.234482][T11319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.322692][T11319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.370245][T11402] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.399116][T11146] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 996.416099][T11146] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 996.450493][T11319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.469652][T11319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.550581][T11319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.698119][T11319] device hsr_slave_0 entered promiscuous mode [ 996.751004][T11319] device hsr_slave_1 entered promiscuous mode [ 996.790135][T11319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.809485][T11319] Cannot create hsr debugfs directory [ 997.110952][T11146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.548807][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 997.579987][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.497488][T11146] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.564667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.606392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.648938][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.656059][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.495633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.616998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.625789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.658808][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.665964][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.719009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.757388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.775051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.800710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.893945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 999.915503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.933258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.048135][T11443] syz.4.1402: attempt to access beyond end of device [ 1000.048135][T11443] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1000.088608][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.119630][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.139344][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.173173][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.432391][T11146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1002.991731][T11486] comedi comedi0: No hardware detected at I/O base 0x300 [ 1003.069244][ C0] hrtimer: interrupt took 256087 ns [ 1003.272653][T11319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1003.344886][T11488] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1407'. [ 1003.418409][T11319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1003.489047][T11319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1003.603400][T11146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.281444][T11319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1004.354171][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1004.402376][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1004.730715][ T4570] device hsr_slave_0 left promiscuous mode [ 1004.858637][ T4570] device hsr_slave_1 left promiscuous mode [ 1005.096743][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.104220][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.154599][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.216693][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.297472][ T4570] device bridge_slave_1 left promiscuous mode [ 1005.303727][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.351792][ T4570] device bridge_slave_0 left promiscuous mode [ 1005.368448][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.468603][ T4570] device veth1_macvtap left promiscuous mode [ 1006.474704][ T4570] device veth0_macvtap left promiscuous mode [ 1006.502145][ T4570] device veth1_vlan left promiscuous mode [ 1006.508193][ T4570] device veth0_vlan left promiscuous mode [ 1006.883311][T11512] syz.4.1413: attempt to access beyond end of device [ 1006.883311][T11512] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1010.565653][T11531] comedi comedi0: No hardware detected at I/O base 0x300 [ 1015.007353][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 1015.119531][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 1015.277184][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.417745][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.574249][ T4570] bond0 (unregistering): Released all slaves [ 1017.145401][T11319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.280329][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1017.297384][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1017.353708][T11319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.366911][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1018.382844][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1018.398593][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.405717][ T6532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.476320][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1018.537121][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1018.580845][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.588032][ T6532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.620360][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1018.637266][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1018.697639][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1018.792113][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1018.853016][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1019.087179][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1019.408166][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1019.518370][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1019.567943][T11564] syz.5.1425: attempt to access beyond end of device [ 1019.567943][T11564] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1020.874196][T11319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1020.887570][T11319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.767342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1021.818695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1021.879580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1021.948292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1022.003487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1024.947490][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1026.530668][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1026.546940][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1026.578593][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1026.586578][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1026.593990][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1028.634531][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1028.651780][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1028.666861][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 1030.960765][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 1031.118509][T11319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.414795][T11591] chnl_net:caif_netlink_parms(): no params data found [ 1032.977058][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 1033.100764][T11591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.137574][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.168564][T11591] device bridge_slave_0 entered promiscuous mode [ 1033.248816][T11591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.266984][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.308364][T11591] device bridge_slave_1 entered promiscuous mode [ 1035.008407][T11591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.057202][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 1035.099667][T11591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.289209][T11591] team0: Port device team_slave_0 added [ 1035.324353][T11591] team0: Port device team_slave_1 added [ 1037.101550][T11591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.137067][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.236711][T11591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.586882][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1037.617144][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1037.657649][T11591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.664650][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.816572][T11591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.016169][T11319] device veth0_vlan entered promiscuous mode [ 1038.072439][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.138231][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.485239][T11319] device veth1_vlan entered promiscuous mode [ 1039.602318][T11591] device hsr_slave_0 entered promiscuous mode [ 1039.666299][T11591] device hsr_slave_1 entered promiscuous mode [ 1039.774698][T11591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1039.846647][T11591] Cannot create hsr debugfs directory [ 1040.054906][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1040.087988][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1040.527668][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1045.877538][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1045.888002][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1045.896778][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1045.904958][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1045.958861][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1045.966311][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1048.474966][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 1049.446227][T11718] syz.4.1447 (11718) used greatest stack depth: 19232 bytes left [ 