last executing test programs: 26m19.000918276s ago: executing program 32 (id=238): r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r2 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0285628, 0x0) clock_gettime(0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x2a020480) fanotify_mark(0xffffffffffffffff, 0x2, 0x1062, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x200, 0x0, 0x0, 0x41100}, 0x94) 26m14.519012641s ago: executing program 33 (id=244): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0xb, 0x2002) close(0x3) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) 25m6.165330285s ago: executing program 1 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x18, r5, 0x801, 0x70bd24, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NET={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x10000002) 24m50.539324425s ago: executing program 34 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x18, r5, 0x801, 0x70bd24, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NET={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x10000002) 22m45.367209646s ago: executing program 35 (id=529): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() setpriority(0x1, r1, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000140)='!-\x00', 0x0, &(0x7f0000000180)={@align=0x2000000000000100, {0x2, 0xffff, 0xfffffff8, 0x6}}, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0xd824}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000005c0)='y', 0x1}], 0x1}}], 0x4, 0x4c8c0) close(r0) 19m9.110320663s ago: executing program 36 (id=816): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x20) ioctl$BLKPG(r0, 0xc0184d16, &(0x7f0000000580)={0x2, 0x300, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x1c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket(0x2, 0x80805, 0x0) 17m32.572902678s ago: executing program 5 (id=981): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x43]}, 0x75) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x800, 0xa, 0x4}) r6 = openat$dsp(0xffffff9c, &(0x7f0000000ac0), 0x101000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000b00)=0x88f) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) 17m17.449855918s ago: executing program 37 (id=981): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x43]}, 0x75) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x800, 0xa, 0x4}) r6 = openat$dsp(0xffffff9c, &(0x7f0000000ac0), 0x101000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000b00)=0x88f) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) 16m16.996098885s ago: executing program 38 (id=1052): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) dup(r0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3a7f, 0x80, 0x0, 0x10f}, 0x0, 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 11m14.213270391s ago: executing program 39 (id=1481): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x3, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0xe2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x4]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)=0x7) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, 0x0, 0x0, 0x10060, 0x0) r6 = fanotify_init(0x81, 0x40000) read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0x2020) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @empty, 0xfffffffc}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) connect$inet6(r7, 0x0, 0x0) 9m40.818727693s ago: executing program 1 (id=1499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r3 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000022c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES32], 0x2, 0xc36, &(0x7f0000002540)="$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") setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x2020, 0x4) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') removexattr(0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 9m36.982927861s ago: executing program 1 (id=1607): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fanotify_init(0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = open(0x0, 0x8000, 0x112) getdents(r2, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r3, 0x0, 0x4cd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800feffb50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r3, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d5", 0x1c) 9m33.314660467s ago: executing program 1 (id=1614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x20ab5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) socket$inet(0xa, 0x1, 0x84) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) setreuid(0x0, 0xee01) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x7f) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000004000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00), 0x0, 0x0) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe) 9m29.490276975s ago: executing program 1 (id=1617): syz_open_dev$dvb_frontend(0x0, 0x0, 0x20000) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 9m26.887847368s ago: executing program 1 (id=1624): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2d, 0x5dfdbfc, 0xb0aec5f7, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfe}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x5}, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0xfffffffc, 'syz0\x00', 0xfffffefd}, 0x1, 0x10, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0xfffffff5) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1224, &(0x7f00000026c0)=ANY=[@ANYBLOB="9400004eb9b0c00ad8328b4ae2d1ec6d0800188576323f958211e5bcba1ea9ea62bddb59f6d0facdf7b7fb9e21540bf73dc6e4b377d4504658923a7353a5c030216a507a096888fd3169610da467fb532b869f01f22691693a3a33a0c541f58a16bc5b337acfef4c36ef6ff77d9cb313a796fa3a382a3582e3f1e96d4a8cf5619d5bc609543713df5ea146922e2a12ef0517213fcc7983dc2f00004eb3aba92ca3ca04a3d30d2c258b012b715725184caab43bd6ccd81b94a467f502dcda0afa873f186ec76efd6f4d38a8000010004ef468c0fd8b09c4ce135e7287ae116c2792e267ebd3e3729156ce8165df73a402afa2e77a6b17bea08922ed5945df4e20225ffcf8082365f1d86585ed51df490429a7f1137ec753cf68025ab13d075d16220057dbc15e6cd5ac3e6fb530dad46d305155beb2f4bd841edeb621c88a99a01f30ac177c601e1f633e5bfd0b714fa80fdb4e6f52f53a46ad507ae7c6bff78df28c3aad77ccb61a72f2b79562e07238f660dce9545c5524d1073608685d881a6845b81ae07d80e03afedc90d5a6881743c2dfa63e2093398306d54654c6a606d84d3e31260cd915de86345b00620b33c6e4952603ce6600f5fbdac18347173cd4b4a2e214b07ca32f6e8d1e7cbf95af3619fc3cd38ef1cac061a775e824e2ead89ebdda18c7d7a0f575ef3ff2c95ba91366af8a032d60a2727c3b7ca9bb2bef8536229d0ebcb997bc07c6193bc54260511db9bfe0baaf913728993f44c7fc9007536203bbcaa3d27e5ec36e13adea59380afaced913013fa490af2814eb16da434b71fc45e36e81bbcd7978972e00d124011cc9913ef6037f17db766d2216eab7d2e232f6b76fce005d1184bff94a426fc379a8b677e53c91a4314c1773c52ef2150ac64b1237af1aa20204ff2059273bbd51b057a66233580f4e22e868e1fb6ae88310c8a8710e42ec8fd278bd27b3ab4048925cadabdb0804189d963b95acf908d91f3dc02a9a7ac5ea26f873b60fb97168b58aaaaab7db59a40f026ea802fac20f5eda2e54fa1ef77487d38a6b741902b0addf30e8176c6ff8cc4c217c065240097a8fa7016ecf98073da71a125107d1e0d7d8e48992b350ac2d0e3da21d6b4ba4f9d74f811d8ea675d2e8c8ecf0f9c751ed0d8098b730f0e5727f80d57d3c9ff6cdb24ba5570d25f58f9bb9eec57d2bc5dc140384f8a3a827be58e54e233021fa24ecf630cf6904052c56b6264091a8e561fa4a86d7d15a0f4e8c1d106d43c79e3a06224c917a015a6227ece0f68048d4bcbb0997558dd1c3ca8e98c07858e7d4cd1075c5c672b30c59943811f0d6b958d60502ef1e5ebcd35692704a1a40e5eebf5f13c71ecdc09a7a7d08738c0dd5f12e7b92e4fca2b1cd5284808d1f55718c48330b8be5b5b8e97ab58a85ecc5da694d7f6d67d801f43dc94e799144c25834d7b9b945c69da1caf92e585543eae8670d49f5a7f669a9598a84be56e705aab4f5875588b800416e29eda3edd93667887888c919427f361b5ef6cbb3c58eb6a269b5e5208e2d2030d83bdb29e9e3ec2af9fb13ee17d449a19e4ac6a874fca0c8d399ce9b40006ac163849a469f40eae1dade9b8867f7024449f452472e93f3aba12b9d1d043694c923fc767748773d95774e0762f0212a296e4e3dc72441f14519a0298b522306495bf98f69e57974b0660c077945dd4d2a797cab22c8c2b9eb4f8d74d1ef7c6f40934fddb2baddba8da536444f59c3fe0db2ed423766a2189c3d40b342ff9ea4b5cc72dda8c8dca622e4ef963fe3f404dbd1e29685f0d449ea31f6f07caac490c7b586752d3c840aeb918465944dcbb53e6034c4044e4bc307a4cd738f22bc53cf51fd3bce10586e603fa0310c6411a450719895a6e79c46c662a6dcc4373af4bdefe86140cdc83f6482999dfc8dfe26ed7cf9b8e17c29ed66b9a0fc81bdb0db8649b95c18b045dd77a1b823604f90ac98d0a026b7b1ebe5e4b82a60b9170d6cd52c12e14340f6e5e1b821c4544ef51b0649a3d1f3b3e86d0b48c3f45f6f1617bac5273c03455007ce591d24222efb4bc5a14147b29a0773989d5d3cd7e249e27a8130a3ebb370a81ae599134ca24a8cbecdb15f4af6817bf594c883d6ca5a1d61349ece38b7ae76d55746d708cfd1626f4365335600b0b174325ab55cb196005e6f0af3875ca92d1fef34e50fda6798e75925d18f6e2173ca4aa44c83620e6630bb69a85012233df28337b26f31d389a654d28b5a2381e5b7934a2b17c21cfb1e05fb1e816cc1059446d00eb5c52c77bd0c697aa50225fc161d3bdf649a2ec91f1bd44efccc6490fbb0af48f3ea6609660b0810431e5afad2fef740db6090ffd685748e00ee19735d6c8243a2394d29cacbf8c6a6d2f7984e969e4253826f25f34224cdbad79f1267075bb10c33b8b8b6048cd0b1ffe618db6727b9652399bdae493c87e6f384e84e7638e5a4cee58d2c6fd377d17fa71c494683b618823713afba4328a8c23417f3439b2a74f7f5848baf7166f379a8f3907581d12a2cd51bbd68d2ce19d0746117803ad3fb3affc17adb1a2cbc4a16957cac6406d58c4aa82c3636d88b6d28af18018ff4a546611b181dfea00ef32ac07a323679b20ed6885619327b5337caa4c9a72a8a0f0bc7f7cd019c810e56b5ab378b364cb87a56f32d448196b62a0d118d9b82d02d30506c2a54dfd99c47906c34c8243f6aaf3e365b6446d6209c8cba3a733004a5ed05e0706e1a1a759c35e0d60448467bdd2e0b18b32d38936f115b1ae8349bcf51a85ca2edfa064ae3c506cc0703dc6fbc0e3f026f61a480f6dc5dba938a8708f5d0318d4f70f339d2d968a178d6f2fdb13bbaba3f5117b8c86488d56b0ad8050d9e3d5c538c37db91303f5fb738fb9a8b0faf49b3ec75ab4381764dae9aa30025779abcffaf856820440cfe74bd11b6441c7a42aa7e06e02cf2317b16bfb0a91f180975dd9681ce0de91d44e18465bf0063c24fb7ec3657bd6aff17c00a3f48837045ccbb4c887b04e83ed7235c873ba60c2667d7f524ddb883d49b6c7046271f133d4d53151104d89ed75c32e706323b96802893fc30ebc08482f06c7b94713d39e58b2eefa1faa281434e849e47c6c1e824e66b8c9c8636a2c926a612fe0ca754eb17812dd33ab96b287956c79835fe1ac877763cf6d2af74c0b67b4ff7c7d6c5754a0a80a5c2dbf1af5cb1d466e899f5a6b601dd70e1524536d423bc792b4ada0686b205f7e9af60b21f73ad5e5a743391808020470e7ba49747bb69442e5244c5b4d6849d75915b5cde7567ffc799e225e4f9869678ed099383375a61e09cd248e91522508587493c77fecdd733e032c8c4b8053f430225dd61e00bf95db484ef71c11ddfb000b1fa759892356c1e9e2ead9e8a6558f066ffbf11f757c13a6787018203b16ef44e0081ff7246d272c73f74842ca17f2d88b6d9eb278d4c9356ae9e26340b231580ffb427e52da247c690febda943d8c4464beb780fae538eb9b52683ed9bf33be2d9545df3ca78629b822f9918e4fe48cbf9c3fc26f4c8866a441c564fd93e621ba888dabbbaa7060d21d990e1a0424f952b228db57953ee796514d11b520c16331c3b1d6938565956f3bab3eb9967fb0b7b9b530e7caf02d0d57f7a876b2bd381709f4b98d9003c924635157a049451ef16ef69fd70f597ca6f7454ecc0685155aa0c5a2957131b578c883a2dda18e9101ea782d6d2e5d11e8f1b50efe1d07342859499dba5846c64cea25e36c9223177fea90f3c935ae3b85b2d5d24f3869dfd65737c23ae9cddb4a9327f88e4de6025c91741b01c65eb7b3c1d0b05fbae684bcc975d51e78db056a5668a5d8cc88d1598c0bf672eb0128c924b4a452547c1021d6e48004a5460b4208c1ba7cb5476107d46c5a31aea8ba0e8d645ab1cbc9c1f272caa02582f5e0793d819863a9ac3e40c15046e2cf8e1ec984fc832db42c393e4b0c1d57c3b3c1260d1a16ea289afe059c34d1b75e0ab456e74e7872553d22384d162ec447acaca474cbc71591a9f9337ecef425fafc6b1dc51b5bb3ddf86014cc7c4cfe509ea3d817051c5ce13ae882acec8d454a1ee22dd3f8d32168a799c309254e0314619639e103c98fe5c740b8a40fedd09f8c93118a526fbab5b7e8e5673100f032c3c099d54b4f39de09030809ccdde034a6e269ebf54d00d6b279c9dc8e418e3fc98b33ff5234a49fed445acaca357ae9c129fc767836a0e8c7a888a3052f4d34c4e403a31d6b09e15aec0c12f669fc185bbe7b6a390cd15bfa277927db90b768db2cb156d02e62b4a4452f81353384fec860da6b90c24aa501ac29933fa311173be71ea55f90b0b9f890e7e5dbf6f280af4f139e4be3c61de6b8835b6b61894d87b2e75088ccc856e1ecbe781f757b5cbe50fe79e9b95b0bb36481c12a7a9ea66bce78b6d3255fd8c75b224d97c3e23d4835052528ca4d2e446cac34738002aaef8e1dc912a26991295f43783a0d1903317eee21997a7c3d1dde5aad5d8d7de468a0f662e202b8ffd4b947dbf7081059bf7ac7df240745cef363b3cdac624f11fa1fbaed8ec2ee8f67b45441f9fb7feb41b27ce90e5041bbd4059da468748dc1a00e142269d4d8c400478319a6de54fb705a96e9755c9373b1313343e52143c9f3a6419362b74ab75e46c8ed32dd5716108efe82072fe95939511ea56643bc5ff422c73311798ed3766b282599a28e1230050bd359b1f53cca2a77dc65d0ac388bf157e548b8a90d7eee9cffa59d10220796404bab4a988218e45f79183508614d278e70025d62f73a0425d2081d3a1cb52543753a00e98c11f5963e5aef9795fe6e321f3c02e2d81c59f8d1163aee1d6f36755c41850796c351ac69970e44c5afe5f3a9f8bf0c2636515d199183886a4f867611cea5d0b16ff975b428f568aefd8781dcfb70e870a77600904af1bc6df417f3b3c0b03b86192acd89800d0fe1718ba370a29e3618fc8ca99d9239041a54c1986692149a90ace5aec42a971128cc0a2fe228af2aac76b93b0021d555fabc6d8236d0639e0d312813472eb11d1091448e40b6bbcfc69d942bd8eae12d7d89f0a93f79b252567c0f0e3d54e6e7530643a8293e63a35018d64d6e4661e8f7e7075b90e22a049334f80668806cf5eb4eb8ed107a1dff3cd7487584bc9d33c0d217832f424cf274a35397658519247603c3caa315eabad22d09eb62254d7036e511fc7e030210d990afa564429f7875c056870e2909ebe98371c9bbef025b03169e5fdd6353cacf8ab81287942029e438b83d59472e7ea80c82370d880b32a0e402bcba9738af3ced53ba84105d9c9bfc11e106563a5154e56c92f786991031506fbd4cfb2ecb53f7572a071b001d7ccb5b348a795b147f49e4c1a5dc3ae0c0a383e943e96e6e2e002a86e77270e7401a775b1109cef305c1956a1d42aeac6ed30e3d9ca1086793cc2b48845d78a2dd8bae230314527652adff18b51bb9d257adad3d1d75c1d764815c1a228f9a2bec9e38aabe483ce162e9fdd54945d773167a3d3af4405367389df5fddbc868fd37e3995a9498c12078dfdb892118033b647b0fa724650b1774fc94e64142d185fc384cf74536ac1f9fc82d9f5af162b1700c10922248b19c04cdd2fae1f0e773982aa51e623ac65af4c3b09a2a94de4cdf098c3d675a20ba90ada2b081ed1fa1211f2621f8cd8a10cb86e634c0bf0e6b0bc2716e229b6dd114b691c63a05db6eb0274419a5fbf74501b54470bb8a937a6cf3417cf3204a0c7468bfa8ea9b34e9ee583550d4c4d1ef15a410cac1d92eeeeb681e2b1bc135450c208f1efa2a42801dea768ee02ae711641075c8dabd6183079f2404c527bee323384cc3334c2cd29e51dd8f55cca07e4e2dbc5c4bf7d594e84a207f7b21e63a129b0d45040a62f8045b088df1b0101a04ccb9ded8ccf5e687288cd8d456fb279c77ee08de07ff6641b81338d588185b304b39f32ca32bd97d0383dde97f4b4f4497ce961fb7f74e0038f9311c3047fe735d3367b78f24b845bfbdd450bf2d4afe585b161f43b94440a2d43f43420502d79a84e00004e5df5d5696431ba4250ade63a16b3c4a775037743b52497f873c87575496805db54c50de755e77217cf9b6c6dfb9d7dc04eba487b315209ab411aef219069fcd30f5dde5cde114eff81d741ecc69500004e00004eb2f75baeafd49247156228a3a78c37695933a83d08d97b37a0ef63b08bb4a7cd3dadade5e62c3ae8e104c2e2d17f9f29f7e3cfd86123b2178c43ace7e78a4a3cebcef25af5f9531794a14ebfba800000a800004e7a2a6c1cb1298a53efa17a3e630053e2c417fc362255b9fed26cd4dc59b90932487ea5713eee530aea75f7cdc8c656c72b6df1867a5ae42261650be29327d17dbf73b0dc84d73fd817fa7709c695b1f30108c5cabef1a527d21dfa61ad9d18c3e228f2dbf504a08944e698a0f7c70ca57b755598ed34a60dad11a7e2bdf0a874bda11b7705bf47bc848d89c153781724e9cbff9092a7ce96c4344bb8a8043f260d33883913f4297e30a31974467e15a0648665044aa88fa3ab8a54ce4e6376e0fbb5e7"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000002100)=[{r4, 