last executing test programs: 3m45.928149779s ago: executing program 2 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) setpriority(0x1, r1, 0x7) write(r4, &(0x7f0000000100), 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000004800"], 0x0, 0x28}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffda"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000"], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f00000002c0), &(0x7f0000000540)=""/138}, 0x20) 3m45.92626376s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)}, 0x20048000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000080000000102020000000000", @ANYRES32, @ANYBLOB="0000007ced0628db0000000000000000000000a9c23f880000", @ANYRES32=0x0, @ANYBLOB], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mremap(&(0x7f000057d000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f00002c0000/0x2000)=nil) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe730d03276346fbd}, 0x0) 3m44.72713266s ago: executing program 2 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10141) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1255,errors=continue,\x00'/49], 0x1, 0x1535, &(0x7f00000001c0)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000001940)={0x5660, 0x9, [{0x8, 0x1}, {0x3}, {0xe}, {0xf, 0x1}, {0xa}, {0xc}, {0x6}, {0xa, 0x1}, {0xe}]}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2c}) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r3 = syz_open_dev$media(0x0, 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x2}) syz_open_dev$radio(0x0, 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x24000) 3m44.227174727s ago: executing program 4 (id=15): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x20000000) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 3m42.710081887s ago: executing program 4 (id=17): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_iommufd/probability\x00', 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000400)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 3m40.965701546s ago: executing program 4 (id=18): ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x1}, 0x10}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000280)='./mytrace\x00', &(0x7f0000000200)='cifs\x00', 0x201400, 0x0) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r2, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffffffffffd16}}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000) io_uring_setup(0x5b7b, &(0x7f00000006c0)={0x0, 0x2cb, 0x4, 0x2000002, 0x1e1, 0x0, r0}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7d9900bd", @ANYRES16, @ANYRESDEC=r3], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) 3m40.585719162s ago: executing program 2 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 3m38.014259473s ago: executing program 2 (id=22): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x8008, &(0x7f00000000c0)=ANY=[], 0xfd, 0x149, &(0x7f00000009c0)="$eJzs0EFLOkEYx/Hvurrqf/WvQUHHwMtmmFrRLUijoEMJQZeuuVGwm6IQHuveoXt76AUsnnoBZScjIYpehjfBi7Exuy7YrRcwn8vM/J55nmV2d2tgkNUiTO007GbLbLfN+tJR7WAvFuZxIOHv7GZLJRXmTxU4F2sUhjdQB17SETwsc/W0YYnzsAIGSao6nF3E1LD3H1Cd/1oGyywT9Bu5JL2suGeZa3727Rk56C0EGTOqmSArAd72NJsLMjFvBHSc8AmF/GhDrYA28TyPjqPjvkantVtxKbWocmxqgCL6Pov9wnux634Mwu/d65vrpXLSrwPXd2K9ghP//krXVQ/f+vuFvCZmiD+qTDxHAdevD5+VNKAzrtnxYOBlZvY5vYdxzRYjHxOQBaXjqP+JKWE92Gi/TpIkSZIkSZIkSZL0Jz8BAAD//wFsTrE=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x46032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000053a000/0x1000)=nil, 0x1000, &(0x7f0000000000)='#\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x40048c4) syz_open_procfs(0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) acct(0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='posixacl\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM") mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m35.326380045s ago: executing program 2 (id=25): openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x46, 0x3e}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6b4e1c1017bef5ac, 0x0, &(0x7f0000000500)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000700)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x0, 0xff, 0x3}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write$P9_RSTATu(r6, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 3m31.120264895s ago: executing program 2 (id=29): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f45d2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e7f2378334000000000000000000", @ANYRESHEX=0x0], 0x4, 0xc24, &(0x7f0000001940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x220, 0x0, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg0\x00', {0x80, 0xd80, 0x1d, 0xffffff00, 0xfffffff4, 0xd, 0x60, 0xa0, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x6}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x101848a, &(0x7f00000001c0)=ANY=[], 0x0, 0x2c5, &(0x7f0000000480)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0xe9) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000002c0)={0x2000001, 0xfd, 0x0, 0xf83f, 0x5, "001204005f679300006a35c080c90a0080822b"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xa) getdents(r6, &(0x7f0000000080)=""/43, 0x2b) getdents(r6, 0xfffffffffffffffd, 0xbb) 3m25.859613599s ago: executing program 32 (id=18): ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x1}, 0x10}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000280)='./mytrace\x00', &(0x7f0000000200)='cifs\x00', 0x201400, 0x0) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r2, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffffffffffd16}}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000) io_uring_setup(0x5b7b, &(0x7f00000006c0)={0x0, 0x2cb, 0x4, 0x2000002, 0x1e1, 0x0, r0}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7d9900bd", @ANYRES16, @ANYRESDEC=r3], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) 3m14.866309028s ago: executing program 33 (id=29): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f45d2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e7f2378334000000000000000000", @ANYRESHEX=0x0], 0x4, 0xc24, &(0x7f0000001940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x220, 0x0, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg0\x00', {0x80, 0xd80, 0x1d, 0xffffff00, 0xfffffff4, 0xd, 0x60, 0xa0, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x6}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x101848a, &(0x7f00000001c0)=ANY=[], 0x0, 0x2c5, &(0x7f0000000480)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0xe9) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000002c0)={0x2000001, 0xfd, 0x0, 0xf83f, 0x5, "001204005f679300006a35c080c90a0080822b"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xa) getdents(r6, &(0x7f0000000080)=""/43, 0x2b) getdents(r6, 0xfffffffffffffffd, 0xbb) 3m4.446076475s ago: executing program 1 (id=49): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x4810, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64=0x0, @ANYRES16], 0x2, 0x1cf, &(0x7f0000000780)="$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") bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x87, 0x0, 0x101}]}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB], 0xb8}}, 0x0) socket$packet(0x11, 0x0, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000004e445429810206010200000000000000000200000004000761096235c0ca6716683a69"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) read(r1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000011c0)=[@in={0x2, 0x4e24, @multicast1}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'multiq3\x00', [0x140, 0x2, 0x3, 0x2, 0x0, 0x10000, 0x7ffd, 0x3, 0x1007, 0xc72d, 0x4, 0x10, 0xfc, 0x8, 0x4ce, 0x9e9b, 0x100, 0x401, 0x9, 0x8, 0x4, 0x0, 0x9, 0xc, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000140)={0x1, &(0x7f00000000c0)}) 3m2.418565414s ago: executing program 1 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x40, 0x2d, 0x107, 0x70bd2f, 0x27dfdbfe, {0x5, 0x7c}, [@nested={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}, @nested={0xc, 0xf4, 0x0, 0x1, [@nested={0x8, 0x63, 0x0, 0x1, [@nested={0x4, 0xf0}]}]}, @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@local}]}, @nested={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xc2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40048d1}, 0x4894) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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") r2 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x80000001, 0x1, {0x3, 0xff, 0x3, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) pipe(0x0) 2m57.83525796s ago: executing program 1 (id=54): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "6c99df9579b4fd0343e1894f944911e9"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3800) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x8, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0xffffffff, 0x10, 0x5, 0x0, 0xfeffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x15, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0x4, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x9, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x1, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x84, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x4, 0x400003, 0x6, 0x4, 0xff, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x5, 0x5, 0x1, 0x40006, 0x14c, 0x60a7, 0x6, 0xa, 0x5, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x5, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x3, 0x2000, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) 2m51.418771165s ago: executing program 1 (id=59): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x90000001}) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='0', 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0xa, 0x3, 0x9, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x96}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) recvmmsg(r9, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x935f}], 0x1, 0x40002140, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x1000000, 0x90, [0x0, 0x200000000840, 0x200000000870, 0x2000000008a0], 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0076d55c2200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000d8110000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000067c2576557b501cee7e33e6aa50adf429b4319"]}, 0x11f) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000380)={[{@noquota}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000001000)="$eJzs3LtvHNUaAPBv1s887eRG99487o0hICwCduwESEEBCKQ0ICQoQmkcE4U4CUqMRKKIGIRCifgLAiUSEhUNFUgIAQ0gWuhRpAi5iaFAi87ujL221/auH1mS/f2k8Z4zc2bOfDNzdo/n7GwAbWsg/ckitkfELxHRV80uLDBQfZmduTr+x8zV8SzK5Zd+zyrlbs9cHS+KFuttyzODpYjSe1nsr1PvpctXzo5NTk5czPPDU+feGL50+cqjZ86NnZ44PXF+9PjxY0dHnnh89LGG4ri2yvIU1+19b184sPfEKx8+P16OV7/7NO3v9nx5bRxV/Q3Vu7ziaJQr5ud3V/4+uM6t/9PsqElnnS3cEZrSERHpdHVV2n9fdMT8yeuL596dy3zdoh0ENk36bNq1ZG5HkcjKwD0si1bvAdAaxQd9+v+3mO5g96Plbj2d/k5U4p/Npx9eqB6bUuoA9Vf/Y+9YtF4pf/13nW32pvLVFcp9q9S/PSJOTv95I01R9z7ECrKGSwIAzPky9X8eqdf/Ky3o2+zMx1D6I+JwROyOiH9FxJ65nlDEfyLiv03WP7Aov7T/89OWJjfZlNT/ezIf2yqm6pIirmwut6MSf1f22pnJiSP5MRmMrp6UH1mhjq+e/fmD5ZYN1PT/0pTqL/qC+X7c7OxduM6psamxdYS8wK13IvZ11os/mxsJSEdgb0TsW8P20zE78/AnB1J657aly1ePfxlZPnCxTuWPIx6qnv/pWBR/TVWppuXGJ4d7Y3LiyHBxVSz1/Y/XX6zNd9WkF8Tf21hMvWsNto50/rcuuv6r28/jL+UVLhqvnW6ijuu/vr9sVAvi74gbszNZnMw3Xh1TLN3s7ImILfOHLV3/3dnLlXR3Pu+tsampiyMR3fmMBfNH5+sr8kX5FP/gofrtf3fEXx/l6+2PiHQR/y8i/h8RB/N9vy8i7o+IQyvE/+0zD7y+8hFaw/W/QVL8p+q+/81d//1Z7Xj9GhIdZ7/5Yrn6G3r/6zlWSQ3mcxp5/2t0B9dz7AAAAOBuUaqMQWeloSJdc3NqT2wtTV64NHV4IN48f6o6Vt0fXaXiTldfzf3QkfzecJEfTenu+fzRiNhV+abRlkp+aPzC5I5WBg5UntUp2n9PPm9oqPr62+IvvQD3nqbG0Wq/dPbZ5xu/M8Ad5XlNaF/aP7Qv7R/al/YP7ate+78WMduCXQHusMY+/8seN4d7kP4/tC/tH9rXfPv3jT9oI0sfiS9+bmUtT/rPJ3afWNfqm54o923KlqebX6tjkyKNmh/tWL5wFhFrqyJKK5fpjstXejconPQJtVKZ4qGVhjdYWrXMU6sdlq51/SZGShzMEz0R0eha1xo4pxt3/SSZ234AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBd7e8AAAD//14V3Cs=") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060300000000000000000007000000050001000600000005000500020000000500040037000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000a9ba7d1d2cfefc8ecef407db989ffd8e989d3d"], 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2m43.71329053s ago: executing program 1 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000480)="0c7d18b0d81b997e", 0x8}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000100)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x1000}) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'cp869'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r8, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000280)=0xfffffff8, 0x4) 2m39.907014967s ago: executing program 1 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) pipe(&(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc000) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x70) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000440)='./file0\x00', 