1051.456626][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 1051.955054][ T9] device hsr_slave_0 left promiscuous mode [ 1052.042529][ T9] device hsr_slave_1 left promiscuous mode [ 1052.093113][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.147443][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.186779][ T9] device bridge_slave_1 left promiscuous mode [ 1052.214647][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.256372][ T9] device bridge_slave_0 left promiscuous mode [ 1052.285487][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.536649][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 1053.836625][ T129] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1054.066054][ T129] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 1054.111635][ T129] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1054.342917][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.350485][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.082535][ T129] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1055.104910][ T129] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1055.113531][ T129] usb 6-1: Product: syz [ 1055.126694][ T129] usb 6-1: Manufacturer: syz [ 1055.131872][ T129] usb 6-1: SerialNumber: syz [ 1055.143464][ T129] usb 6-1: config 0 descriptor?? [ 1055.152422][T11743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1055.177619][ T129] usb 6-1: selecting invalid altsetting 0 [ 1055.268569][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1055.616708][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 1055.763062][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1055.851967][T11743] usb 6-1: BOGUS urb xfer, pipe 0 != type 3 [ 1056.462899][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.678887][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.640546][ T129] usb 6-1: USB disconnect, device number 3 [ 1061.130656][ T9] bond0 (unregistering): Released all slaves [ 1061.550683][T11705] chnl_net:caif_netlink_parms(): no params data found [ 1062.048058][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.055237][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.138141][T11705] device bridge_slave_0 entered promiscuous mode [ 1062.169663][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.214815][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.308266][T11705] device bridge_slave_1 entered promiscuous mode [ 1062.516313][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.837737][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.208309][T11591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1063.243369][T11591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1063.318373][T11591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1063.501324][T11705] team0: Port device team_slave_0 added [ 1063.530261][T11705] team0: Port device team_slave_1 added [ 1063.583766][T11591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1063.756073][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.775552][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.976713][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.807162][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.886679][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.006885][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.455825][T11705] device hsr_slave_0 entered promiscuous mode [ 1067.647657][T11705] device hsr_slave_1 entered promiscuous mode [ 1067.686943][T11705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1067.695862][T11705] Cannot create hsr debugfs directory [ 1068.917034][ T26] audit: type=1804 audit(1791067400.437:2): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.099243][ T26] audit: type=1804 audit(1791067400.627:3): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.169842][T11591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.217128][ T26] audit: type=1804 audit(1791067400.657:4): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.316771][ T26] audit: type=1804 audit(1791067400.657:5): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.406882][ T26] audit: type=1804 audit(1791067400.657:6): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.466917][ T26] audit: type=1804 audit(1791067400.657:7): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.586694][ T26] audit: type=1804 audit(1791067400.657:8): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.664584][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 1069.707808][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 1069.744371][ T26] audit: type=1804 audit(1791067400.667:9): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.747836][T11591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.798111][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 1069.845109][ T26] audit: type=1804 audit(1791067400.707:10): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1069.946714][T11562] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1069.989679][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1070.004629][ T26] audit: type=1804 audit(1791067400.707:11): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/384/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1070.005307][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1070.156648][T11562] usb 6-1: Using ep0 maxpacket: 32 [ 1070.167392][T11562] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.276670][T11562] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1070.396563][T11562] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1070.456647][T11562] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1070.465751][T11562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.588843][T11562] usb 6-1: Product: syz [ 1070.593046][T11562] usb 6-1: Manufacturer: syz [ 1070.628947][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1070.648481][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1070.676468][T11562] usb 6-1: SerialNumber: syz [ 1070.698905][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 1070.713918][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.721926][T10820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.754396][T11562] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1070.797645][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1070.816838][T11562] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1070.823797][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1070.836630][T11562] imon:imon_probe: failed to initialize context! [ 1070.843091][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1070.850733][T11562] imon 6-1:155.0: unable to register, err -19 [ 1070.860192][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1070.953961][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1070.962820][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1070.980981][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1071.057438][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1071.173532][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1071.224372][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.231552][T10820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.370158][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1071.419072][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1071.457670][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1071.521720][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1071.583580][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1071.619779][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1071.678496][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1071.717579][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1071.790068][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1071.821921][T11591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1071.887697][T11591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1071.980905][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1072.000524][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1072.343330][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1072.494345][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1072.536360][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.217277][ T129] usb 6-1: USB disconnect, device number 4 [ 1073.409751][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1073.420441][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1073.429638][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1073.438480][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1073.532891][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1073.540927][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1074.772314][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1076.378196][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1077.013818][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1077.039965][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1077.049660][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1077.061829][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1077.072210][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1077.080432][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1077.276159][T11591] device veth0_vlan entered promiscuous mode [ 1077.333191][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1077.368680][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1077.671536][T11591] device veth1_vlan entered promiscuous mode [ 1077.734046][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1077.918257][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1078.707089][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1078.717474][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1078.782389][T11591] device veth0_macvtap entered promiscuous mode [ 1078.935212][T11591] device veth1_macvtap entered promiscuous mode [ 