0x688}], 0x1, 0x6) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000107, 0x0, 0x10000000001780}]}) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m11.716594889s ago: executing program 40 (id=1624): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2d, 0x5dfdbfc, 0xb0aec5f7, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfe}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x5}, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0xfffffffc, 'syz0\x00', 0xfffffefd}, 0x1, 0x10, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0xfffffff5) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1224, &(0x7f00000026c0)=ANY=[@ANYBLOB="9400004eb9b0c00ad8328b4ae2d1ec6d0800188576323f958211e5bcba1ea9ea62bddb59f6d0facdf7b7fb9e21540bf73dc6e4b377d4504658923a7353a5c030216a507a096888fd3169610da467fb532b869f01f22691693a3a33a0c541f58a16bc5b337acfef4c36ef6ff77d9cb313a796fa3a382a3582e3f1e96d4a8cf5619d5bc609543713df5ea146922e2a12ef0517213fcc7983dc2f00004eb3aba92ca3ca04a3d30d2c258b012b715725184caab43bd6ccd81b94a467f502dcda0afa873f186ec76efd6f4d38a8000010004ef468c0fd8b09c4ce135e7287ae116c2792e267ebd3e3729156ce8165df73a402afa2e77a6b17bea08922ed5945df4e20225ffcf8082365f1d86585ed51df490429a7f1137ec753cf68025ab13d075d16220057dbc15e6cd5ac3e6fb530dad46d305155beb2f4bd841edeb621c88a99a01f30ac177c601e1f633e5bfd0b714fa80fdb4e6f52f53a46ad507ae7c6bff78df28c3aad77ccb61a72f2b79562e07238f660dce9545c5524d1073608685d881a6845b81ae07d80e03afedc90d5a6881743c2dfa63e2093398306d54654c6a606d84d3e31260cd915de86345b00620b33c6e4952603ce6600f5fbdac18347173cd4b4a2e214b07ca32f6e8d1e7cbf95af3619fc3cd38ef1cac061a775e824e2ead89ebdda18c7d7a0f575ef3ff2c95ba91366af8a032d60a2727c3b7ca9bb2bef8536229d0ebcb997bc07c6193bc54260511db9bfe0baaf913728993f44c7fc9007536203bbcaa3d27e5ec36e13adea59380afaced913013fa490af2814eb16da434b71fc45e36e81bbcd7978972e00d124011cc9913ef6037f17db766d2216eab7d2e232f6b76fce005d1184bff94a426fc379a8b677e53c91a4314c1773c52ef2150ac64b1237af1aa20204ff2059273bbd51b057a66233580f4e22e868e1fb6ae88310c8a8710e42ec8fd278bd27b3ab4048925cadabdb0804189d963b95acf908d91f3dc02a9a7ac5ea26f873b60fb97168b58aaaaab7db59a40f026ea802fac20f5eda2e54fa1ef77487d38a6b741902b0addf30e8176c6ff8cc4c217c065240097a8fa7016ecf98073da71a125107d1e0d7d8e48992b350ac2d0e3da21d6b4ba4f9d74f811d8ea675d2e8c8ecf0f9c751ed0d8098b730f0e5727f80d57d3c9ff6cdb24ba5570d25f58f9bb9eec57d2bc5dc140384f8a3a827be58e54e233021fa24ecf630cf6904052c56b6264091a8e561fa4a86d7d15a0f4e8c1d106d43c79e3a06224c917a015a6227ece0f68048d4bcbb0997558dd1c3ca8e98c07858e7d4cd1075c5c672b30c59943811f0d6b958d60502ef1e5ebcd35692704a1a40e5eebf5f13c71ecdc09a7a7d08738c0dd5f12e7b92e4fca2b1cd5284808d1f55718c48330b8be5b5b8e97ab58a85ecc5da694d7f6d67d801f43dc94e799144c25834d7b9b945c69da1caf92e585543eae8670d49f5a7f669a9598a84be56e705aab4f5875588b800416e29eda3edd93667887888c919427f361b5ef6cbb3c58eb6a269b5e5208e2d2030d83bdb29e9e3ec2af9fb13ee17d449a19e4ac6a874fca0c8d399ce9b40006ac163849a469f40eae1dade9b8867f7024449f452472e93f3aba12b9d1d043694c923fc767748773d95774e0762f0212a296e4e3dc72441f14519a0298b522306495bf98f69e57974b0660c077945dd4d2a797cab22c8c2b9eb4f8d74d1ef7c6f40934fddb2baddba8da536444f59c3fe0db2ed423766a2189c3d40b342ff9ea4b5cc72dda8c8dca622e4ef963fe3f404dbd1e29685f0d449ea31f6f07caac490c7b586752d3c840aeb918465944dcbb53e6034c4044e4bc307a4cd738f22bc53cf51fd3bce10586e603fa0310c6411a450719895a6e79c46c662a6dcc4373af4bdefe86140cdc83f6482999dfc8dfe26ed7cf9b8e17c29ed66b9a0fc81bdb0db8649b95c18b045dd77a1b823604f90ac98d0a026b7b1ebe5e4b82a60b9170d6cd52c12e14340f6e5e1b821c4544ef51b0649a3d1f3b3e86d0b48c3f45f6f1617bac5273c03455007ce591d24222efb4bc5a14147b29a0773989d5d3cd7e249e27a8130a3ebb370a81ae599134ca24a8cbecdb15f4af6817bf594c883d6ca5a1d61349ece38b7ae76d55746d708cfd1626f4365335600b0b174325ab55cb196005e6f0af3875ca92d1fef34e50fda6798e75925d18f6e2173ca4aa44c83620e6630bb69a85012233df28337b26f31d389a654d28b5a2381e5b7934a2b17c21cfb1e05fb1e816cc1059446d00eb5c52c77bd0c697aa50225fc161d3bdf649a2ec91f1bd44efccc6490fbb0af48f3ea6609660b0810431e5afad2fef740db6090ffd685748e00ee19735d6c8243a2394d29cacbf8c6a6d2f7984e969e4253826f25f34224cdbad79f1267075bb10c33b8b8b6048cd0b1ffe618db6727b9652399bdae493c87e6f384e84e7638e5a4cee58d2c6fd377d17fa71c494683b618823713afba4328a8c23417f3439b2a74f7f5848baf7166f379a8f3907581d12a2cd51bbd68d2ce19d0746117803ad3fb3affc17adb1a2cbc4a16957cac6406d58c4aa82c3636d88b6d28af18018ff4a546611b181dfea00ef32ac07a323679b20ed6885619327b5337caa4c9a72a8a0f0bc7f7cd019c810e56b5ab378b364cb87a56f32d448196b62a0d118d9b82d02d30506c2a54dfd99c47906c34c8243f6aaf3e365b6446d6209c8cba3a733004a5ed05e0706e1a1a759c35e0d60448467bdd2e0b18b32d38936f115b1ae8349bcf51a85ca2edfa064ae3c506cc0703dc6fbc0e3f026f61a480f6dc5dba938a8708f5d0318d4f70f339d2d968a178d6f2fdb13bbaba3f5117b8c86488d56b0ad8050d9e3d5c538c37db91303f5fb738fb9a8b0faf49b3ec75ab4381764dae9aa30025779abcffaf856820440cfe74bd11b6441c7a42aa7e06e02cf2317b16bfb0a91f180975dd9681ce0de91d44e18465bf0063c24fb7ec3657bd6aff17c00a3f48837045ccbb4c887b04e83ed7235c873ba60c2667d7f524ddb883d49b6c7046271f133d4d53151104d89ed75c32e706323b96802893fc30ebc08482f06c7b94713d39e58b2eefa1faa281434e849e47c6c1e824e66b8c9c8636a2c926a612fe0ca754eb17812dd33ab96b287956c79835fe1ac877763cf6d2af74c0b67b4ff7c7d6c5754a0a80a5c2dbf1af5cb1d466e899f5a6b601dd70e1524536d423bc792b4ada0686b205f7e9af60b21f73ad5e5a743391808020470e7ba49747bb69442e5244c5b4d6849d75915b5cde7567ffc799e225e4f9869678ed099383375a61e09cd248e91522508587493c77fecdd733e032c8c4b8053f430225dd61e00bf95db484ef71c11ddfb000b1fa759892356c1e9e2ead9e8a6558f066ffbf11f757c13a6787018203b16ef44e0081ff7246d272c73f74842ca17f2d88b6d9eb278d4c9356ae9e26340b231580ffb427e52da247c690febda943d8c4464beb780fae538eb9b52683ed9bf33be2d9545df3ca78629b822f9918e4fe48cbf9c3fc26f4c8866a441c564fd93e621ba888dabbbaa7060d21d990e1a0424f952b228db57953ee796514d11b520c16331c3b1d6938565956f3bab3eb9967fb0b7b9b530e7caf02d0d57f7a876b2bd381709f4b98d9003c924635157a049451ef16ef69fd70f597ca6f7454ecc0685155aa0c5a2957131b578c883a2dda18e9101ea782d6d2e5d11e8f1b50efe1d07342859499dba5846c64cea25e36c9223177fea90f3c935ae3b85b2d5d24f3869dfd65737c23ae9cddb4a9327f88e4de6025c91741b01c65eb7b3c1d0b05fbae684bcc975d51e78db056a5668a5d8cc88d1598c0bf672eb0128c924b4a452547c1021d6e48004a5460b4208c1ba7cb5476107d46c5a31aea8ba0e8d645ab1cbc9c1f272caa02582f5e0793d819863a9ac3e40c15046e2cf8e1ec984fc832db42c393e4b0c1d57c3b3c1260d1a16ea289afe059c34d1b75e0ab456e74e7872553d22384d162ec447acaca474cbc71591a9f9337ecef425fafc6b1dc51b5bb3ddf86014cc7c4cfe509ea3d817051c5ce13ae882acec8d454a1ee22dd3f8d32168a799c309254e0314619639e103c98fe5c740b8a40fedd09f8c93118a526fbab5b7e8e5673100f032c3c099d54b4f39de09030809ccdde034a6e269ebf54d00d6b279c9dc8e418e3fc98b33ff5234a49fed445acaca357ae9c129fc767836a0e8c7a888a3052f4d34c4e403a31d6b09e15aec0c12f669fc185bbe7b6a390cd15bfa277927db90b768db2cb156d02e62b4a4452f81353384fec860da6b90c24aa501ac29933fa311173be71ea55f90b0b9f890e7e5dbf6f280af4f139e4be3c61de6b8835b6b61894d87b2e75088ccc856e1ecbe781f757b5cbe50fe79e9b95b0bb36481c12a7a9ea66bce78b6d3255fd8c75b224d97c3e23d4835052528ca4d2e446cac34738002aaef8e1dc912a26991295f43783a0d1903317eee21997a7c3d1dde5aad5d8d7de468a0f662e202b8ffd4b947dbf7081059bf7ac7df240745cef363b3cdac624f11fa1fbaed8ec2ee8f67b45441f9fb7feb41b27ce90e5041bbd4059da468748dc1a00e142269d4d8c400478319a6de54fb705a96e9755c9373b1313343e52143c9f3a6419362b74ab75e46c8ed32dd5716108efe82072fe95939511ea56643bc5ff422c73311798ed3766b282599a28e1230050bd359b1f53cca2a77dc65d0ac388bf157e548b8a90d7eee9cffa59d10220796404bab4a988218e45f79183508614d278e70025d62f73a0425d2081d3a1cb52543753a00e98c11f5963e5aef9795fe6e321f3c02e2d81c59f8d1163aee1d6f36755c41850796c351ac69970e44c5afe5f3a9f8bf0c2636515d199183886a4f867611cea5d0b16ff975b428f568aefd8781dcfb70e870a77600904af1bc6df417f3b3c0b03b86192acd89800d0fe1718ba370a29e3618fc8ca99d9239041a54c1986692149a90ace5aec42a971128cc0a2fe228af2aac76b93b0021d555fabc6d8236d0639e0d312813472eb11d1091448e40b6bbcfc69d942bd8eae12d7d89f0a93f79b252567c0f0e3d54e6e7530643a8293e63a35018d64d6e4661e8f7e7075b90e22a049334f80668806cf5eb4eb8ed107a1dff3cd7487584bc9d33c0d217832f424cf274a35397658519247603c3caa315eabad22d09eb62254d7036e511fc7e030210d990afa564429f7875c056870e2909ebe98371c9bbef025b03169e5fdd6353cacf8ab81287942029e438b83d59472e7ea80c82370d880b32a0e402bcba9738af3ced53ba84105d9c9bfc11e106563a5154e56c92f786991031506fbd4cfb2ecb53f7572a071b001d7ccb5b348a795b147f49e4c1a5dc3ae0c0a383e943e96e6e2e002a86e77270e7401a775b1109cef305c1956a1d42aeac6ed30e3d9ca1086793cc2b48845d78a2dd8bae230314527652adff18b51bb9d257adad3d1d75c1d764815c1a228f9a2bec9e38aabe483ce162e9fdd54945d773167a3d3af4405367389df5fddbc868fd37e3995a9498c12078dfdb892118033b647b0fa724650b1774fc94e64142d185fc384cf74536ac1f9fc82d9f5af162b1700c10922248b19c04cdd2fae1f0e773982aa51e623ac65af4c3b09a2a94de4cdf098c3d675a20ba90ada2b081ed1fa1211f2621f8cd8a10cb86e634c0bf0e6b0bc2716e229b6dd114b691c63a05db6eb0274419a5fbf74501b54470bb8a937a6cf3417cf3204a0c7468bfa8ea9b34e9ee583550d4c4d1ef15a410cac1d92eeeeb681e2b1bc135450c208f1efa2a42801dea768ee02ae711641075c8dabd6183079f2404c527bee323384cc3334c2cd29e51dd8f55cca07e4e2dbc5c4bf7d594e84a207f7b21e63a129b0d45040a62f8045b088df1b0101a04ccb9ded8ccf5e687288cd8d456fb279c77ee08de07ff6641b81338d588185b304b39f32ca32bd97d0383dde97f4b4f4497ce961fb7f74e0038f9311c3047fe735d3367b78f24b845bfbdd450bf2d4afe585b161f43b94440a2d43f43420502d79a84e00004e5df5d5696431ba4250ade63a16b3c4a775037743b52497f873c87575496805db54c50de755e77217cf9b6c6dfb9d7dc04eba487b315209ab411aef219069fcd30f5dde5cde114eff81d741ecc69500004e00004eb2f75baeafd49247156228a3a78c37695933a83d08d97b37a0ef63b08bb4a7cd3dadade5e62c3ae8e104c2e2d17f9f29f7e3cfd86123b2178c43ace7e78a4a3cebcef25af5f9531794a14ebfba800000a800004e7a2a6c1cb1298a53efa17a3e630053e2c417fc362255b9fed26cd4dc59b90932487ea5713eee530aea75f7cdc8c656c72b6df1867a5ae42261650be29327d17dbf73b0dc84d73fd817fa7709c695b1f30108c5cabef1a527d21dfa61ad9d18c3e228f2dbf504a08944e698a0f7c70ca57b755598ed34a60dad11a7e2bdf0a874bda11b7705bf47bc848d89c153781724e9cbff9092a7ce96c4344bb8a8043f260d33883913f4297e30a31974467e15a0648665044aa88fa3ab8a54ce4e6376e0fbb5e7"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000002100)=[{r4, 0x688}], 0x1, 0x6) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000107, 0x0, 0x10000000001780}]}) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m48.975640473s ago: executing program 2 (id=1670): socket(0x40000000015, 0x5, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6}) 8m46.017332987s ago: executing program 2 (id=1675): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) recvmsg(0xffffffffffffffff, 0x0, 0x40020000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x84, 0x6, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x20000844) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x97) fsopen(&(0x7f0000000140)='befs\x00', 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) 8m44.536115559s ago: executing program 2 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 8m42.6264365s ago: executing program 2 (id=1682): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0x53, 0xffffffffffffffff, &(0x7f0000000000)=0xff00) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x7, 0xc0, 0x6, 0xffffffff}, {0xc, 0xd, 0x5, 0x886}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x3, 0x85) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x16, 0xffff, 0xf, 0xffff, 0x0, 0x4, 0x8000, 0x5, 0xbf, 0x4, 0x70, 0x7, 0x10000, 0x1, 0xa1b], 0x0, 0x4}) 8m40.637501383s ago: executing program 2 (id=1685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"f123d918380434428784c5b7f11f1b59", 0x0, 0x0, {0xc0be, 