0x20009a2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0xa) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0) 2m23.075329976s ago: executing program 34 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) pipe(&(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc000) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x70) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000440)='./file0\x00', 0x20009a2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0xa) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0) 25.660656142s ago: executing program 7 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 23.20613223s ago: executing program 0 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 19.634243609s ago: executing program 0 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 18.373997461s ago: executing program 0 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000080)="01", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='meas', 0x4) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 16.15139117s ago: executing program 0 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) 16.129881812s ago: executing program 5 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100020000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$eJzs3V1sZOdZB/DnnWPHY6e0TtNuWmjKSEXtymWj/equq0WVt3ENlbabql5X5Koef+x2FO94ZXvppkBlQAWJm4rcIG6QRYlA6gVXhEtcGqRWCAlVvSgXSJZoo1xw4YtKCFBqdM68Y493vVk3G39s8vtFzv/MmeeM34/xmWNpX58AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7nLp8+ko24FAHCYrk5+6fQ5n/8A8K5yze//AAAAAAAAAAAAAABw3KUo4kSkGHplM01XjzvqV1rt23emxif2PmwwRYpaFFV9+VU/c/bc+U9duDjazTc//u324Xhu8trlxrOLN28tzS8vz881ptqt2cW5+X2/wsMef7eRagAaN1+4PXf9+nLj7DPndj19Z/i1gcdPDF+6eOrCaLd2anxiYrKnpq//LX/3e9xvhcdjUUQzUrwx/HpqRkQtHn4sHvDeOWiDVSdGqk5MjU9UHVloNdsr5ZOplqtqEY2eg8a6Y3QIc/FQxiJWy+aXDR4puzd5q7nUnFmYb3yxubTSWmkttlOt09qyP42oxWiKWIuIjYF7X64/ivhopHjp9GaaiYiiOw6frBYGP7g9tQPo4z6U7Wz0R6zVHoE5O8YGooirkeJnr56M2XLM8ld8POILZb4S8XKZn4lI5RvjfMRP93gf8WjqiyL+NVIsps00V50PuueVK19ufL59fbGntnteeeQ/Hw7TMT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25Hij57+nWpdcVTr0t93afQ9z/9m75rxpx7wOmXtMxGxWtvfmtz+vHQ41cr/DqBj7Es9ivhGXv/3B0fdGAAAAAAAAAAAAAAAAAAAgHe1Ip6PFF85dTKtRe89xVvtG41rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzjsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KhbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIZyLF+vP16vFaLeJaRPx8a2ur+vqfra2tiM1y+2EddV8BAAAAAAAAAAAAAAAAAADg2EpFfCxSPPm/m6kREXeGXxt4/MTwpYunLowWUUQqS3rrn5u8drnx7OLNW0vzy8vzc42pdmt2cW5+v9+ufqXVvn1nanziQDrzQIMH3P7B+rOLt15cat346sqezw/VL88sryw1Z/d+OgajFjHdu2ekavDU+ETV6IVWs10dmmr3aWAtYmy/nQEAAAAAAAAAAAAAAAAAAODYGEpFfC5S/OQ/zqfuuvG+zpr/X+o8KrZrX/69nb8FsHBXdvX+/YD9bKf9NnSkWnjfmBqfmJjs2d3Xf29p2aaUingqUnzipQ9V6+FTDO25Nr6se29Zd/N8rhv+lbJudVdVfWRqfKJxdbF96vLCwuJsc6U5szDfmLzVnN33Hw4AAAAAAAAAAAAAAAAAAACANzGUivhRpPivv/231L3vfF7/39d51LP+/zeqJfSVetqd26q1/e+t1vZ3tt93aXToo0/fb/9BrP8v25RSEd+MFOd+9KHqfvrd9f/Td9WWdX8SKV5/+iO5rvZYWdfsdqfzitdbC/Ony9q/jBS/+ka3NqraG7n2yZ3aM2XtYKT4883dtV/NtR/YqT1b1p6MFN/7z71rP7hTe66s/Umk+Ie/aXRrh8ra3821J3Zqn5ldXJh70LCW8/+dSPHXV38rdft83/nv+fsPq3fltnvm/M233675H+7Zt5rn9Y/z/DcfMP8XIsV36h/JdZ2xn8nPP1H9f2f+PxEp/v1fdtdez7Xv36k9s99uHbVy/r8dKb77Fz/e7nOe/zyyOzPUO/+/3Lc7t98lRzT/T/TsG87tmv0Fx+LdaPnFr7/QXFiYX7Jhw4aN7Y2jPjNxGMrP/z+NFP93okjd65j8+f+ezqOd67///sbO5/+lu3LbEX3+v79n36V81dLfF1FfuXmr/6mI+vKLXz/Vutm8MX9jvn32zOlPf/rCmdNnLvQ/1r2429na99i9E5Tz/4NI8cO/++H27zG7r//2vv4fuiu3HdH8P9nbp13XNfseinelcv7/KlI88dkfb/+++WbX/93f/09+bHdu//wd0fx/oGffcG5X6xccCwAAAAAAAAAAgEfJUCrizyLFb//hr6fuGqL9/Pu/ubty2xH9+68TPfvmDmldw74HGQDgGCmv/z4YKf5x6/vba7l3X//Fr3Vre6//7uc43P8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAedSmK+P1IMfTKZlofKB931K+02rfvTI1P7H3YYIoUtSiq+vKrfubsufOfunBxtJtXBg6zGx+O5yavXW48u3jz1tL88vL8XGOq3ZpdnJvf9ys87PF3G6kGsHHzhdtz168vN84+c27X03eGXxt4/MTwpYunLox2a6fGJyYme2r6+t/yd79Hus/+x6KI70eKN4ZfT98diKjFw4/FA947B22w6sRI1Ymp8YmqIwutZnulfDLVclUtotFz0Fh3jA5hLh7KWMRq2fyywSNl9yZvNZeaMwvzjS82l1ZaK63Fdqp1Wlv2pxG1GE0RaxGxscePZH8U8c1I8dLpzfRPAxFFdxw+eXXyS6fPPbg9tQPo4z6U7Wz0R6zVHoE5O8YGooi/jxQ/e/VkfG8goi86X/HxiC+U+UrEy2V+JiKVb4zzET891FM7B6kvijgfKRbTZnp1oDwfdM8rV77c+Hz7+mJPbfe88sh/PhymY35uqkcRP6jO+Jvpn/1cAwAAAAAAAAAAAAAAABwjRaxFiq+cOpmq9cHba4pb7RuNa82Zhc6yvu7av+6a6a2tra1G6uRYzumcqznXcq7n3MgZtXx8zrGc0zlXc67lXM+5kTOKfHzOsZzTOVdzruVcz7mRM/ry8TnHck7nXM25lnM950bOOCZr9wAAAAAAAAAAAAAAAAAAgHeWWhTVXdy/9bXNtDXQub/0dHRy3f1A3/H+PwAA//8YNXNU") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x11082, 0x0, 0xff, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 13.990744231s ago: executing program 3 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000400002000000e001"], 0x190) close(0x3) socket(0x2, 0x80802, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000480)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 12.561961269s ago: executing program 6 (id=199): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 12.503021831s ago: executing program 3 (id=200): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r3, 0x0) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f0000000040)) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) 12.422208074s ago: executing program 7 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 12.204328561s ago: executing program 6 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r7 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 10.941642742s ago: executing program 3 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x3012a02f128754aa) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x184}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0}}, 0x44004) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @rand_addr=0x64010102, @empty, @rand_addr=0x64010100}}}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) 10.940520856s ago: executing program 7 (id=204): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}}, 0x0) 9.990235271s ago: executing program 6 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 9.130895824s ago: executing program 3 (id=206): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000580), &(0x7f0000000640)=""/147}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000029c0), 0x4) syz_genetlink_get_family_id$l2tp(0x0, r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000150900010073"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getchain={0x3c, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [{0x8, 0xb, 0x67bf}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x800}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044084}, 0x500) 8.794893403s ago: executing program 5 (id=207): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000580), &(0x7f0000000640)=""/147}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000029c0), 0x4) syz_genetlink_get_family_id$l2tp(0x0, r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000150900010073"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getchain={0x3c, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [{0x8, 0xb, 0x67bf}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x800}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044084}, 0x500) 7.694484525s ago: executing program 6 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000400002000000e001"], 0x190) close(0x3) socket(0x2, 0x80802, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000480)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 7.653803169s ago: executing program 3 (id=209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0xff00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffff8, &(0x7f00003d6000/0x1000)=nil, 0x2) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 7.595409489s ago: executing program 0 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000400002000000e001"], 0x190) close(0x3) socket(0x2, 0x80802, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000480)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 6.388695826s ago: executing program 3 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 6.358388565s ago: executing program 7 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000400002000000e001"], 0x190) close(0x3) socket(0x2, 0x80802, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000480)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 6.258769751s ago: executing program 5 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 5.153799539s ago: executing program 7 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x186a0, 0x0) r2 = io_uring_setup(0x28bb, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x19, 0x200000000000000, 0x0) lseek(0xffffffffffffffff, 0x249f0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40941, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfea7) copy_file_range(r6, &(0x7f00000001c0)=0x69c2, r5, 0x0, 0xa003e458, 0x700000000000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES8], 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, 0x0) 3.981256984s ago: executing program 5 (id=215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0xff00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffff8, &(0x7f00003d6000/0x1000)=nil, 0x2) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 2.701102562s ago: executing program 5 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r7 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 1.539512438s ago: executing program 5 (id=217): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r0, 0x4, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r1, @ANYBLOB="0c009900080000005900000008000300", @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) write(r4, &(0x7f0000000480)='usbip-vudc.0', 0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 1.344088607s ago: executing program 6 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0x2d, 0x4e21, 0x6, @private0, 0xb96}}, 0x24) 923.5362ms ago: executing program 0 (id=219): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000029c0), 0x4) syz_genetlink_get_family_id$l2tp(0x0, r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000150900010073"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getchain={0x3c, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [{0x8, 0xb, 0x67bf}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x800}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044084}, 0x500) 205.075071ms ago: executing program 6 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), 0x0, 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) 0s ago: executing program 7 (id=221): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$cont(0x9, r0, 0xca, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x160, 0x1f8, 0x290, 0x328, 0xc8, 0x160, 0x1f8, 0x290, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x101, 0x181902) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc038563c, &(0x7f0000000300)={0x0, 0x101, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3fc000, 0x6, [0x0, 0x800000]}) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b", 0xf}], 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000040)={0x7, 0x3, 0xd, 0x40, 0x2, 0x9, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 76.925594][ T5604] cgroup: Unknown subsys name 'net' [ 77.076364][ T5604] cgroup: Unknown subsys name 'cpuset' [ 77.079369][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.731398][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.068920][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.070404][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.088941][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.089778][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.091518][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.100135][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.102115][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.102420][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.103215][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.104359][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.112685][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.112916][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.115184][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.122760][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.132265][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.176288][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.177462][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.177897][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.179183][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.192236][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.232845][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.234416][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.234894][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.235941][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.236940][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.213291][ T4933] Bluetooth: hci0: command tx timeout [ 83.213295][ T5628] Bluetooth: hci2: command tx timeout [ 83.213790][ T52] Bluetooth: hci1: command tx timeout [ 83.213940][ T5618] Bluetooth: hci3: command tx timeout [ 83.294829][ T5618] Bluetooth: hci4: command tx timeout [ 83.334516][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.334687][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.334831][ T5614] bridge_slave_0: entered allmulticast mode [ 83.336724][ T5614] bridge_slave_0: entered promiscuous mode [ 83.355618][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.355731][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.355854][ T5623] bridge_slave_0: entered allmulticast mode [ 83.358053][ T5623] bridge_slave_0: entered promiscuous mode [ 83.361151][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.361314][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.361436][ T5623] bridge_slave_1: entered allmulticast mode [ 83.365341][ T5623] bridge_slave_1: entered promiscuous mode [ 83.431396][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.431505][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.431616][ T5614] bridge_slave_1: entered allmulticast mode [ 83.433624][ T5614] bridge_slave_1: entered promiscuous mode [ 83.524268][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.524387][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.524514][ T5615] bridge_slave_0: entered allmulticast mode [ 83.526538][ T5615] bridge_slave_0: entered promiscuous mode [ 83.540373][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.555142][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.558456][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.589774][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.589892][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.590001][ T5615] bridge_slave_1: entered allmulticast mode [ 83.591233][ T5615] bridge_slave_1: entered promiscuous mode [ 83.619908][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.687258][ T5614] team0: Port device team_slave_0 added [ 83.701726][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.702825][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.702961][ T5620] bridge_slave_0: entered allmulticast mode [ 83.705473][ T5620] bridge_slave_0: entered promiscuous mode [ 83.726113][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.726236][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.726645][ T5630] bridge_slave_0: entered allmulticast mode [ 83.728831][ T5630] bridge_slave_0: entered promiscuous mode [ 83.758952][ T5614] team0: Port device team_slave_1 added [ 83.763305][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.763531][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.763633][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.763756][ T5620] bridge_slave_1: entered allmulticast mode [ 83.765737][ T5620] bridge_slave_1: entered promiscuous mode [ 83.770703][ T5623] team0: Port device team_slave_0 added [ 83.771046][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.772355][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.772486][ T5630] bridge_slave_1: entered allmulticast mode [ 83.774289][ T5630] bridge_slave_1: entered promiscuous mode [ 83.808560][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.826936][ T5623] team0: Port device team_slave_1 added [ 83.890917][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.892414][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.892430][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.892452][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.895879][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.895894][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.895916][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.917625][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.964303][ T5615] team0: Port device team_slave_0 added [ 83.968259][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.968994][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.969007][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.969029][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.017466][ T5615] team0: Port device team_slave_1 added [ 84.020565][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.020584][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.020609][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.098421][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.118318][ T5620] team0: Port device team_slave_0 added [ 84.140401][ T5614] hsr_slave_0: entered promiscuous mode [ 84.141193][ T5614] hsr_slave_1: entered promiscuous mode [ 84.157528][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.157545][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.157566][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.189223][ T5620] team0: Port device team_slave_1 added [ 84.227721][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.227739][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.227768][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.229941][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.229952][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.229968][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.233525][ T5630] team0: Port device team_slave_0 added [ 84.249897][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.249914][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.249937][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.290920][ T5630] team0: Port device team_slave_1 added [ 84.392860][ T5623] hsr_slave_0: entered promiscuous mode [ 84.393817][ T5623] hsr_slave_1: entered promiscuous mode [ 84.394305][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 84.394370][ T5623] Cannot create hsr debugfs directory [ 84.473326][ T5615] hsr_slave_0: entered promiscuous mode [ 84.474009][ T5615] hsr_slave_1: entered promiscuous mode [ 84.474467][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 84.474487][ T5615] Cannot create hsr debugfs directory [ 84.475411][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.475423][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.475444][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.556260][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.556278][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.556300][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.573759][ T5620] hsr_slave_0: entered promiscuous mode [ 84.574892][ T5620] hsr_slave_1: entered promiscuous mode [ 84.575574][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 84.575592][ T5620] Cannot create hsr debugfs directory [ 84.804667][ T5630] hsr_slave_0: entered promiscuous mode [ 84.805399][ T5630] hsr_slave_1: entered promiscuous mode [ 84.805863][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 84.805884][ T5630] Cannot create hsr debugfs directory [ 85.154165][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.164462][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.165411][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.173985][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.199263][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.202899][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.204481][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.213666][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.292211][ T5618] Bluetooth: hci2: command tx timeout [ 85.292251][ T5618] Bluetooth: hci3: command tx timeout [ 85.292279][ T5618] Bluetooth: hci1: command tx timeout [ 85.292300][ T5618] Bluetooth: hci0: command tx timeout [ 85.336745][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.341455][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.345532][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.355491][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.357914][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.367133][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.375054][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.384977][ T5618] Bluetooth: hci4: command tx timeout [ 85.385757][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.487033][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.493073][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.494959][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.505087][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.514405][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.529594][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.530516][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.539040][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.624926][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.663176][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.667642][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.668466][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.670851][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.693945][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.701621][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.714295][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.732415][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.737307][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.798404][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.798766][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.820046][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.826299][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.842886][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.846247][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.847008][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.849460][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.887085][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.887148][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.888990][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.891663][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.970975][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.058352][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.108752][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.111599][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.111715][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.191483][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.191683][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.211553][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.243838][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.295397][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.295521][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.341651][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.350586][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.350655][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.396049][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.396131][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.459366][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.478470][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.478592][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.599856][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.669324][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.669447][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.747925][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.748046][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.054349][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.137264][ T10] cfg80211: failed to load regulatory.db [ 87.373229][ T5618] Bluetooth: hci0: command tx timeout [ 87.373270][ T5618] Bluetooth: hci1: command tx timeout [ 87.373294][ T5618] Bluetooth: hci3: command tx timeout [ 87.373317][ T5618] Bluetooth: hci2: command tx timeout [ 87.406552][ T5614] veth0_vlan: entered promiscuous mode [ 87.447253][ T5614] veth1_vlan: entered promiscuous mode [ 87.452297][ T5618] Bluetooth: hci4: command tx timeout [ 87.678011][ T5614] veth0_macvtap: entered promiscuous mode [ 87.696425][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.707324][ T5614] veth1_macvtap: entered promiscuous mode [ 87.829249][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.880203][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.948828][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.986948][ T5623] veth0_vlan: entered promiscuous mode [ 88.059178][ T5623] veth1_vlan: entered promiscuous mode [ 88.064656][ T651] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.065693][ T651] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.066777][ T651] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.066931][ T651] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.178589][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.303040][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.336880][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.336904][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.383215][ T5623] veth0_macvtap: entered promiscuous mode [ 88.445435][ T5623] veth1_macvtap: entered promiscuous mode [ 88.447063][ T5615] veth0_vlan: entered promiscuous mode [ 88.491275][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.491298][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.534557][ T5630] veth0_vlan: entered promiscuous mode [ 88.548947][ T5615] veth1_vlan: entered promiscuous mode [ 88.570982][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.600251][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.627385][ T5630] veth1_vlan: entered promiscuous mode [ 88.680041][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.712137][ T97] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.712191][ T97] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.712228][ T97] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.712264][ T97] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822919][ T5615] veth0_macvtap: entered promiscuous mode [ 88.856189][ T5630] veth0_macvtap: entered promiscuous mode [ 88.872147][ T5630] veth1_macvtap: entered promiscuous mode [ 88.897131][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.909902][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.972107][ T97] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.972157][ T97] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.000983][ T97] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.001040][ T97] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.059024][ T5615] veth1_macvtap: entered promiscuous mode [ 89.347470][ T5620] veth0_vlan: entered promiscuous mode [ 89.454137][ T5628] Bluetooth: hci2: command tx timeout [ 89.454778][ T5628] Bluetooth: hci3: command tx timeout [ 89.455242][ T5628] Bluetooth: hci0: command tx timeout [ 89.456612][ T5618] Bluetooth: hci1: command tx timeout [ 89.512316][ T5620] veth1_vlan: entered promiscuous mode [ 89.533054][ T52] Bluetooth: hci4: command tx timeout [ 89.764855][ T5620] veth0_macvtap: entered promiscuous mode [ 89.771365][ T5620] veth1_macvtap: entered promiscuous mode [ 89.789463][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.795600][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.822335][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.828166][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.838368][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.838393][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.863729][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.865158][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.865205][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.865243][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.153199][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.153224][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.162702][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.162750][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.162786][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.162821][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.246974][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.246999][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.609349][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.609495][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.950394][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.950419][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.288232][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.288257][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.632048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.187700][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.187725][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.511403][ T651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.511428][ T651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.421951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.204208][ T5856] Zero length message leads to an empty skb [ 98.658093][ T5853] loop1: detected capacity change from 0 to 1024 [ 98.900632][ T5853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.934041][ T5864] loop2: detected capacity change from 0 to 256 [ 99.987549][ T5864] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 100.018747][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.995599][ T5878] ======================================================= [ 100.995599][ T5878] WARNING: The mand mount option has been deprecated and [ 100.995599][ T5878] and is ignored by this kernel. Remove the mand [ 100.995599][ T5878] option from the mount to silence this warning. [ 100.995599][ T5878] ======================================================= [ 102.215160][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 102.868099][ T5888] Config c/1 of g1 needs at least one function. [ 103.022861][ T5888] udc dummy_udc.0: failed to start g1: -22 [ 103.023186][ T5888] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 103.183317][ T5888] UDC core: g1: couldn't find an available UDC or it's busy [ 105.093033][ T5903] mmap: syz.0.20 (5903) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.324645][ T5911] loop2: detected capacity change from 0 to 8 [ 110.553385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.998035][ T5936] loop1: detected capacity change from 0 to 512 [ 113.112033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.454113][ T5936] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 113.454147][ T5936] EXT4-fs (loop1): group descriptors corrupted! [ 114.901654][ T5948] Bluetooth: MGMT ver 1.23 [ 116.193639][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32'. [ 116.859428][ T5952] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 116.859477][ T5952] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 116.859497][ T5952] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 116.907478][ T31] audit: type=1800 audit(1788497219.205:2): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.32" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 117.024480][ T5829] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.518111][ T5967] netlink: 'syz.0.35': attribute type 9 has an invalid length. [ 118.740902][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 118.740951][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 118.930784][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.934093][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.941326][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.957255][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.961224][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.148446][ T5976] 9pnet: Found fid 0 not clunked [ 121.135726][ T52] Bluetooth: hci5: command tx timeout [ 122.127265][ T5990] loop0: detected capacity change from 0 to 512 [ 122.856628][ T5990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 122.857457][ T5990] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.213650][ T52] Bluetooth: hci5: command tx timeout [ 123.269725][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.437589][ T5998] loop3: detected capacity change from 0 to 1024 [ 123.475560][ T5998] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.475599][ T5998] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.537210][ T5998] JBD2: no valid journal superblock found [ 123.564404][ T5998] EXT4-fs (loop3): Could not load journal inode [ 125.302051][ T52] Bluetooth: hci5: command tx timeout [ 125.805651][ T6007] loop2: detected capacity change from 0 to 2048 [ 125.806825][ T6007] udf: Unknown parameter '0000000000000000000000000000000000000000' [ 125.891866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 125.913962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #44!!! [ 125.951862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 126.011864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 126.061868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.222349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 126.263889][ T6007] xt_hashlimit: size too large, truncated to 1048576 [ 126.263957][ T6007] xt_hashlimit: max too large, truncated to 1048576 [ 126.266735][ T6007] Bluetooth: ISO socket layer initialized [ 127.796933][ T52] Bluetooth: hci5: command tx timeout [ 128.394596][ T5828] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.415695][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 129.143761][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.152271][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.153870][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.183776][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.185934][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.492486][ T52] Bluetooth: hci2: command tx timeout [ 131.621647][ T5828] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.018198][ T6015] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 133.055448][ T6031] loop1: detected capacity change from 0 to 512 [ 133.531898][ T52] Bluetooth: hci2: command tx timeout [ 134.049899][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.049985][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.087939][ T6031] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.087973][ T6031] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.087981][ T6031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.324412][ T5828] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.359975][ T6031] EXT4-fs (loop1): 1 truncate cleaned up [ 135.378135][ T6031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.458805][ T6031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.612032][ T52] Bluetooth: hci2: command tx timeout [ 135.926363][ T5828] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.456742][ T1115] IPVS: starting estimator thread 0... [ 136.612717][ T6047] IPVS: using max 27 ests per chain, 64800 per kthread [ 136.984944][ T6050] loop1: detected capacity change from 0 to 256 [ 137.143125][ T6050] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 137.148561][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 137.420383][ T6060] overlay: ./file0 is not a directory [ 137.763692][ T52] Bluetooth: hci2: command tx timeout [ 138.446313][ T5828] bridge_slave_1: left allmulticast mode [ 138.446357][ T5828] bridge_slave_1: left promiscuous mode [ 138.447917][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.555566][ T5828] bridge_slave_0: left allmulticast mode [ 138.565305][ T5828] bridge_slave_0: left promiscuous mode [ 138.566834][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.898510][ T6065] loop1: detected capacity change from 0 to 8 [ 139.005229][ T6065] SQUASHFS error: zlib decompression failed, data probably corrupt [ 139.005329][ T6065] SQUASHFS error: Failed to read block 0x9b: -5 [ 139.005455][ T6065] SQUASHFS error: Unable to read metadata cache entry [99] [ 139.005492][ T6065] SQUASHFS error: Unable to read inode 0x127 [ 139.591950][ T2234] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.868069][ T2234] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 139.908722][ T2234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.908821][ T2234] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.013798][ T2234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.013904][ T2234] usb 1-1: Product: syz [ 140.013994][ T2234] usb 1-1: Manufacturer: syz [ 140.014011][ T2234] usb 1-1: SerialNumber: syz [ 140.596537][ T2234] usb 1-1: config 0 descriptor?? [ 140.620700][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.635921][ T2234] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 140.664575][ T2234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.666474][ T2234] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 140.666537][ T2234] usb 1-1: media controller created [ 140.670676][ T6070] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 140.670743][ T6070] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 140.725868][ T2234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.856725][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.863912][ T5828] bond0 (unregistering): Released all slaves [ 141.065563][ T2234] DVB: Unable to find symbol tda10046_attach() [ 141.065584][ T2234] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 141.065600][ T2234] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 141.388971][ T6070] loop1: detected capacity change from 0 to 32768 [ 141.400801][ T6070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.51 (6070) [ 141.459852][ T6070] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.459919][ T6070] BTRFS info (device loop1): using sha256 checksum algorithm [ 141.655602][ T6070] BTRFS info (device loop1): enabling ssd optimizations [ 141.655648][ T6070] BTRFS info (device loop1): turning on sync discard [ 141.655706][ T6070] BTRFS info (device loop1): enabling free space tree [ 141.771573][ T31] audit: type=1800 audit(1788497244.115:3): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 142.341408][ T6097] overlay: Unknown parameter '/' [ 143.573752][ T2234] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 145.564964][ T5615] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.787846][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.788209][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.788640][ T5970] bridge_slave_0: entered allmulticast mode [ 145.808760][ T5970] bridge_slave_0: entered promiscuous mode [ 146.287499][ T6111] usbip-vudc usbip-vudc.0: gadget not bound [ 146.630744][ T5721] usb 1-1: USB disconnect, device number 3 [ 148.158475][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.158679][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.158849][ T5970] bridge_slave_1: entered allmulticast mode [ 148.219436][ T5970] bridge_slave_1: entered promiscuous mode [ 149.310244][ T6122] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.488331][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.574327][ T5828] hsr_slave_0: left promiscuous mode [ 152.579336][ T5828] hsr_slave_1: left promiscuous mode [ 152.594729][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.594793][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.611594][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.611618][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.258852][ T5828] veth1_macvtap: left promiscuous mode [ 154.260000][ T5828] veth0_macvtap: left promiscuous mode [ 154.286884][ T5828] veth1_vlan: left promiscuous mode [ 154.288438][ T5828] veth0_vlan: left promiscuous mode [ 157.779224][ T6150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.62'. [ 157.779263][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 158.196504][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 158.277481][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 158.804378][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.827067][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 159.149444][ T5970] team0: Port device team_slave_0 added [ 159.163973][ T5970] team0: Port device team_slave_1 added [ 160.740052][ T6166] loop1: detected capacity change from 0 to 1024 [ 162.949946][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.949966][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.949991][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.417250][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.417313][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.417378][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.539963][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 165.448444][ T6190] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 168.133244][ T6192] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 168.133287][ T6192] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 168.133326][ T6192] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 168.139736][ T6192] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 168.150384][ T6192] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 168.413640][ T5970] hsr_slave_0: entered promiscuous mode [ 168.416648][ T5970] hsr_slave_1: entered promiscuous mode [ 168.417496][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 168.417518][ T5970] Cannot create hsr debugfs directory [ 172.728369][ T5922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.041394][ T6207] loop0: detected capacity change from 0 to 32768 [ 173.043053][ T6207] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 173.077701][ T6207] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.71 (6207) [ 173.086899][ T6207] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 173.086970][ T6207] BTRFS info (device loop0): using crc32c checksum algorithm [ 173.256751][ T6207] BTRFS info (device loop0): rebuilding free space tree [ 173.292595][ T6207] BTRFS info (device loop0): disabling free space tree [ 173.292858][ T6207] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.292923][ T6207] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.345218][ T6207] BTRFS info (device loop0): enabling ssd optimizations [ 173.345294][ T6207] BTRFS info (device loop0): turning on async discard [ 173.345353][ T6207] BTRFS info (device loop0): force clearing of disk cache [ 173.345392][ T6207] BTRFS info (device loop0): use zstd compression, level 3 [ 175.022967][ T5922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.044823][ T5623] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.295048][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 178.497790][ T6258] process 'syz.1.67' launched './file0' with NULL argv: empty string added [ 179.343330][ T5922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.558507][ T6261] loop3: detected capacity change from 0 to 64 [ 179.995251][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.995375][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.995536][ T6018] bridge_slave_0: entered allmulticast mode [ 180.047639][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.055126][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.065195][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.082936][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.083932][ T6018] bridge_slave_0: entered promiscuous mode [ 180.093435][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.024852][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.024980][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.025171][ T6018] bridge_slave_1: entered allmulticast mode [ 181.059102][ T6018] bridge_slave_1: entered promiscuous mode [ 181.578047][ T5922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.812333][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.838416][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.842780][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.862401][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.869157][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.908123][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.935037][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.191212][ T5618] Bluetooth: hci4: command tx timeout [ 183.533397][ T6018] team0: Port device team_slave_0 added [ 183.557620][ T6018] team0: Port device team_slave_1 added [ 183.932197][ T5618] Bluetooth: hci1: command tx timeout [ 183.965341][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.965363][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.965390][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.040956][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.040976][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.041002][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.263553][ T5618] Bluetooth: hci4: command tx timeout [ 184.424882][ T5922] bridge_slave_1: left allmulticast mode [ 184.424912][ T5922] bridge_slave_1: left promiscuous mode [ 184.425143][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.812139][ T5922] bridge_slave_0: left allmulticast mode [ 184.812237][ T5922] bridge_slave_0: left promiscuous mode [ 184.859616][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.331966][ T5618] Bluetooth: hci1: command tx timeout [ 186.343452][ T52] Bluetooth: hci4: command tx timeout [ 187.806109][ T6308] 9p: Bad value for 'wfdno' [ 188.305578][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.323597][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.405625][ T5922] bond0 (unregistering): Released all slaves [ 188.432059][ T5618] Bluetooth: hci4: command tx timeout [ 188.755027][ T5618] Bluetooth: hci1: command tx timeout [ 189.063334][ T6018] hsr_slave_0: entered promiscuous mode [ 189.069171][ T6018] hsr_slave_1: entered promiscuous mode [ 189.111449][ T6018] debugfs: 'hsr0' already exists in 'hsr' [ 189.111530][ T6018] Cannot create hsr debugfs directory [ 189.723651][ T6318] loop0: detected capacity change from 0 to 1024 [ 189.835815][ T6318] hfsplus: failed to load catalog file [ 190.452463][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.472357][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.490670][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.509286][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.520268][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.812103][ T52] Bluetooth: hci1: command tx timeout [ 191.370237][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 192.812232][ T52] Bluetooth: hci5: command tx timeout [ 193.356397][ T5922] hsr_slave_0: left promiscuous mode [ 193.367264][ T5922] hsr_slave_1: left promiscuous mode [ 193.377905][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.377929][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.381653][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.381674][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.459785][ T5922] veth1_macvtap: left promiscuous mode [ 193.459831][ T5922] veth0_macvtap: left promiscuous mode [ 193.459941][ T5922] veth1_vlan: left promiscuous mode [ 193.460037][ T5922] veth0_vlan: left promiscuous mode [ 193.790672][ T6347] loop3: detected capacity change from 0 to 8 [ 193.817322][ T6347] SQUASHFS error: zlib decompression failed, data probably corrupt [ 193.817421][ T6347] SQUASHFS error: Failed to read block 0x9b: -5 [ 193.817480][ T6347] SQUASHFS error: Unable to read metadata cache entry [99] [ 193.817516][ T6347] SQUASHFS error: Unable to read inode 0x127 [ 194.685491][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.908160][ T52] Bluetooth: hci5: command tx timeout [ 195.954758][ T5922] team0 (unregistering): Port device team_slave_1 removed [ 195.989647][ T5922] team0 (unregistering): Port device team_slave_0 removed [ 196.973134][ T52] Bluetooth: hci5: command tx timeout [ 197.987160][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.987341][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.987483][ T6319] bridge_slave_0: entered allmulticast mode [ 197.991444][ T6319] bridge_slave_0: entered promiscuous mode [ 198.033587][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.033717][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.034201][ T6319] bridge_slave_1: entered allmulticast mode [ 198.064358][ T6319] bridge_slave_1: entered promiscuous mode [ 198.228314][ T6319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.312715][ T6319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.418188][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.418321][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.418777][ T6263] bridge_slave_0: entered allmulticast mode [ 198.450185][ T6263] bridge_slave_0: entered promiscuous mode [ 198.489794][ T6319] team0: Port device team_slave_0 added [ 198.499382][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.499627][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.499810][ T6263] bridge_slave_1: entered allmulticast mode [ 198.552974][ T6263] bridge_slave_1: entered promiscuous mode [ 199.106661][ T52] Bluetooth: hci5: command tx timeout [ 199.580886][ T31] audit: type=1326 audit(1788497301.495:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.0.