1079.105782][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.176578][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.236607][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.277893][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.346684][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.404452][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.737763][T11591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.753625][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1081.802848][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1081.824336][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1081.862520][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1081.892727][T11705] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1082.170383][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1082.186855][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1082.206864][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1082.215866][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1082.225132][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1082.232571][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1082.329208][T11705] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1082.378204][T11705] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1082.403014][T11705] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1082.846826][ T9] device hsr_slave_0 left promiscuous mode [ 1083.006871][ T9] device hsr_slave_1 left promiscuous mode [ 1083.132814][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.177208][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.197154][ T9] device bridge_slave_1 left promiscuous mode [ 1083.203399][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.344388][ T9] device bridge_slave_0 left promiscuous mode [ 1084.356727][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.585010][ T9] device veth1_vlan left promiscuous mode [ 1084.636725][ T9] device veth0_vlan left promiscuous mode [ 1084.807865][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1084.818505][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1084.827488][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1084.836824][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1084.846827][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1084.854552][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1085.387115][T11883] overlayfs: unrecognized mount option "verity=on" or missing value [ 1085.993440][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1086.005462][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1086.013763][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1086.023111][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1086.031099][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1086.038695][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1086.854827][T11445] syz.4.1402 (11445) used greatest stack depth: 17712 bytes left [ 1087.551630][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1087.935403][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1088.134233][T11891] [U] ¥ [ 1088.137332][T11891] [U] [ 1088.140035][T11891] [U] [ 1088.142738][T11891] [U] [ 1088.180507][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.207625][T11891] [U] [ 1088.210353][T11891] [U] [ 1088.213029][T11891] [U] [ 1088.215693][T11891] [U] [ 1088.261124][T11891] [U] [ 1088.263882][T11891] [U] [ 1088.266558][T11891] [U] [ 1088.269253][T11891] [U] [ 1088.326852][T11891] [U] [ 1088.329600][T11891] [U] [ 1088.332299][T11891] [U] [ 1088.334992][T11891] [U] [ 1088.409664][T11891] [U] [ 1088.412410][T11891] [U] [ 1088.415115][T11891] [U] [ 1088.417834][T11891] [U] [ 1088.423903][T11891] [U] [ 1088.426629][T11891] [U] [ 1088.429326][T11891] [U] [ 1088.432019][T11891] [U] [ 1088.438128][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.453967][T11891] [U] [ 1088.456704][T11891] [U] [ 1088.459430][T11891] [U] [ 1088.462126][T11891] [U] [ 1088.477692][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1088.493446][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1088.501565][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1088.515921][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1088.524953][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1088.532700][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1088.622846][T11891] [U] [ 1088.625608][T11891] [U] [ 1088.628326][T11891] [U] [ 1088.631027][T11891] [U] [ 1088.887100][T11891] [U] [ 1088.889855][T11891] [U] [ 1088.892550][T11891] [U] [ 1088.895222][T11891] [U] [ 1088.975725][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1088.988204][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1089.003265][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1089.011329][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1089.021320][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1089.028700][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1089.036822][T11891] [U] [ 1089.039546][T11891] [U] [ 1089.042239][T11891] [U] [ 1089.044934][T11891] [U] [ 1089.144088][T11891] [U] [ 1089.472967][ T9] bond0 (unregistering): Released all slaves [ 1089.783493][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.815013][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1089.825771][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1089.843514][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.892740][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1089.913433][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.929443][T11529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.936613][T11529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.963439][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1089.975015][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.992045][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1090.004585][T11529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.011751][T11529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.052503][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1090.099670][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1090.112931][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1090.125324][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1090.136455][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1090.149302][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1090.160505][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1090.189081][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1090.200656][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1090.210036][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1090.210643][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1090.224192][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1090.236180][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1090.247540][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1090.256395][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1090.260335][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1090.298281][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1090.308567][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1090.425491][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1090.467566][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1090.480646][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.054555][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1091.112504][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1091.275116][T11705] device veth0_vlan entered promiscuous mode [ 1091.325321][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1091.348060][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1091.397228][T11919] comedi comedi0: No hardware detected at I/O base 0x300 [ 1091.418545][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1091.427390][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1091.427735][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1091.445854][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1091.454440][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1091.463701][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1091.473449][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1091.482482][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1091.551351][T11705] device veth1_vlan entered promiscuous mode [ 1091.666992][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1091.675758][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1091.725615][T11705] device veth0_macvtap entered promiscuous mode [ 1091.744775][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1091.760194][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1091.805094][T11705] device veth1_macvtap entered promiscuous mode [ 1091.819672][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1091.832565][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1091.855990][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.873097][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.883785][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.900430][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.921198][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.945103][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.955366][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.971128][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.982735][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.998252][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1092.013825][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1092.068639][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.079549][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.090112][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.105059][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.116909][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.129450][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.145238][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.160585][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1092.188088][T11529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1092.250584][T11705] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.273289][T11705] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.283684][T11705] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.293868][T11705] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.489280][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1092.499511][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1092.521052][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1092.538543][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1092.547411][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1092.555409][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1092.625987][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.677186][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.685050][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.714409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1092.779519][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.859362][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.882310][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.956822][T11932] usb