0x9}, {0x1, 0x10000}, 0x7, [0x0, 0xfffffffffffffffb, 0x7f, 0x4, 0x2, 0x6, 0x4, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffffa, 0x9, 0x520, 0x101, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000700)={{r0}, r2, 0xc, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x1f3, 0x1000, {0x0, 0x6, 0x200, 0x2, 0x6}, [0x2, 0x9863]}}, @name="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"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x11b6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$inet6(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1a, 0x1, 0x70bd2b, 0x3, {0x2, 0x0, 0x20, 0x0, 0x0, 0x20}}, 0x1c}}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 8m37.698048516s ago: executing program 2 (id=1690): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0xe47a, 0x400, 0x0, 0x8010}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x25, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f00000035c0)=""/3995, &(0x7f0000000180)=0xf9b) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[], 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r6, &(0x7f0000000040)=[{0x0}], 0x1, 0x5, 0x0) unshare(0x64000600) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m22.373408257s ago: executing program 41 (id=1690): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0xe47a, 0x400, 0x0, 0x8010}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x25, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f00000035c0)=""/3995, &(0x7f0000000180)=0xf9b) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[], 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r6, &(0x7f0000000040)=[{0x0}], 0x1, 0x5, 0x0) unshare(0x64000600) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m35.873473827s ago: executing program 3 (id=1889): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000180), 0x1001) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r6, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 5m33.957554919s ago: executing program 3 (id=1892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r6, 0x40087446, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xd, 0xb, 0x3, 0x4b}, {0x8, 0x9, 0x8, 0x6}, {0x7, 0x5, 0x2, 0x65}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x4, 0xffffff7f, 0xe76, 0x9]}, &(0x7f0000000280)=0x54) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pread64$ublk_ch(r8, &(0x7f0000000340)=@buf_max_buf, 0xbcb, 0xad) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r5, 0x8010aebc, &(0x7f0000000000)={0x200000, 0x100000}) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000200)) 5m31.144189319s ago: executing program 3 (id=1896): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x11c9014, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESOCT=0x0], 0x1, 0x6c6, &(0x7f00000003c0)="$eJzs3U9sHFcdB/DvbJx1NqDEbdM0IKRajVRBIxI7q5IgITUghHKIUFQuvVqJ01hx0spxkVshsgEKEidOqAcORcgcekIIIZUTopyRkLhw8j0SNw45AItmdna9tjeO3cRZt/18pPF7s2/ee7/5Zf7srh1NgM+si6/lYCdFLp66tFKur622F9dW2zf79SSTSRrJRK9I0UqKj5IL6S35QvliPVzxoHlevvdhMfHeB+3e2kS9VNs3tuu3xcgtO8mhwcqBJNO96n92POyW8aqlGufK+ng7MDnitWIQd5mwk/3Ewbh1t+isNzYe2n3n5y2wb93p3Te3mEoOp3d3re5s9dXh4VeG8Tg6VN/22tTZ+1gAAABgr438LD/s6P3cz0qOPJlwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NOh6D0zsFU/N7/RK1/NdIr+8/+bQ8/Ub4453Ef07rWqePXouAMBAAAAAAAAgG0UxcO2eP5+7mclR/rr3aL6nf8L1cqx6ufn8lZuZz5LOZ2VzGU5y1nKbJKpoYGaK3PLy0uzW3v+MmXPbrd7p+55dtCz/9cDZc+zG+PqbA501F8abNkIAAAAAAAAAD6zfpSL67//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/aBIDvSKajnWr0+lMZHkUJJmMT3YvDnWYB+DP487AAAAANh7rbo8UvyvV+kW1Wf+49Xn/kN5K7eynIUsZzHzuVp9F9D71N/4e6e9uLbavlkuWwf+5r92FUc1YnrfPYyeeaba4tlBj4v5Tr6XU5nO5SxlId/PXJYzn+l8u6rNpchU/e3F1NpqK/1Yt8Z7YcPa5c2xPT9UL+M7UUXSyrUsVLGdzpVmP/RGvd2Jodn+2Ew2zXi3zE7xSm2HObpal+Ue/aIu94epas8PDjIyU+e+zMZTaweTPDD3uzxONs80m8bgO6hja6vtIunUq5tn+lg5P1yXZa5/urc53+VXaRsz0fl5udY/+o4PH+ujzs+v/OMvl683bt24fu32qf1zGH1Mm4+J9lAmnttRJhbLTHQeIROHHiX+x6dZZ6N3Fd3d1fKFqu+RLOS7eSNXM59zmclszmcmX8/ZtHN2KK/Pbp/X6lxr7O5cO/nlulLek342dG96YiYf1FDm9amhvA5f6aaqtuFX1rP09A6yVDQzOkv/HBnKxBeHQv3x0B1n/DZkYjLVtbkf3TPbZ+LX/+0mub1468bS9bk3dzjfi3VZnrbvbrw2/+ax7NDu1btbHi9Pl/9Y6d02ho+Osu2ZftuGI2e2ajs2aNt4n2s2U53PvbaHnanlSMfvjhqp1/bcyFnaVduJobYN73LyRhYH70IA2McOv3S42brX+lvr/dZPWtdblw59a/L85JeaOfjXiT8d+F3jt41vFC/l/fwwR8YdKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBrcfvudG3OLi/NL+7CSxmMe8O7Ipn4qeq8098e+f1Irk9sdUb9Psk335jhibiXZF6nLxBOYazIjmi4NXmkljUE8SW7skwfcAXvhzPLNN8/cfvudry7cnHt9/vX5W2fPn3vlXPtrs3fOXFtYnJ/p/Rx3lMBeWH8bMO5IAAAAAAAAAAAAgJ16Ev+9YcS0RWcM+woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Ml18LQc7KTI7c3qmXF9bbS+WS7++vuVEkkaS4gdJ8VFyIb0lU0PDFcNjF931+sv3PvzVi+990F4fa6K/fWNTvz/8u9vd5V506iXTSQ7UZdKsm1sP6Da5o/GulOXn1xt2rxjsYZmwk/3Ewbj9PwAA///qrwLW") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x7f, 0x0, r0, 0x5, '\x00', r1, r2, 0x3, 0x3}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xf7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r6 = syz_clone(0x24180080, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000dc0)={{0x9, 0x1, 0x1, 0x0, 'syz0\x00', 0x81}, 0x5, 0x400, 0xffff, r6, 0x3, 0xfffeffff, 'syz0\x00', &(0x7f0000000340)=['batadv_slave_0\x00', 'ext4\x00', '/dev/loop#\x00'], 0x1f}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") sendfile(r4, r4, 0x0, 0x2000000000409) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m26.711032665s ago: executing program 3 (id=1899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20002002}) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = signalfd(r3, 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0x2) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0x10, 0xb, 0x10, 0x6}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000200)={0x7fff, "483c57babf05be432847f31b3a480cec7e7c8e87afc85cbaed86a2f18af7bd465580952b6912279dad81fa5f3e44d7f2c7ea45226d41f68e72c59cb0fca7012c4e28647ac281c8a5275614ae9383b501f1d8d6818706fcc2fb8616485ddb6b9963e7641c9a79d1eb11248ce2a5262d75ce9673d134e74229c8b910946816cd7b5332598c26cc48a721e5ac521f290b0419565b81f59d37de16d0ae38be4c71d5a7f240381f354fe5f2de414a1aa4288e2a025dbb56a3c9b41ef5be99e78959609998d2cad9997a2be2a5b71e54fd730a7732e46374af8c1e48aace51c29ce6972efe448231abaccc9425859c019ddba4de1dd170b735c155611c210034838b2f"}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x1, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000208000b40000000000900010073797a300000000014000000020a0101000007000000000001000009"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m20.635176896s ago: executing program 3 (id=1904): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2c7, &(0x7f0000000480)="$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") gettid() syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000000480)={[{@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa2a4}}]}, 0x1, 0x4a9, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$kcm(0xa, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') openat$sequencer2(0xffffff9c, 0x0, 0x74046, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x41}}], 0x88}, 0x0) 5m18.363198955s ago: executing program 3 (id=1909): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@bh}, {}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x8}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x42) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) sched_getaffinity(r0, 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e23, 0x5, 0x4e21, 0x3, 0xa, 0x0, 0x110}, {0xfffffffd, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0xfffffffffffffffd, 0xfffffffffffffffe, 0x1, 0x4000000000d}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x4d3, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0xfffffffb}}, 0xe8) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m1.294940183s ago: executing program 42 (id=1909): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@bh}, {}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x8}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x42) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) sched_getaffinity(r0, 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e23, 0x5, 0x4e21, 0x3, 0xa, 0x0, 0x110}, {0xfffffffd, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0xfffffffffffffffd, 0xfffffffffffffffe, 0x1, 0x4000000000d}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x4d3, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0xfffffffb}}, 0xe8) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m43.666130893s ago: executing program 5 (id=1922): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000300)) 4m40.462052252s ago: executing program 5 (id=1927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20002002}) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = signalfd(r3, 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0x2) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0x10, 0xb, 0x10, 0x6}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000200)={0x7fff, "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"}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x1, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000208000b40000000000900010073797a300000000014000000020a0101000007000000000001000009"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m32.303228858s ago: executing program 5 (id=1930): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000000580)) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getscheduler(0x0) r1 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x9b03, 0xfffffffe, 0xfe, 0x7, 0x13, 0x1, 0x6, 0xfa, 0x55, 0x1, 0x40, 0xfff8, 0x80, 0x7, 0x80, [0x6, 0x8e]}}) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000100), 0x7b, 0x628640) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x108, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) fspick(0xffffffffffffff9c, 0x0, 0xf) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x9, '\x00', 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc090000000000004509010000200000950000000000000018", @ANYBLOB="0000000000000000b774a8ef9123481919079868d9762d03000000000000850000000cb40000b700000000000000bf9800000000000056090000000000008500000085000000b700000000000000950f000040000000f569dc2f2d09707b65c43dda910d4f498955ec47118c91b2ff949da0851a5fd9801e87282c414efbc255e14efb7e2d11d2f922fd43c9f21530537c37a9ea2f152a9b60214a10540b8b21b67eba3cf9877f"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m29.213787275s ago: executing program 5 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043003"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r3) sendmsg$SEG6_CMD_DUMPHMAC(r3, 0x0, 0x20000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000140)={@private, @dev, @initdev}, &(0x7f0000000180)=0xc) 4m25.72990463s ago: executing program 5 (id=1941): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(0x0, 0x80140, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) getrusage(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x12, &(0x7f00000005c0), 0x4) sendmsg$SOCK_DESTROY(r5, &(0x7f00000019c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x44) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbf82000000000", @ANYRES32=r6, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r6], 0x3c}}, 0x40848c0) 4m9.387337782s ago: executing program 43 (id=1941): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$tipc(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(0x0, 0x80140, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) getrusage(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x12, &(0x7f00000005c0), 0x4) sendmsg$SOCK_DESTROY(r5, &(0x7f00000019c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x44) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbf82000000000", @ANYRES32=r6, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r6], 0x3c}}, 0x40848c0) 2m33.174311827s ago: executing program 6 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x220, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) r9 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000001c0)=0x2) 2m31.751140328s ago: executing program 6 (id=2083): socket(0x40000000015, 0x5, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6}) close_range(r1, 0xffffffffffffffff, 0x0) 2m30.135429293s ago: executing program 6 (id=2086): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x4, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_destroy(0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0xfff, 0x0, 0x1000, 0x9, 0x4, 0xfffff800}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m27.755417874s ago: executing program 6 (id=2089): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6(0xa, 0x3, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002580)={0x4, 0x0, &(0x7f00000002c0)=[@enter_looper], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000440)) 2m24.609514742s ago: executing program 6 (id=2092): syz_open_dev$mouse(0x0, 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, 0x0, 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000019, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) openat$vimc2(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) 2m22.243112603s ago: executing program 6 (id=2096): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000700)={0x8}, 