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed19d9e159 code=0x0 [ 201.016548][ T6319] team0: Port device team_slave_1 added [ 201.062945][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 201.087870][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.266073][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.377817][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.377837][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.377862][ T6319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.953336][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.953356][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.953382][ T6319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.148095][ T6263] team0: Port device team_slave_0 added [ 204.110586][ T6263] team0: Port device team_slave_1 added [ 204.297492][ T6319] hsr_slave_0: entered promiscuous mode [ 204.331018][ T6319] hsr_slave_1: entered promiscuous mode [ 204.351296][ T6319] debugfs: 'hsr0' already exists in 'hsr' [ 204.351323][ T6319] Cannot create hsr debugfs directory [ 205.365663][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.365684][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.365708][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.413996][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.414034][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.414096][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.554736][ T5922] bridge_slave_1: left allmulticast mode [ 205.554775][ T5922] bridge_slave_1: left promiscuous mode [ 205.555062][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.591696][ T5922] bridge_slave_0: left allmulticast mode [ 205.591734][ T5922] bridge_slave_0: left promiscuous mode [ 205.605413][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.731011][ T5922] bridge_slave_1: left allmulticast mode [ 205.731101][ T5922] bridge_slave_1: left promiscuous mode [ 205.742309][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.779765][ T5922] bridge_slave_0: left allmulticast mode [ 205.779838][ T5922] bridge_slave_0: left promiscuous mode [ 205.805890][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.351707][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.400570][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.427351][ T5922] bond0 (unregistering): Released all slaves [ 206.990824][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 207.018602][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.021443][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.045921][ T5922] bond0 (unregistering): Released all slaves [ 207.068575][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.068698][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.068875][ T6276] bridge_slave_0: entered allmulticast mode [ 207.525039][ T6276] bridge_slave_0: entered promiscuous mode [ 207.535712][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.535831][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.535968][ T6276] bridge_slave_1: entered allmulticast mode [ 207.539963][ T6276] bridge_slave_1: entered promiscuous mode [ 207.677382][ T6263] hsr_slave_0: entered promiscuous mode [ 207.678619][ T6263] hsr_slave_1: entered promiscuous mode [ 207.679438][ T6263] debugfs: 'hsr0' already exists in 'hsr' [ 207.679459][ T6263] Cannot create hsr debugfs directory [ 208.668146][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.750739][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.119073][ T5922] hsr_slave_0: left promiscuous mode [ 209.119884][ T5922] hsr_slave_1: left promiscuous mode [ 209.120890][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.135591][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.206058][ T5922] hsr_slave_0: left promiscuous mode [ 209.207038][ T5922] hsr_slave_1: left promiscuous mode [ 209.208027][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.208781][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.309135][ T5922] team0 (unregistering): Port device team_slave_1 removed [ 209.339796][ T5922] team0 (unregistering): Port device team_slave_0 removed [ 210.077373][ T6453] jffs2: notice: (6453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.210033][ T5922] team0 (unregistering): Port device team_slave_1 removed [ 210.413737][ T5922] team0 (unregistering): Port device team_slave_0 removed [ 211.436475][ T6461] zero sized request [ 214.093571][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 214.293382][ T6276] team0: Port device team_slave_0 added [ 214.381580][ T6276] team0: Port device team_slave_1 added [ 214.425374][ T5746] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 219.474433][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.474462][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.474490][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.587640][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.587702][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.587768][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.983878][ T6276] hsr_slave_0: entered promiscuous mode [ 219.986705][ T6276] hsr_slave_1: entered promiscuous mode [ 219.988728][ T6276] debugfs: 'hsr0' already exists in 'hsr' [ 219.988772][ T6276] Cannot create hsr debugfs directory [ 220.499460][ T6263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.522185][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.565997][ T6263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.615306][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.616312][ T6263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.644345][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.695997][ T6263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.726453][ T6263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.314579][ T6319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 221.383556][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.401462][ T6319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 221.442828][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.443826][ T6319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 221.479835][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.492661][ T6319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 221.515400][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.793975][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.833862][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.948419][ T6263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.948447][ T6263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.259090][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.259353][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.724926][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.725037][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.006792][ T6506] batman_adv: batadv0: Adding interface: veth0 [ 223.006814][ T6506] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.006845][ T6506] batman_adv: batadv0: Interface activated: veth0 [ 223.178165][ T6502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.178235][ T6502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.219029][ T6502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.219099][ T6502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.240622][ T6502] batman_adv: batadv0: Interface deactivated: veth0 [ 223.247707][ T6502] batman_adv: batadv0: Removing interface: veth0 [ 223.622126][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 223.646511][ T6276] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.677658][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.678643][ T6276] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 223.740972][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.006712][ T6276] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 224.023996][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.026992][ T6276] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 224.051208][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.972838][ T6319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.090059][ T6319] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.265319][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.265446][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.291620][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.291735][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.507504][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.520334][ T6319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.520359][ T6319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.554481][ T6550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.554512][ T6550] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 226.700127][ T6550] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 226.700157][ T6550] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 226.758630][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.561309][ T6566] ubi0: attaching mtd0 [ 227.569741][ T6566] ubi0: scanning is finished [ 227.569934][ T6566] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 227.634204][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.671902][ T6550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.671929][ T6550] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 227.681106][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.681213][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.705940][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.706054][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.829018][ T6550] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 227.829046][ T6550] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 228.096926][ T6566] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 230.831263][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 231.219310][ T6263] veth0_vlan: entered promiscuous mode [ 231.536019][ T6263] veth1_vlan: entered promiscuous mode [ 232.777087][ T6263] veth0_macvtap: entered promiscuous mode [ 232.807861][ T6263] veth1_macvtap: entered promiscuous mode [ 233.091735][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.534512][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.478037][ T651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.479542][ T5841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.479622][ T5841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.493130][ T5841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.638544][ T6319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.908602][ T6099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.427869][ T6099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.838744][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.632183][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.639014][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.665598][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.905172][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.347432][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.359163][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.360285][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.379534][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.393468][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.919956][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.943547][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.945776][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.950431][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.951309][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.951516][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.958443][ T6099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.013777][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.018172][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.019483][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.058257][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.983541][ T6099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.383272][ T5618] Bluetooth: hci2: command tx timeout [ 247.383784][ T5618] Bluetooth: hci6: command tx timeout [ 248.027957][ T6695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.027986][ T6695] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 248.118349][ T6695] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 248.118378][ T6695] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 248.517440][ T6319] veth0_vlan: entered promiscuous mode [ 248.826174][ T6319] veth1_vlan: entered promiscuous mode [ 249.095925][ T6099] bridge_slave_1: left allmulticast mode [ 249.095954][ T6099] bridge_slave_1: left promiscuous mode [ 249.096193][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.126144][ T6099] bridge_slave_0: left allmulticast mode [ 249.126173][ T6099] bridge_slave_0: left promiscuous mode [ 249.126426][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.982712][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.007392][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.023614][ T6099] bond0 (unregistering): Released all slaves [ 250.798355][ T6099] hsr_slave_0: left promiscuous mode [ 250.808579][ T6099] hsr_slave_1: left promiscuous mode [ 250.809676][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.809697][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.810699][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.810718][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.861239][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.872215][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.875330][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.877653][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.880439][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.926966][ T6099] veth1_macvtap: left promiscuous mode [ 250.927017][ T6099] veth0_macvtap: left promiscuous mode [ 250.927145][ T6099] veth1_vlan: left promiscuous mode [ 250.927217][ T6099] veth0_vlan: left promiscuous mode [ 250.958143][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.963608][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.964926][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.975347][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.977861][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.596818][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 251.624823][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 251.821209][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 252.456245][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.456451][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.456601][ T6655] bridge_slave_0: entered allmulticast mode [ 252.460236][ T6655] bridge_slave_0: entered promiscuous mode [ 252.495090][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.495213][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.495365][ T6655] bridge_slave_1: entered allmulticast mode [ 252.497408][ T6655] bridge_slave_1: entered promiscuous mode [ 252.727829][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.755763][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.902353][ T6655] team0: Port device team_slave_0 added [ 252.945311][ T6655] team0: Port device team_slave_1 added [ 253.011993][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.012013][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.012038][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.048358][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.048384][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.048407][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.063103][ T52] Bluetooth: hci1: command tx timeout [ 253.143910][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.144081][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.144197][ T6663] bridge_slave_0: entered allmulticast mode [ 253.145443][ T6663] bridge_slave_0: entered promiscuous mode [ 253.199077][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.199199][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.199656][ T6663] bridge_slave_1: entered allmulticast mode [ 253.227105][ T6663] bridge_slave_1: entered promiscuous mode [ 253.285258][ T6655] hsr_slave_0: entered promiscuous mode [ 253.286412][ T6655] hsr_slave_1: entered promiscuous mode [ 253.287212][ T6655] debugfs: 'hsr0' already exists in 'hsr' [ 253.287233][ T6655] Cannot create hsr debugfs directory [ 253.431633][ T6663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.449779][ T6663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.581235][ T6663] team0: Port device team_slave_0 added [ 253.651072][ T6663] team0: Port device team_slave_1 added [ 253.894421][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.894442][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.894482][ T6663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.953335][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.953353][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.953379][ T6663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.966530][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 254.045850][ T6723] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.046066][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.046206][ T6723] bridge_slave_0: entered allmulticast mode [ 254.049756][ T6723] bridge_slave_0: entered promiscuous mode [ 254.142648][ T6723] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.142770][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.142935][ T6723] bridge_slave_1: entered allmulticast mode [ 254.145162][ T6723] bridge_slave_1: entered promiscuous mode [ 254.189741][ T6663] hsr_slave_0: entered promiscuous mode [ 254.191043][ T6663] hsr_slave_1: entered promiscuous mode [ 254.192437][ T6663] debugfs: 'hsr0' already exists in 'hsr' [ 254.192458][ T6663] Cannot create hsr debugfs directory [ 254.241136][ T6655] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.346791][ T6723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.418837][ T6723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.459146][ T6655] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.586229][ T6723] team0: Port device team_slave_0 added [ 254.616174][ T6655] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.675085][ T6723] team0: Port device team_slave_1 added [ 254.778111][ T6655] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.811344][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 254.814708][ T6723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.814726][ T6723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.814749][ T6723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.870812][ T6723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.870825][ T6723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.870841][ T6723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.037174][ T6099] bridge_slave_1: left allmulticast mode [ 255.037198][ T6099] bridge_slave_1: left promiscuous mode [ 255.037347][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.041199][ T6099] bridge_slave_0: left allmulticast mode [ 255.041220][ T6099] bridge_slave_0: left promiscuous mode [ 255.041357][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.093381][ T6099] bridge_slave_1: left allmulticast mode [ 255.093410][ T6099] bridge_slave_1: left promiscuous mode [ 255.093655][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.099947][ T6099] bridge_slave_0: left allmulticast mode [ 255.099975][ T6099] bridge_slave_0: left promiscuous mode [ 255.100185][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.142468][ T52] Bluetooth: hci1: command tx timeout [ 255.157677][ T6099] bridge_slave_1: left allmulticast mode [ 255.157705][ T6099] bridge_slave_1: left promiscuous mode [ 255.157933][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.161209][ T6099] bridge_slave_0: left allmulticast mode [ 255.161235][ T6099] bridge_slave_0: left promiscuous mode [ 255.161457][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.517193][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.520279][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.526516][ T6099] bond0 (unregistering): Released all slaves [ 255.698243][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.704018][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.721061][ T6099] bond0 (unregistering): Released all slaves [ 255.831343][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.847776][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.849281][ T6099] bond0 (unregistering): Released all slaves [ 255.876533][ T6723] hsr_slave_0: entered promiscuous mode [ 255.877249][ T6723] hsr_slave_1: entered promiscuous mode [ 255.877732][ T6723] debugfs: 'hsr0' already exists in 'hsr' [ 255.877753][ T6723] Cannot create hsr debugfs directory [ 255.882465][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 256.102468][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.214164][ T6099] hsr_slave_0: left promiscuous mode [ 256.215034][ T6099] hsr_slave_1: left promiscuous mode [ 256.216038][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.217427][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.230576][ T6099] hsr_slave_0: left promiscuous mode [ 256.236534][ T6099] hsr_slave_1: left promiscuous mode [ 256.237552][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.244785][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.283260][ T6099] hsr_slave_0: left promiscuous mode [ 256.284329][ T6099] hsr_slave_1: left promiscuous mode [ 256.285405][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.285427][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.286519][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.286539][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.361475][ T6099] veth1_vlan: left promiscuous mode [ 256.361578][ T6099] veth0_vlan: left promiscuous mode [ 256.373849][ T6099] veth1_macvtap: left promiscuous mode [ 256.374122][ T6099] veth0_macvtap: left promiscuous mode [ 256.374248][ T6099] veth1_vlan: left promiscuous mode [ 256.374352][ T6099] veth0_vlan: left promiscuous mode [ 256.878599][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 256.903486][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 257.105138][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 257.123075][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 257.212095][ T52] Bluetooth: hci1: command tx timeout [ 257.370847][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 257.397071][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 257.989587][ T6655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.038569][ T6655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.039722][ T6655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.049394][ T6655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.053342][ T6655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.065983][ T6655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.070059][ T6655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.087359][ T6655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.437150][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.488930][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.498750][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.498888][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.508241][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.508346][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.001611][ T6663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 259.033879][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.034806][ T6663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 259.049755][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 259.053522][ T6663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 259.071110][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 259.075553][ T6663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 259.088983][ T6663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.292188][ T52] Bluetooth: hci1: command tx timeout [ 259.299733][ T6723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.320281][ T6723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.329670][ T6723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 259.343926][ T6723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 259.348276][ T6723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 259.373178][ T6723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 259.377572][ T6723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 259.397180][ T6723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.519195][ T6663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.588664][ T6663] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.617290][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.617404][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.640392][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.640514][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.800200][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.838382][ T6723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.915044][ T6723] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.936161][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.936283][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.949847][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.949975][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.553183][ T6655] veth0_vlan: entered promiscuous mode [ 260.579437][ T6655] veth1_vlan: entered promiscuous mode [ 260.704488][ T6655] veth0_macvtap: entered promiscuous mode [ 260.718822][ T6655] veth1_macvtap: entered promiscuous mode [ 260.810417][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.832454][ T6663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.860553][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.993799][ T6202] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.997192][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.014832][ T5841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.016126][ T6202] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.149064][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.149089][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.267396][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.267429][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.339326][ T6723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.648054][ T6954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.134'. [ 262.872938][ T6663] veth0_vlan: entered promiscuous mode [ 262.909669][ T6663] veth1_vlan: entered promiscuous mode [ 263.074906][ T6663] veth0_macvtap: entered promiscuous mode [ 263.094898][ T6663] veth1_macvtap: entered promiscuous mode [ 263.190082][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.238979][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.386523][ T5924] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.402145][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.422052][ T6099] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.422105][ T6099] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.484031][ T6723] veth0_vlan: entered promiscuous mode [ 263.544335][ T6723] veth1_vlan: entered promiscuous mode [ 263.602377][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.602402][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.726257][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.726277][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.820251][ T6723] veth0_macvtap: entered promiscuous mode [ 263.843755][ T6723] veth1_macvtap: entered promiscuous mode [ 263.910285][ T6723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.944871][ T6723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.022927][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.022963][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.022985][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.023006][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.166459][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.166477][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.667900][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.667925][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.149314][ T7020] loop0: detected capacity change from 0 to 128 [ 272.494244][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.5.137'. [ 272.819868][ T7024] syz.5.137 (7024) used greatest stack depth: 17800 bytes left [ 273.468448][ T7036] xt_connbytes: Forcing CT accounting to be enabled [ 273.468581][ T7036] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 273.468869][ T7036] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 284.644064][ T7099] netlink: 'syz.3.155': attribute type 12 has an invalid length. [ 289.195946][ T7162] netlink: 76 bytes leftover after parsing attributes in process `syz.7.151'. [ 290.416058][ T7167] futex_wake_op: syz.3.165 tries to shift op by 144; fix this program [ 290.454230][ T7167] loop3: detected capacity change from 0 to 256 [ 291.439159][ T7167] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 291.456337][ T7166] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 293.549365][ T7184] syz.0.170 uses obsolete (PF_INET,SOCK_PACKET) [ 296.444151][ T7220] loop0: detected capacity change from 0 to 512 [ 297.101256][ T7220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 297.101403][ T7220] System zones: 1-12 [ 297.176497][ T7220] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.177: missing EA_INODE flag [ 297.176691][ T7220] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 297.181841][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 297.181869][ C0] EXT4-fs (loop0): initial error at time 1788497399: ext4_xattr_inode_iget:437: inode 12 [ 297.181904][ C0] EXT4-fs (loop0): last error at time 1788497399: ext4_xattr_inode_iget:437: inode 12 [ 297.253564][ T7220] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.177: error while reading EA inode 12 err=-117 [ 297.253745][ T7220] loop0: lost filesystem error report for type 5 error -117 [ 297.254788][ T7220] EXT4-fs (loop0): 1 orphan inode deleted [ 297.256955][ T7220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.728623][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.665261][ T7286] input: syz0 as /devices/virtual/input/input6 [ 306.582195][ T31] audit: type=1807 audit(1788497408.045:5): UNKNOWN=meas res=0 [ 306.582246][ T31] audit: type=1802 audit(1788497408.045:6): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.192" res=0 errno=0 [ 306.628008][ T7289] ima: policy update failed [ 306.631492][ T31] audit: type=1802 audit(1788497408.975:7): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.192" res=0 errno=0 [ 307.104507][ T7299] loop5: detected capacity change from 0 to 2048 [ 307.225805][ T7299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.891709][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.206'. [ 315.410486][ T7369] netlink: 28 bytes leftover after parsing attributes in process `syz.5.207'. [ 317.534788][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.122042][ T5829] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 320.284808][ T5829] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 320.286208][ T5829] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 320.286241][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 320.286269][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 320.286293][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 320.289089][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.289113][ T5829] usb 8-1: Product: syz [ 320.289128][ T5829] usb 8-1: Manufacturer: syz [ 320.289142][ T5829] usb 8-1: SerialNumber: syz [ 320.383861][ T5829] usb 8-1: config 0 descriptor?? [ 320.408039][ T5829] iguanair 8-1:0.0: failed to get version [ 320.426995][ T5829] iguanair 8-1:0.0: probe with driver iguanair failed with error -90 [ 321.405368][ T5722] usb 8-1: USB disconnect, device number 2 [ 322.864659][ T7432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.219'. [ 323.145279][ T7440] ================================================================== [ 323.145299][ T7440] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x1b8/0x320 [ 323.145337][ T7440] Read of size 160 at addr ffffffff9ad860c0 by task syz.5.217/7440 [ 323.145356][ T7440] [ 323.145367][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.5.217 Not tainted syzkaller #0 PREEMPT(full) [ 323.145390][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.145403][ T7440] Call Trace: [ 323.145412][ T7440] [ 323.145421][ T7440] dump_stack_lvl+0xe8/0x150 [ 323.145452][ T7440] print_address_description+0x55/0x1e0 [ 323.145479][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.145506][ T7440] print_report+0x58/0x70 [ 323.145530][ T7440] kasan_report+0x117/0x150 [ 323.145557][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.145584][ T7440] kasan_check_range+0x264/0x2c0 [ 323.145608][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.145633][ T7440] __asan_memcpy+0x29/0x70 [ 323.145650][ T7440] usb_copy_descriptors+0x1b8/0x320 [ 323.145673][ T7440] usb_assign_descriptors+0xcf/0x290 [ 323.145699][ T7440] f_audio_bind+0x1b5e/0x34b0 [ 323.145734][ T7440] usb_add_function+0x2e1/0x9f0 [ 323.145756][ T7440] ? check_remote_wakeup_config+0x58/0x1c0 [ 323.145780][ T7440] configfs_composite_bind+0xde0/0x1410 [ 323.145805][ T7440] ? __pfx_configfs_composite_bind+0x10/0x10 [ 323.145826][ T7440] gadget_bind_driver+0x2ca/0x9e0 [ 323.145846][ T7440] ? __pfx_gadget_bind_driver+0x10/0x10 [ 323.145863][ T7440] really_probe+0x254/0xae0 [ 323.145886][ T7440] __driver_probe_device+0x1e8/0x360 [ 323.145907][ T7440] driver_probe_device+0x4f/0x240 [ 323.145928][ T7440] __driver_attach+0x339/0x600 [ 323.145948][ T7440] bus_for_each_dev+0x23b/0x2c0 [ 323.145964][ T7440] ? __pfx___driver_attach+0x10/0x10 [ 323.145984][ T7440] ? __pfx_bus_for_each_dev+0x10/0x10 [ 323.146000][ T7440] ? do_raw_spin_unlock+0xf5/0x200 [ 323.146023][ T7440] bus_add_driver+0x345/0x670 [ 323.146043][ T7440] driver_register+0x23a/0x320 [ 323.146066][ T7440] usb_gadget_register_driver_owner+0xf9/0x270 [ 323.146085][ T7440] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 323.146103][ T7440] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 323.146123][ T7440] configfs_write_iter+0x337/0x430 [ 323.146142][ T7440] vfs_write+0x612/0xba0 [ 323.146168][ T7440] ? __pfx_vfs_write+0x10/0x10 [ 323.146194][ T7440] ? __fget_files+0x2a/0x420 [ 323.146219][ T7440] ksys_write+0x150/0x270 [ 323.146233][ T7440] ? __pfx_ksys_write+0x10/0x10 [ 323.146251][ T7440] do_syscall_64+0x166/0x520 [ 323.146280][ T7440] ? trace_irq_disable+0x3b/0x140 [ 323.146296][ T7440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.146313][ T7440] ? clear_bhb_loop+0x70/0xc0 [ 323.146330][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.146346][ T7440] RIP: 0033:0x7fd8e3b9e159 [ 323.146362][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.146378][ T7440] RSP: 002b:00007fd8e498e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.146402][ T7440] RAX: ffffffffffffffda RBX: 00007fd8e3e26180 RCX: 00007fd8e3b9e159 [ 323.146417][ T7440] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000006 [ 323.146430][ T7440] RBP: 00007fd8e3c35024 R08: 0000000000000000 R09: 0000000000000000 [ 323.146440][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.146450][ T7440] R13: 00007fd8e3e26218 R14: 00007fd8e3e26180 R15: 00007ffc91149228 [ 323.146467][ T7440] [ 323.146473][ T7440] [ 323.146477][ T7440] The buggy address belongs to the variable: [ 323.146483][ T7440] ac_header_desc+0x0/0x20 [ 323.146500][ T7440] [ 323.146504][ T7440] The buggy address belongs to the physical page: [ 323.146511][ T7440] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ad86 [ 323.146526][ T7440] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 323.146548][ T7440] raw: 00fff00000002000 ffffea00006b6188 ffffea00006b6188 0000000000000000 [ 323.146561][ T7440] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 323.146569][ T7440] page dumped because: kasan: bad access detected [ 323.146577][ T7440] page_owner info is not present (never set?) [ 323.146583][ T7440] [ 323.146586][ T7440] Memory state around the buggy address: [ 323.146595][ T7440] ffffffff9ad85f80: 00 00 f9 f9 00 00 f9 f9 00 00 00 00 00 00 00 00 [ 323.146606][ T7440] ffffffff9ad86000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.146616][ T7440] >ffffffff9ad86080: 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9 [ 323.146624][ T7440] ^ [ 323.146633][ T7440] ffffffff9ad86100: 00 f9 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 323.146644][ T7440] ffffffff9ad86180: 00 00 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.146652][ T7440] ================================================================== [ 323.148783][ T7440] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.631053][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.5.217 Not tainted syzkaller #0 PREEMPT(full) [ 323.640254][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.650326][ T7440] Call Trace: [ 323.653612][ T7440] [ 323.656640][ T7440] vpanic+0x56d/0xa70 [ 323.660636][ T7440] ? __pfx_vpanic+0x10/0x10 [ 323.665149][ T7440] panic+0xc5/0xd0 [ 323.668900][ T7440] ? __pfx_panic+0x10/0x10 [ 323.673501][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.678933][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.684837][ T7440] check_panic_on_warn+0x89/0xb0 [ 323.689783][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.695164][ T7440] end_report+0x73/0x170 [ 323.699429][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.704822][ T7440] kasan_report+0x128/0x150 [ 323.709430][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.714841][ T7440] kasan_check_range+0x264/0x2c0 [ 323.719802][ T7440] ? usb_copy_descriptors+0x1b8/0x320 [ 323.725198][ T7440] __asan_memcpy+0x29/0x70 [ 323.729627][ T7440] usb_copy_descriptors+0x1b8/0x320 [ 323.734932][ T7440] usb_assign_descriptors+0xcf/0x290 [ 323.740239][ T7440] f_audio_bind+0x1b5e/0x34b0 [ 323.744937][ T7440] usb_add_function+0x2e1/0x9f0 [ 323.750763][ T7440] ? check_remote_wakeup_config+0x58/0x1c0 [ 323.756674][ T7440] configfs_composite_bind+0xde0/0x1410 [ 323.762333][ T7440] ? __pfx_configfs_composite_bind+0x10/0x10 [ 323.768412][ T7440] gadget_bind_driver+0x2ca/0x9e0 [ 323.773450][ T7440] ? __pfx_gadget_bind_driver+0x10/0x10 [ 323.779016][ T7440] really_probe+0x254/0xae0 [ 323.783534][ T7440] __driver_probe_device+0x1e8/0x360 [ 323.788830][ T7440] driver_probe_device+0x4f/0x240 [ 323.793868][ T7440] __driver_attach+0x339/0x600 [ 323.798644][ T7440] bus_for_each_dev+0x23b/0x2c0 [ 323.803764][ T7440] ? __pfx___driver_attach+0x10/0x10 [ 323.809142][ T7440] ? __pfx_bus_for_each_dev+0x10/0x10 [ 323.814518][ T7440] ? do_raw_spin_unlock+0xf5/0x200 [ 323.819638][ T7440] bus_add_driver+0x345/0x670 [ 323.824410][ T7440] driver_register+0x23a/0x320 [ 323.829193][ T7440] usb_gadget_register_driver_owner+0xf9/0x270 [ 323.835479][ T7440] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 323.841142][ T7440] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 323.847335][ T7440] configfs_write_iter+0x337/0x430 [ 323.852480][ T7440] vfs_write+0x612/0xba0 [ 323.856746][ T7440] ? __pfx_vfs_write+0x10/0x10 [ 323.861545][ T7440] ? __fget_files+0x2a/0x420 [ 323.866239][ T7440] ksys_write+0x150/0x270 [ 323.870573][ T7440] ? __pfx_ksys_write+0x10/0x10 [ 323.875430][ T7440] do_syscall_64+0x166/0x520 [ 323.880051][ T7440] ? trace_irq_disable+0x3b/0x140 [ 323.885093][ T7440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.891161][ T7440] ? clear_bhb_loop+0x70/0xc0 [ 323.895845][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.901745][ T7440] RIP: 0033:0x7fd8e3b9e159 [ 323.906288][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.926519][ T7440] RSP: 002b:00007fd8e498e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.935130][ T7440] RAX: ffffffffffffffda RBX: 00007fd8e3e26180 RCX: 00007fd8e3b9e159 [ 323.943111][ T7440] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000006 [ 323.951086][ T7440] RBP: 00007fd8e3c35024 R08: 0000000000000000 R09: 0000000000000000 [ 323.959234][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.967210][ T7440] R13: 00007fd8e3e26218 R14: 00007fd8e3e26180 R15: 00007ffc91149228 [ 323.975199][ T7440] [ 323.978532][ T7440] Kernel Offset: disabled [ 323.982860][ T7440] Rebooting in 86400 seconds..