usb8: usbfs: process 11932 (syz.5.1473) did not claim interface 0 before use [ 1092.960105][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.053911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1093.186441][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.614372][ T9] tipc: Disabling bearer [ 1093.620700][ T9] tipc: Left network mode [ 1093.657260][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1093.667240][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1093.675594][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1093.685140][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1093.693232][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1093.701532][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1094.797809][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1094.807805][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1094.817062][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1094.834895][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1094.847361][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1094.855858][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1095.053167][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1095.064442][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1095.074377][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1095.085194][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1095.093447][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1095.101175][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1095.959758][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1095.978723][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1095.988289][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1096.000053][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1096.007722][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1096.015088][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1096.731733][ T9] device hsr_slave_0 left promiscuous mode [ 1096.754767][ T9] device hsr_slave_1 left promiscuous mode [ 1096.766954][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.774489][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.813408][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.842516][ T9] device bridge_slave_1 left promiscuous mode [ 1096.852367][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.882876][ T9] device bridge_slave_0 left promiscuous mode [ 1096.889265][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.908152][ T9] device hsr_slave_0 left promiscuous mode [ 1096.915575][ T9] device hsr_slave_1 left promiscuous mode [ 1096.941745][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.950523][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.981610][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.000451][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.022178][ T9] device bridge_slave_1 left promiscuous mode [ 1097.036769][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.065168][ T9] device bridge_slave_0 left promiscuous mode [ 1097.077912][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.153484][ T9] device veth1_macvtap left promiscuous mode [ 1097.180341][ T9] device veth0_macvtap left promiscuous mode [ 1097.186545][ T9] device veth1_vlan left promiscuous mode [ 1097.225353][ T9] device veth0_vlan left promiscuous mode [ 1097.242250][ T9] device veth1_macvtap left promiscuous mode [ 1097.256965][ T9] device veth0_macvtap left promiscuous mode [ 1097.264084][ T9] device veth1_vlan left promiscuous mode [ 1097.271717][ T9] device veth0_vlan left promiscuous mode [ 1097.272994][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1097.297153][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1097.307185][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1097.315319][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1097.331883][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1097.339360][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1097.457047][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1097.469033][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1097.477168][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1097.485474][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1097.542425][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1097.562747][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1098.632938][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1098.656633][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1098.667668][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1098.677685][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1098.680681][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1098.705024][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1098.712988][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1098.761127][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1098.873829][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.941668][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.412453][ T9] bond0 (unregistering): Released all slaves [ 1099.526908][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1099.543618][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1099.562036][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1099.582472][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1099.598556][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1099.613708][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1100.142634][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1100.162261][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1100.165011][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1100.182125][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.208505][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.208830][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1100.222264][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1100.230107][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1100.275157][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.335951][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.771655][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1100.772976][ T9] bond0 (unregistering): Released all slaves [ 1100.786851][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1100.799721][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.808617][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.816108][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1100.823534][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.524646][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1101.537223][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1101.547410][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1101.564029][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1101.573319][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1101.583127][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.981036][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1101.982327][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.992598][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1102.007972][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1102.016298][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1102.025406][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1102.032875][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1102.093063][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.170222][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.249242][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.496280][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1102.518710][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1102.528148][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1102.539280][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1102.552008][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1102.560782][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1103.050110][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1103.061507][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1103.072140][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1103.080029][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1103.087733][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1103.095653][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1103.471662][ T9] device hsr_slave_0 left promiscuous mode [ 1103.479202][ T9] device hsr_slave_1 left promiscuous mode [ 1103.490745][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.504302][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.515685][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.523382][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.532118][ T9] device bridge_slave_1 left promiscuous mode [ 1103.539925][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1103.542517][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.556554][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1103.564422][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1103.572735][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1103.582330][ T9] device bridge_slave_0 left promiscuous mode [ 1103.588860][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1103.589579][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.601741][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1103.640507][ T9] device veth1_macvtap left promiscuous mode [ 1103.646910][ T9] device veth0_macvtap left promiscuous mode [ 1103.653019][ T9] device veth1_vlan left promiscuous mode [ 1103.658922][ T9] device veth0_vlan left promiscuous mode [ 1104.146412][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1104.159172][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1104.174510][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1104.188776][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1104.196307][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1104.204052][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1104.391795][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1104.448922][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1104.510571][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.568942][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.696861][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1104.712598][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1104.730234][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1104.739185][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1104.757885][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1104.765237][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1105.054195][ T9] bond0 (unregistering): Released all slaves [ 1105.255771][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1105.264551][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1105.272380][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1105.282010][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1105.289644][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1105.299710][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1105.573447][T12117] comedi comedi0: No hardware detected at I/O base 0x300 [ 1105.638177][T12121] jffs2: notice: (12121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1105.749036][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1105.758626][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1105.766304][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1105.774525][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1105.787391][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1105.795333][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1106.087133][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1106.095947][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1106.108896][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1106.119335][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1106.127052][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1106.134583][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1106.473201][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1106.483212][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1106.492221][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1106.500251][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1106.510837][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1106.518465][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1106.806774][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1106.814728][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1106.824181][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1106.832601][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1106.841051][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1106.849738][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1107.187965][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1107.196021][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1107.205467][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1107.215363][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1107.222992][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1107.230341][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1107.528977][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1107.539673][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1107.547687][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1107.556066][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1107.564036][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1107.571302][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1107.890935][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1107.901237][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1107.913979][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1107.924839][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1107.938031][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1107.945704][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1108.255991][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1108.264255][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1108.273627][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1108.284036][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1108.291858][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1108.299125][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1109.479608][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1109.489464][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1109.498170][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1109.508033][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1109.517073][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1109.524340][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1109.812053][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1109.821746][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1109.829883][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1109.839642][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1109.848073][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1109.855301][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=1461 state=3 status=67 (errno 32: Broken pipe) [ 1111.140887][ T4570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.317963][ T4570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.509085][ T4570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.593539][ T4570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.726948][ T4570] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.873879][ T4570] tipc: Disabling bearer [ 1111.879543][ T4570] tipc: Left network mode [ 1112.692460][ T4570] device hsr_slave_0 left promiscuous mode [ 1112.699060][ T4570] device hsr_slave_1 left promiscuous mode [ 1112.705289][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.712778][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.720469][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.728250][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.735789][ T4570] device bridge_slave_1 left promiscuous mode [ 1112.742154][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.750177][ T4570] device bridge_slave_0 left promiscuous mode [ 1112.756336][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.775082][ T4570] device veth1_macvtap left promiscuous mode [ 1112.781620][ T4570] device veth0_macvtap left promiscuous mode [ 1112.788039][ T4570] device veth1_vlan left promiscuous mode [ 1112.793817][ T4570] device veth0_vlan left promiscuous mode [ 1113.205448][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 1113.242170][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 1113.279432][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.318560][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.572856][ T4570] bond0 (unregistering): Released all slaves [ 1114.055772][ T4570] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.130957][ T4570] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.180611][ T4570] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.249824][ T4570] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.461579][ T4570] tipc: Disabling bearer [ 1114.467180][ T4570] tipc: Left network mode [ 1115.203165][ T4570] device hsr_slave_0 left promiscuous mode [ 1115.209637][ T4570] device hsr_slave_1 left promiscuous mode [ 1115.215852][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.223497][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.231296][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.238856][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.249218][ T4570] device bridge_slave_1 left promiscuous mode [ 1115.255392][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.263721][ T4570] device bridge_slave_0 left promiscuous mode [ 1115.270011][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.287851][ T4570] device veth1_macvtap left promiscuous mode [ 1115.293879][ T4570] device veth0_macvtap left promiscuous mode [ 1115.300808][ T4570] device veth1_vlan left promiscuous mode [ 1115.306791][ T4570] device veth0_vlan left promiscuous mode [ 1115.724228][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 1115.759567][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 1115.782215][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.788769][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.812085][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.849195][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.094397][ T4570] bond0 (unregistering): Released all slaves