0x4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000008c0)={0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000200, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 2m4.463594476s ago: executing program 44 (id=2096): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000700)={0x8}, 0x4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000008c0)={0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000200, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 30.648498389s ago: executing program 9 (id=2228): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r5, 0x0, 0x7}, 0x38) sendfile(r4, r4, 0x0, 0x1002000ff) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000cc0)="e1", 0x1}], 0x1) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socket$inet6(0xa, 0x800000000000002, 0x0) 29.104080083s ago: executing program 0 (id=2221): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x4, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_destroy(0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0xfff, 0x0, 0x1000, 0x9, 0x4, 0xfffff800}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, &(0x7f0000000200)=0xd9c990bae94e58c1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.552802316s ago: executing program 0 (id=2222): syz_open_dev$mouse(0x0, 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, 0x0, 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000019, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) openat$vimc2(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 23.19252278s ago: executing program 4 (id=2225): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e24, 0x10003, 0xcd, 0x1, 0xfff}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) keyctl$chown(0x4, r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000019400)="1776ba6967563e999128ab58c9196f90a8b7eda5e06a379aab9200ccba756b6085690ec886b04ea17bd72df578af6b", 0x2f, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000194c0), &(0x7f0000019500)={'syz', 0x2}, &(0x7f0000019540)="f2fc002267bb07fe6615e68feceae5e498fe63b301359a10e8c2038ec59fb08274c44fac7c009039be2f9a65f895f4afbcb162ce97a0f08a5e27777699ad9a384a937964ac121465d737459c95b5cdb03a502811e79e356d682ad173e3d852", 0x5f, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000195c0)={r3, r4, r5}, &(0x7f0000019600)=""/232, 0xe8, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000019300)={0x1, @vbi={0x1, 0x7, 0xf160, 0x35315241, [0x1, 0x4], [0x101, 0x7], 0x1}}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x10000, 0x0, '\x00', 0x1, 0x0}) inotify_init() socket$inet6(0xa, 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) 23.19143229s ago: executing program 9 (id=2227): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x6, 0x6e6bbc, 0x1, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) socket(0x2, 0xa, 0x0) 22.899091516s ago: executing program 0 (id=2229): dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x25000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x2bd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r4, &(0x7f0000000380)=@nfc, &(0x7f0000000480)=0x80, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) sched_getaffinity(0x0, 0x4, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 17.426541864s ago: executing program 4 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x266}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x3, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0x7c, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0xb, 0x4008, 0x746f, 0x8, 0xffffef7f, 0x4, 0x100ee, 0x8004, 0x7ffd]}) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './cgroup.cpu/cgroup.procs\x00'}) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000500)={0x1, 0x0, 0x94, &(0x7f0000000400)={0xffffffffffffffff, 0x800, 0x5}}) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0x12) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 17.358722616s ago: executing program 9 (id=2234): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000700)={0x8}, 0x4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000008c0)={0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) syz_clone(0x8000200, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 14.211796314s ago: executing program 9 (id=2235): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x29, @remote, 0x1}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000240)="e5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x206, 0x3, 0x80000001, 0xa00, 0x401}, 0x14) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000180)=0x33) 13.875484011s ago: executing program 4 (id=2236): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r1 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x10, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r3, 0x40003400000, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0x1000) 13.875207001s ago: executing program 8 (id=2237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000206010800696430c800000000000000"], 0x28}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a", 0xf, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01007a"], &(0x7f0000000f80)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) 12.778353265s ago: executing program 0 (id=2239): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x7c) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0x36) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x1f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) 11.367149415s ago: executing program 9 (id=2240): socket(0x40000000015, 0x5, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) close_range(r2, 0xffffffffffffffff, 0x0) 11.303460507s ago: executing program 8 (id=2241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x800, 0x2) r3 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000003c0)={0xf0f000, 0x8, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x107, 0x100000, 0xfffffffffffffffa, 0x5, 0x1, 0x20000, 0x8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) 11.176830639s ago: executing program 4 (id=2242): socket(0x40000000015, 0x5, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) close_range(r2, 0xffffffffffffffff, 0x0) 10.831014486s ago: executing program 7 (id=2243): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x11, 0x3, 0xd, 0x8000, 0x2, "70e6de6caaad1cbaa511ec16a8c99b346b9137", 0xffff0000, 0x41}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) 8.415670769s ago: executing program 0 (id=2244): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e24, 0x10003, 0xcd, 0x1, 0xfff}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) keyctl$chown(0x4, r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000019400)="1776ba6967563e999128ab58c9196f90a8b7eda5e06a379aab9200ccba756b6085690ec886b04ea17bd72df578af6b", 0x2f, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000194c0), &(0x7f0000019500)={'syz', 0x2}, &(0x7f0000019540)="f2fc002267bb07fe6615e68feceae5e498fe63b301359a10e8c2038ec59fb08274c44fac7c009039be2f9a65f895f4afbcb162ce97a0f08a5e27777699ad9a384a937964ac121465d737459c95b5cdb03a502811e79e356d682ad173e3d852", 0x5f, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000195c0)={r3, r4, r5}, &(0x7f0000019600)=""/232, 0xe8, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000019300)={0x1, @vbi={0x1, 0x7, 0xf160, 0x35315241, [0x1, 0x4], [0x101, 0x7], 0x1}}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x10000, 0x0, '\x00', 0x1, 0x0}) inotify_init() socket$inet6(0xa, 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) 8.414459149s ago: executing program 4 (id=2254): socket(0x40000000015, 0x5, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) close_range(r2, 0xffffffffffffffff, 0x0) 8.112623675s ago: executing program 7 (id=2245): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000063c04223e69e988e00000000000006000000800000000e00000000000000bf738d67000000000600000000000000ff7f0000000000000000000000bc2bbbeb3a6edbd30b82000009000000000000000000000000000000000000000077000000ffffffffffffff7fbbd30000000000000500"/200]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0xbf, 0xbf06}) socket(0x11, 0x4, 0x52025b51) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) 6.730229815s ago: executing program 8 (id=2246): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000700)={0x8}, 0x4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000008c0)={0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) syz_clone(0x8000200, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 6.106025128s ago: executing program 7 (id=2247): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) io_uring_setup(0x667e, &(0x7f0000000400)={0x0, 0x25e1, 0x3000, 0x2, 0xfefffffd}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x4c}}, 0x40000) fstat(r2, 0x0) fchown(r0, r3, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 5.730190076s ago: executing program 8 (id=2248): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) setuid(0x0) io_uring_setup(0x667e, &(0x7f0000000400)={0x0, 0x25e1, 0x3000, 0x2, 0xfefffffd}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x4c}}, 0x40000) fstat(r3, 0x0) fchown(r0, 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(r3, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 5.009652572s ago: executing program 7 (id=2249): socket$kcm(0x10, 0x2, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r4 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(r4) fsmount(r4, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) madvise(&(0x7f000015f000/0x4000)=nil, 0x4000, 0x19) 3.419115126s ago: executing program 7 (id=2250): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000002780)="$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") getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xd2c38b646bea9b0c, &(0x7f0000000280)={0x3, 0x3}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20b, &(0x7f0000001740)="$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") syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x2000000, &(0x7f0000002300)=ANY=[@ANYBLOB="6e6f6e756d7461696c39302c73686f77657865632c73686f72746e616d653d77696e39352c726f6469722c636f6465706167653d313235302c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c646973636172642c646f733178666c6f7070792c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f636861727365743d63703835372c736d61636b6673726f6f743d265c3a2c407b2c6d61736b3d5e4d41595f524541441a01cea20eb22c7065726d69745f64697265637469", @ANYRESDEC=0x0, @ANYBLOB=',func=BPRM_CHECK,audit,smackfsdef=}+,\x00'], 0x1, 0x368, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x26b25}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) 1.18466ms ago: executing program 4 (id=2252): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) rmdir(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000001c0)={0x10b8, 0x5, 0x4, 0x0, 0x7f}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setuid(0x0) socket(0x10, 0x3, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 900.6µs ago: executing program 7 (id=2253): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r1 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x10, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r3, 0x40003400000, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0x1000) 535.21µs ago: executing program 8 (id=2255): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f00000003c0), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fstat(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, r4) lchown(&(0x7f0000000240)='./file0\x00', r4, 0xee01) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/93, 0x5d}, 0x6d33}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x102, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) 185.88µs ago: executing program 0 (id=2256): keyctl$set_reqkey_keyring(0xe, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x600}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, 0x0}, 0x94) listen(r1, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f009, 0x2}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x402002, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e21, @local}, 0x210, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)='pim6reg\x00', 0x1, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000680)={'ip6gre0\x00', 0x6}) 0s ago: executing program 9 (id=2263): socket(0x40000000015, 0x5, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 9] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.187178][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.198988][T15059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1462.212107][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1462.229042][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1462.267688][T15059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.283695][T15059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.292467][T15059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.307656][T15059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.581756][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.598041][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.613348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1462.662003][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.703051][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.718249][T15123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1462.728944][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1462.756957][T15123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1462.808782][T15123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1462.831160][T15123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1467.002013][T15123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.077889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1467.093772][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1467.192192][T15123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.338625][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1467.495860][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1467.708347][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.715767][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.840621][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1467.855206][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1467.870871][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1468.796350][T15298] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1468.825452][T15298] CIFS mount error: No usable UNC path provided in device string! [ 1468.825452][T15298] [ 1468.875101][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.882276][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.897270][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1468.905071][T15298] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1468.927051][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1468.961978][T15123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1468.973134][T15123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1469.269818][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1469.413012][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1469.531756][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1469.577885][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1469.619869][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1469.664004][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1469.690810][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1469.760902][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1469.814196][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1469.827554][T15304] loop9: detected capacity change from 0 to 256 [ 1469.839055][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1470.092565][T15309] loop3: detected capacity change from 0 to 256 [ 1471.597525][T15323] loop9: detected capacity change from 0 to 256 [ 1474.552734][ T4279] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 1475.119806][T15347] Bluetooth: MGMT ver 1.22 [ 1476.123411][T12442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1476.197724][T12442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1476.430148][T15123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.677925][T15369] loop3: detected capacity change from 0 to 8 [ 1478.060051][ T4344] Bluetooth: Error in BCSP hdr checksum [ 1478.502688][T15373] loop6: detected capacity change from 0 to 256 [ 1479.558194][T15387] binder: BINDER_SET_CONTEXT_MGR already set [ 1479.575585][T15387] binder: 15384:15387 ioctl 4018620d 200000004a80 returned -16 [ 1479.873209][ T4279] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1482.236504][T15409] loop6: detected capacity change from 0 to 512 [ 1482.276996][T15409] EXT4-fs: Ignoring removed orlov option [ 1482.593199][T15409] EXT4-fs: Ignoring removed bh option [ 1483.054318][T15412] loop3: detected capacity change from 0 to 1024 [ 1483.087248][T15409] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.1895: corrupted in-inode xattr [ 1483.126094][ T26] audit: type=1326 audit(1783877953.825:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1483.152028][T15409] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1895: couldn't read orphan inode 15 (err -117) [ 1483.201348][T15409] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1483.316683][T11100] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1483.384843][ T26] audit: type=1326 audit(1783877953.875:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1483.408960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.472798][ T26] audit: type=1326 audit(1783877953.875:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1485.253257][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.259631][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.438364][ T26] audit: type=1326 audit(1783877953.875:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1485.661591][ T26] audit: type=1326 audit(1783877953.875:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1485.750545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1486.294024][ T26] audit: type=1326 audit(1783877953.875:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1486.318770][T11100] usb 10-1: device descriptor read/all, error -71 [ 1486.325974][ T26] audit: type=1326 audit(1783877953.875:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1486.350318][ T26] audit: type=1326 audit(1783877953.875:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1486.357410][ T5521] EXT4-fs (loop6): unmounting filesystem. [ 1486.374452][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.374580][ T26] audit: type=1326 audit(1783877953.875:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1486.374623][ T26] audit: type=1326 audit(1783877953.875:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15411 comm="syz.3.1896" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb8bd79de59 code=0x7ffc0000 [ 1486.393731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1486.411203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.594144][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1486.611807][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1486.941379][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1487.064549][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1487.114278][T15431] loop9: detected capacity change from 0 to 256 [ 1487.149106][T15123] device veth0_vlan entered promiscuous mode [ 1487.183303][T15123] device veth1_vlan entered promiscuous mode [ 1487.384327][T13209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1487.857826][T13209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1488.098088][T15123] device veth0_macvtap entered promiscuous mode [ 1488.185868][T15123] device veth1_macvtap entered promiscuous mode [ 1488.371067][T15445] binder: 15439:15445 ioctl 402c5828 0 returned -22 [ 1489.049623][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.528662][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.463491][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.551103][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.892666][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.006153][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 1491.006205][ T26] audit: type=1804 audit(1783878217.701:266): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1903" name="bus" dev="ramfs" ino=70744 res=1 errno=0 [ 1491.032771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1491.525191][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.737768][ T26] audit: type=1804 audit(1783878217.731:267): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1903" name="bus" dev="ramfs" ino=70744 res=1 errno=0 [ 1492.768828][T15123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1492.830743][T15455] loop3: detected capacity change from 0 to 128 [ 1492.840932][T15455] FAT-fs (loop3): Directory bread(block 414) failed [ 1492.850570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1492.861147][T15455] FAT-fs (loop3): Directory bread(block 415) failed [ 1492.868858][T15455] FAT-fs (loop3): Directory bread(block 416) failed [ 1492.877113][T15455] FAT-fs (loop3): Directory bread(block 417) failed [ 1492.878862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1492.892903][T15455] FAT-fs (loop3): Directory bread(block 418) failed [ 1492.899580][T15455] FAT-fs (loop3): Directory bread(block 419) failed [ 1492.919342][T15455] FAT-fs (loop3): Directory bread(block 420) failed [ 1492.929492][T15455] FAT-fs (loop3): Directory bread(block 421) failed [ 1492.979647][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.022799][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.048626][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.590536][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.619577][T15123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.221559][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1494.258723][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1494.327797][T15466] FAT-fs (loop3): Directory bread(block 414) failed [ 1494.335319][T15466] FAT-fs (loop3): Directory bread(block 415) failed [ 1495.003827][T15123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.742686][T15123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.751463][T15123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.778842][T15470] loop3: detected capacity change from 0 to 512 [ 1495.824051][T15470] EXT4-fs: Ignoring removed orlov option [ 1495.849862][T15470] EXT4-fs: Ignoring removed bh option [ 1495.879835][T15123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.156300][T15470] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1909: corrupted in-inode xattr [ 1496.853627][T15470] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1909: couldn't read orphan inode 15 (err -117) [ 1496.940089][T15470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1497.062022][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.071321][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.139039][T13209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1497.163895][T15481] loop6: detected capacity change from 0 to 256 [ 1497.504067][ T26] audit: type=1804 audit(1783878224.201:268): pid=15489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1915" name="bus" dev="ramfs" ino=71733 res=1 errno=0 [ 1497.524309][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.543335][T15489] binder: 15487:15489 ioctl 402c5828 0 returned -22 [ 1500.015351][ T4279] Bluetooth: hci2: link tx timeout [ 1500.021822][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.057238][ T4279] Bluetooth: hci2: link tx timeout [ 1500.062429][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.071063][ T4279] Bluetooth: hci2: link tx timeout [ 1500.076313][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.084545][ T4279] Bluetooth: hci2: link tx timeout [ 1500.089894][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.098176][ T4279] Bluetooth: hci2: link tx timeout [ 1500.103766][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.115103][ T4279] Bluetooth: hci2: link tx timeout [ 1500.120277][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.153836][ T4279] Bluetooth: hci2: link tx timeout [ 1500.158997][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.172951][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.180835][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.218092][ T4279] Bluetooth: hci2: link tx timeout [ 1500.223369][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.235062][ T4279] Bluetooth: hci2: link tx timeout [ 1500.240425][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.279951][ T4279] Bluetooth: hci2: link tx timeout [ 1500.285190][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.312565][ T4279] Bluetooth: hci2: link tx timeout [ 1500.317994][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.348867][ T4279] Bluetooth: hci2: link tx timeout [ 1500.354150][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.363050][ T4279] Bluetooth: hci2: link tx timeout [ 1500.368224][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.376131][ T4279] Bluetooth: hci2: link tx timeout [ 1500.381256][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.390474][ T4279] Bluetooth: hci2: link tx timeout [ 1500.395823][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.406998][ T4279] Bluetooth: hci2: link tx timeout [ 1500.412149][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.420290][ T4279] Bluetooth: hci2: link tx timeout [ 1500.425659][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.434155][ T4279] Bluetooth: hci2: link tx timeout [ 1500.439312][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.448627][ T4279] Bluetooth: hci2: link tx timeout [ 1500.453917][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.533902][ T4279] Bluetooth: hci2: link tx timeout [ 1500.539397][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.548490][ T4279] Bluetooth: hci2: link tx timeout [ 1500.553769][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.561831][ T4279] Bluetooth: hci2: link tx timeout [ 1500.567028][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.575475][ T4279] Bluetooth: hci2: link tx timeout [ 1500.580632][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.588731][ T4279] Bluetooth: hci2: link tx timeout [ 1500.593951][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.602180][ T4279] Bluetooth: hci2: link tx timeout [ 1500.602420][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1500.607378][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.627304][ T4279] Bluetooth: hci2: link tx timeout [ 1500.632462][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.642867][ T4279] Bluetooth: hci2: link tx timeout [ 1500.648201][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.660740][ T4279] Bluetooth: hci2: link tx timeout [ 1500.665976][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.674213][ T4279] Bluetooth: hci2: link tx timeout [ 1500.679379][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.687958][ T4279] Bluetooth: hci2: link tx timeout [ 1500.693210][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.713095][ T4279] Bluetooth: hci2: link tx timeout [ 1500.713126][ T26] audit: type=1804 audit(1783878224.231:269): pid=15489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1915" name="bus" dev="ramfs" ino=71733 res=1 errno=0 [ 1500.718258][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.769746][ T4279] Bluetooth: hci2: link tx timeout [ 1500.775187][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.792962][ T4279] Bluetooth: hci2: link tx timeout [ 1500.798187][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.810622][ T4279] Bluetooth: hci2: link tx timeout [ 1500.815952][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.824227][ T4279] Bluetooth: hci2: link tx timeout [ 1500.829372][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.837523][ T4279] Bluetooth: hci2: link tx timeout [ 1500.842788][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.851595][ T4279] Bluetooth: hci2: link tx timeout [ 1500.856900][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.865149][ T4279] Bluetooth: hci2: link tx timeout [ 1500.870406][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.878594][ T4279] Bluetooth: hci2: link tx timeout [ 1500.883842][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.891923][ T4279] Bluetooth: hci2: link tx timeout [ 1500.897192][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.905617][ T4279] Bluetooth: hci2: link tx timeout [ 1500.910772][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.925178][ T4279] Bluetooth: hci2: link tx timeout [ 1500.930327][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.943131][ T4279] Bluetooth: hci2: link tx timeout [ 1500.948296][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.963117][ T4279] Bluetooth: hci2: link tx timeout [ 1500.968266][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.984806][ T4279] Bluetooth: hci2: link tx timeout [ 1500.989981][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.998225][ T4279] Bluetooth: hci2: link tx timeout [ 1501.003411][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.011430][ T4279] Bluetooth: hci2: link tx timeout [ 1501.016777][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.024966][ T4279] Bluetooth: hci2: link tx timeout [ 1501.030106][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.038168][ T4279] Bluetooth: hci2: link tx timeout [ 1501.043382][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.051638][ T4279] Bluetooth: hci2: link tx timeout [ 1501.057074][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.065343][ T4279] Bluetooth: hci2: link tx timeout [ 1501.070528][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.078551][ T4279] Bluetooth: hci2: link tx timeout [ 1501.083839][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.092004][ T4279] Bluetooth: hci2: link tx timeout [ 1501.097268][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.105448][ T4279] Bluetooth: hci2: link tx timeout [ 1501.110801][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.118706][ T4279] Bluetooth: hci2: link tx timeout [ 1501.123934][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.157394][ T4279] Bluetooth: hci2: link tx timeout [ 1501.162921][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.173168][ T4279] Bluetooth: hci2: link tx timeout [ 1501.178322][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.186822][ T4279] Bluetooth: hci2: link tx timeout [ 1501.192388][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.201038][ T4279] Bluetooth: hci2: link tx timeout [ 1501.206272][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.214601][ T4279] Bluetooth: hci2: link tx timeout [ 1501.219762][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.228055][ T4279] Bluetooth: hci2: link tx timeout [ 1501.233302][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.243658][ T4279] Bluetooth: hci2: link tx timeout [ 1501.248841][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.286271][ T4279] Bluetooth: hci2: link tx timeout [ 1501.291467][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.299853][ T4279] Bluetooth: hci2: link tx timeout [ 1501.305610][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.314061][ T4279] Bluetooth: hci2: link tx timeout [ 1501.319622][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.331498][ T4279] Bluetooth: hci2: link tx timeout [ 1501.336737][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.345295][ T4279] Bluetooth: hci2: link tx timeout [ 1501.350474][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.366939][ T4279] Bluetooth: hci2: link tx timeout [ 1501.372205][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.413922][ T4279] Bluetooth: hci2: link tx timeout [ 1501.421480][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.464002][T15500] binder: 15495:15500 ioctl 402c5828 0 returned -22 [ 1502.102743][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 1502.463221][ T4279] Bluetooth: hci2: link tx timeout [ 1502.468461][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.511172][ T4279] Bluetooth: hci2: link tx timeout [ 1502.516700][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.619973][ T4279] Bluetooth: hci2: link tx timeout [ 1502.625301][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.658340][ T4279] Bluetooth: hci2: link tx timeout [ 1502.663637][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.710215][ T4279] Bluetooth: hci2: link tx timeout [ 1502.715524][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.763413][ T4279] Bluetooth: hci2: link tx timeout [ 1502.768635][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.815341][ T4279] Bluetooth: hci2: link tx timeout [ 1502.820641][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.871833][ T4279] Bluetooth: hci2: link tx timeout [ 1502.877185][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.935898][ T4279] Bluetooth: hci2: link tx timeout [ 1502.941198][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1502.980654][ T4279] Bluetooth: hci2: link tx timeout [ 1502.986035][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.007877][ T4279] Bluetooth: hci2: link tx timeout [ 1503.013263][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.027279][ T4279] Bluetooth: hci2: link tx timeout [ 1503.032528][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.045071][ T4279] Bluetooth: hci2: link tx timeout [ 1503.050253][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.063549][ T4279] Bluetooth: hci2: link tx timeout [ 1503.068762][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.081485][ T4279] Bluetooth: hci2: link tx timeout [ 1503.086728][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.097662][ T4279] Bluetooth: hci2: link tx timeout [ 1503.102937][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.118513][ T4279] Bluetooth: hci2: link tx timeout [ 1503.123800][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.134514][ T4279] Bluetooth: hci2: link tx timeout [ 1503.139696][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.151784][ T4279] Bluetooth: hci2: link tx timeout [ 1503.157072][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.176089][ T4279] Bluetooth: hci2: link tx timeout [ 1503.181384][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.195469][ T4279] Bluetooth: hci2: link tx timeout [ 1503.200751][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.211765][ T4279] Bluetooth: hci2: link tx timeout [ 1503.217027][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.227194][ T4279] Bluetooth: hci2: link tx timeout [ 1503.232407][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.244568][ T4279] Bluetooth: hci2: link tx timeout [ 1503.249762][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.259482][ T4279] Bluetooth: hci2: link tx timeout [ 1503.264934][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.274993][ T4279] Bluetooth: hci2: link tx timeout [ 1503.280196][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.290810][ T4279] Bluetooth: hci2: link tx timeout [ 1503.296197][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.306403][ T4279] Bluetooth: hci2: link tx timeout [ 1503.311884][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.322733][ T4279] Bluetooth: hci2: link tx timeout [ 1503.328116][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.348373][ T4279] Bluetooth: hci2: link tx timeout [ 1503.353854][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.364681][ T4279] Bluetooth: hci2: link tx timeout [ 1503.369894][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.383833][ T4279] Bluetooth: hci2: link tx timeout [ 1503.389027][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.398931][ T4279] Bluetooth: hci2: link tx timeout [ 1503.404192][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.415620][ T4279] Bluetooth: hci2: link tx timeout [ 1503.420839][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.430811][ T4279] Bluetooth: hci2: link tx timeout [ 1503.436118][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.451485][ T4279] Bluetooth: hci2: link tx timeout [ 1503.457039][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.484270][ T4279] Bluetooth: hci2: link tx timeout [ 1503.489510][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.500968][ T4279] Bluetooth: hci2: link tx timeout [ 1503.506330][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.517464][ T4279] Bluetooth: hci2: link tx timeout [ 1503.522791][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.533044][ T4279] Bluetooth: hci2: link tx timeout [ 1503.538269][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.548216][ T4279] Bluetooth: hci2: link tx timeout [ 1503.553616][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.567706][ T4279] Bluetooth: hci2: link tx timeout [ 1503.572984][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.583303][ T4279] Bluetooth: hci2: link tx timeout [ 1503.588515][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.598645][ T4279] Bluetooth: hci2: link tx timeout [ 1503.603934][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.616901][ T4279] Bluetooth: hci2: link tx timeout [ 1503.622087][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.631797][ T4279] Bluetooth: hci2: link tx timeout [ 1503.637038][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.647506][ T4279] Bluetooth: hci2: link tx timeout [ 1503.652781][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.665901][ T4279] Bluetooth: hci2: link tx timeout [ 1503.671268][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.685953][ T4279] Bluetooth: hci2: link tx timeout [ 1503.691159][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.701000][ T4279] Bluetooth: hci2: link tx timeout [ 1503.706283][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.718912][ T4279] Bluetooth: hci2: link tx timeout [ 1503.724197][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.734566][ T4279] Bluetooth: hci2: link tx timeout [ 1503.739764][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.750168][ T4279] Bluetooth: hci2: link tx timeout [ 1503.755516][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.767912][ T4279] Bluetooth: hci2: link tx timeout [ 1503.773372][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.785468][ T4279] Bluetooth: hci2: link tx timeout [ 1503.790802][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.805273][ T4279] Bluetooth: hci2: link tx timeout [ 1503.810511][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.822655][ T4279] Bluetooth: hci2: link tx timeout [ 1503.827863][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.838502][ T4279] Bluetooth: hci2: link tx timeout [ 1503.843758][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.854171][ T4279] Bluetooth: hci2: link tx timeout [ 1503.859472][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.879645][ T4279] Bluetooth: hci2: link tx timeout [ 1503.885110][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.895078][ T4279] Bluetooth: hci2: link tx timeout [ 1503.900285][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.909719][ T4279] Bluetooth: hci2: link tx timeout [ 1503.915158][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.926561][ T4279] Bluetooth: hci2: link tx timeout [ 1503.931785][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.942730][ T4279] Bluetooth: hci2: link tx timeout [ 1503.948035][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.958131][ T4279] Bluetooth: hci2: link tx timeout [ 1503.963453][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.972562][ T4279] Bluetooth: hci2: link tx timeout [ 1503.978120][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1503.988019][ T4279] Bluetooth: hci2: link tx timeout [ 1503.993351][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.003018][ T4279] Bluetooth: hci2: link tx timeout [ 1504.008208][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.017654][ T4279] Bluetooth: hci2: link tx timeout [ 1504.022887][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.039907][ T4279] Bluetooth: hci2: link tx timeout [ 1504.045140][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.054203][ T4279] Bluetooth: hci2: link tx timeout [ 1504.059479][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.069254][ T4279] Bluetooth: hci2: link tx timeout [ 1504.074546][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.084449][ T4279] Bluetooth: hci2: link tx timeout [ 1504.089627][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.099471][ T4279] Bluetooth: hci2: link tx timeout [ 1504.104769][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.116418][ T4279] Bluetooth: hci2: link tx timeout [ 1504.121642][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.135147][ T4279] Bluetooth: hci2: link tx timeout [ 1504.140340][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.153366][ T4279] Bluetooth: hci2: link tx timeout [ 1504.158584][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.168219][ T4279] Bluetooth: hci2: link tx timeout [ 1504.173505][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.183024][ T4279] Bluetooth: hci2: link tx timeout [ 1504.188196][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.212845][ T4279] Bluetooth: hci2: link tx timeout [ 1504.218042][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.228120][ T4279] Bluetooth: hci2: link tx timeout [ 1504.233680][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.246277][ T4279] Bluetooth: hci2: link tx timeout [ 1504.251495][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.276413][ T4279] Bluetooth: hci2: link tx timeout [ 1504.281606][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.334526][ T4279] Bluetooth: hci2: link tx timeout [ 1504.339714][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.347902][ T4279] Bluetooth: hci2: link tx timeout [ 1504.353154][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.360998][ T4279] Bluetooth: hci2: link tx timeout [ 1504.366552][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.374708][ T4279] Bluetooth: hci2: link tx timeout [ 1504.379873][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.388843][ T4279] Bluetooth: hci2: link tx timeout [ 1504.394177][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.401889][ T4279] Bluetooth: hci2: link tx timeout [ 1504.407182][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1504.414921][ T4279] Bluetooth: hci2: link tx timeout [ 1504.420057][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1506.079300][ T26] audit: type=1804 audit(1783878232.771:270): pid=15519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1918" name="bus" dev="ramfs" ino=71010 res=1 errno=0 [ 1507.264868][T15520] binder: 15514:15520 ioctl 402c5828 0 returned -22 [ 1511.819008][ T26] audit: type=1804 audit(1783878232.791:271): pid=15519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1918" name="bus" dev="ramfs" ino=71010 res=1 errno=0 [ 1511.839579][ T26] audit: type=1804 audit(1783878233.951:272): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1919" name="bus" dev="ramfs" ino=71859 res=1 errno=0 [ 1511.860550][ T26] audit: type=1804 audit(1783878233.961:273): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1919" name="bus" dev="ramfs" ino=71859 res=1 errno=0 [ 1513.388329][T15534] futex_wake_op: syz.6.1923 tries to shift op by 144; fix this program [ 1513.402007][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1923'. [ 1513.415099][T15534] netlink: 'syz.6.1923': attribute type 2 has an invalid length. [ 1513.494808][T15534] can0: slcan on ttyS3. [ 1514.544237][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1514.558228][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1514.698528][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1514.719969][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1514.773555][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1514.781826][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1515.037390][T11227] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.232576][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 1515.254149][T15528] can0 (unregistered): slcan off ttyS3. [ 1515.345197][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1515.359422][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1515.369197][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1515.388786][T15542] lo speed is unknown, defaulting to 1000 [ 1515.398543][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1515.406365][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1515.422329][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1515.511089][T11227] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.699416][T11227] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.736773][T15551] lo speed is unknown, defaulting to 1000 [ 1515.856632][T15557] loop9: detected capacity change from 0 to 1024 [ 1515.956435][T11227] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.556974][T15551] chnl_net:caif_netlink_parms(): no params data found [ 1516.595009][T15542] chnl_net:caif_netlink_parms(): no params data found [ 1516.822946][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 1517.327490][T15551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.343970][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.374280][T15551] device bridge_slave_0 entered promiscuous mode [ 1517.462858][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 1517.496811][T15551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.512766][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.521300][T15551] device bridge_slave_1 entered promiscuous mode [ 1517.563981][T15542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.571147][T15542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.604397][T15542] device bridge_slave_0 entered promiscuous mode [ 1517.720242][T15542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.732779][T15542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.766077][T15542] device bridge_slave_1 entered promiscuous mode [ 1517.778585][T15470] EXT4-fs (loop3): unmounting filesystem. [ 1517.982685][T15551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.062350][T15551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.096021][T15542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.218179][T15542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.400352][T15551] team0: Port device team_slave_0 added [ 1518.469155][T15542] team0: Port device team_slave_0 added [ 1518.530103][T15551] team0: Port device team_slave_1 added [ 1518.547551][T15542] team0: Port device team_slave_1 added [ 1518.693135][T15551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.700153][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.733971][T15551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.756697][T15551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.765453][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.795148][T15551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.807714][T15542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.815245][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.842050][T15542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.903436][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 1518.927929][T15542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.941705][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.978575][T15542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.090902][T15551] device hsr_slave_0 entered promiscuous mode [ 1519.098527][T15551] device hsr_slave_1 entered promiscuous mode [ 1519.105830][T15551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1519.115678][T15551] Cannot create hsr debugfs directory [ 1519.189636][T11227] device hsr_slave_0 left promiscuous mode [ 1519.201849][T11227] device hsr_slave_1 left promiscuous mode [ 1519.211808][T11227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1519.229082][T11227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.240025][T11227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1519.255815][T11227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.268536][T11227] device bridge_slave_1 left promiscuous mode [ 1519.278421][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.292514][T11227] device bridge_slave_0 left promiscuous mode [ 1519.302626][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.366509][T11227] device veth1_macvtap left promiscuous mode [ 1519.372830][T11227] device veth0_macvtap left promiscuous mode [ 1519.379059][T11227] device veth1_vlan left promiscuous mode [ 1519.386242][T11227] device veth0_vlan left promiscuous mode [ 1519.558419][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 1520.849429][T11227] team0 (unregistering): Port device team_slave_1 removed [ 1520.980159][T11227] team0 (unregistering): Port device team_slave_0 removed [ 1520.987879][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 1521.115953][T11227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.243674][T11227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.623245][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 1521.872072][T11227] bond0 (unregistering): Released all slaves [ 1522.049477][T15542] device hsr_slave_0 entered promiscuous mode [ 1522.065316][T15542] device hsr_slave_1 entered promiscuous mode [ 1522.072546][T15542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1522.080387][T15542] Cannot create hsr debugfs directory [ 1523.009606][T15551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1523.022313][T15551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1523.062303][T15551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1523.073325][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 1523.093961][T15551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1523.341451][T15551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.409346][T15551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.450854][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1523.463744][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1523.507030][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1523.522307][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1523.542165][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.549484][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.559646][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1523.603269][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1523.612162][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1523.652550][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.659769][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.675257][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1523.685272][T11227] tipc: Left network mode [ 1523.703125][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 1523.708000][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1523.738652][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1523.802851][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1523.811737][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1523.823859][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1523.834248][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1523.878532][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1523.889195][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1523.899415][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1523.912299][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1523.999962][T15551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1524.113920][T15542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1524.148701][T15542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1524.205870][T15542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1524.280352][T15542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1524.570050][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1524.578069][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1524.627476][T15551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.658866][T15542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.720805][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1524.730272][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1524.751806][T15542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.814671][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1524.832256][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1524.853577][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.860763][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.883545][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1524.903710][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1524.929223][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.936436][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.946491][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1525.017815][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1525.040097][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1525.066111][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1525.116752][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1525.302564][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1525.331768][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1525.356721][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1525.394391][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1525.410408][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1525.427523][T15542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1525.458777][T15542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1525.627676][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1525.638731][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1525.700404][T11227] device hsr_slave_0 left promiscuous mode [ 1525.712451][T11227] device hsr_slave_1 left promiscuous mode [ 1525.721414][T11227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.737353][T11227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.757650][T11227] device bridge_slave_1 left promiscuous mode [ 1525.764909][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.787801][T11227] device bridge_slave_0 left promiscuous mode [ 1525.797410][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.902441][T11227] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1526.216403][T11227] bond1 (unregistering): Released all slaves [ 1527.426107][T11227] team0 (unregistering): Port device team_slave_1 removed [ 1527.540474][T11227] team0 (unregistering): Port device team_slave_0 removed [ 1527.637835][T11227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.714524][T11227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.281897][T11227] bond0 (unregistering): Released all slaves [ 1528.460475][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1528.471643][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1528.496502][T15551] device veth0_vlan entered promiscuous mode [ 1528.516931][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1528.543651][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1528.581621][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1528.600202][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1528.629922][T15551] device veth1_vlan entered promiscuous mode [ 1528.731481][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1528.755113][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1528.789085][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1528.798342][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1528.816846][T15551] device veth0_macvtap entered promiscuous mode [ 1528.833773][T15551] device veth1_macvtap entered promiscuous mode [ 1528.857923][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1528.871617][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1528.880375][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1528.888257][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1528.910141][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.921586][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.931995][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.944388][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.955720][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.968517][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.018363][T15551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.034400][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1529.045963][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1529.057212][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.088033][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.098162][T15551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.109087][T15551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.120751][T15551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.134590][T15542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.142833][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1529.151696][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1529.177663][T15551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.196857][T15551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.223252][T15551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.232034][T15551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.423195][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.431086][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.458405][T13209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1529.481173][T13209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.497658][T13209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.510923][T13209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1533.000204][ T26] audit: type=1804 audit(1783878259.691:274): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1939" name="bus" dev="ramfs" ino=72767 res=1 errno=0 [ 1534.748466][ T26] audit: type=1804 audit(1783878259.721:275): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1939" name="bus" dev="ramfs" ino=72767 res=1 errno=0 [ 1535.803309][T15766] binder: 15759:15766 ioctl 402c5828 0 returned -22 [ 1536.815740][ T26] audit: type=1804 audit(1783878262.091:276): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1928" name="bus" dev="ramfs" ino=72600 res=1 errno=0 [ 1537.183399][ T26] audit: type=1804 audit(1783878262.091:277): pid=15765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1928" name="bus" dev="ramfs" ino=72600 res=1 errno=0 [ 1542.575778][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1542.611089][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1544.019723][T15542] device veth0_vlan entered promiscuous mode [ 1544.123170][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1544.147341][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1544.184821][T15542] device veth1_vlan entered promiscuous mode [ 1544.206625][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1544.288768][ T26] audit: type=1804 audit(1783878270.981:278): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1933" name="bus" dev="ramfs" ino=72647 res=1 errno=0 [ 1544.856089][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1545.465435][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.471833][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.745555][ T26] audit: type=1804 audit(1783878271.011:279): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1933" name="bus" dev="ramfs" ino=72647 res=1 errno=0 [ 1545.862350][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1545.883161][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1547.805193][T15804] loop6: detected capacity change from 0 to 1024 [ 1548.008851][ T26] audit: type=1804 audit(1783878274.701:280): pid=15798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1932" name="bus" dev="ramfs" ino=72682 res=1 errno=0 [ 1548.058567][ T26] audit: type=1804 audit(1783878274.741:281): pid=15798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1932" name="bus" dev="ramfs" ino=72682 res=1 errno=0 [ 1548.085839][T15798] binder: 15793:15798 ioctl 402c5828 0 returned -22 [ 1549.723952][T15804] hfsplus: failed to load extents file [ 1549.849894][T15542] device veth0_macvtap entered promiscuous mode [ 1549.925283][T15542] device veth1_macvtap entered promiscuous mode [ 1550.003493][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1550.012000][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1550.091949][T15542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.114574][ T26] audit: type=1326 audit(1783878276.811:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1550.193033][T15542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.213088][ T26] audit: type=1326 audit(1783878276.811:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1550.259675][T15542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.288790][T15542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.310997][T15542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.331163][ T26] audit: type=1326 audit(1783878276.811:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1550.369991][T15542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.393353][T15542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.423435][ T26] audit: type=1326 audit(1783878276.811:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1550.447581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.645220][T15542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.072387][T15542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.452064][T15816] loop6: detected capacity change from 0 to 512 [ 1551.475858][T15542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.513815][ T26] audit: type=1326 audit(1783878276.811:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1551.577714][T15542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.587737][T15542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.598900][T15542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.608868][T15542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.619824][T15542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.631443][T15542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.644097][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1551.652497][ T26] audit: type=1326 audit(1783878276.811:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1551.676640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.682018][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1551.692687][ T26] audit: type=1326 audit(1783878276.811:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1551.787513][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1551.993956][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1552.062792][ T26] audit: type=1326 audit(1783878276.811:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1552.087252][ T26] audit: type=1326 audit(1783878276.811:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1552.141501][ T26] audit: type=1326 audit(1783878276.861:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15815 comm="syz.6.1942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd1ba19de59 code=0x7ffc0000 [ 1552.172356][T15542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.246633][T15542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.426739][T15542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.687244][T15542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.284730][T15816] EXT4-fs (loop6): 1 orphan inode deleted [ 1553.322716][ T6034] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:22: Failed to release dquot type 1 [ 1553.668176][T15816] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1554.836783][T15816] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1557.311084][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.607628][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.731558][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1557.763787][ T5521] EXT4-fs (loop6): unmounting filesystem. [ 1557.826176][T12833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.844981][T12833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.877040][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1558.154059][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1941'. [ 1560.130315][ T4275] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1560.860348][ T4275] usb 6-1: Using ep0 maxpacket: 16 [ 1560.923793][ T4275] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1561.077040][ T4275] usb 6-1: string descriptor 0 read error: -71 [ 1561.103217][ T4275] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1561.118496][ T4275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.141297][ T4275] r8152-cfgselector 6-1: config 0 descriptor?? [ 1561.186541][ T4275] r8152-cfgselector 6-1: can't set config #0, error -71 [ 1561.265537][ T4275] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1561.310168][ T4275] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 1564.414820][T15925] autofs4:pid:15925:autofs_fill_super: called with bogus options [ 1564.703023][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 1564.703039][ T26] audit: type=1326 audit(1783878547.081:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1566.673115][ T26] audit: type=1326 audit(1783878547.081:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1566.733782][T15931] device syzkaller0 entered promiscuous mode [ 1566.765637][ T26] audit: type=1326 audit(1783878547.091:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1568.470800][T15937] erofs: (device loop9): erofs_read_superblock: cannot find valid erofs superblock [ 1568.662759][ T26] audit: type=1326 audit(1783878547.091:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1568.981955][ T26] audit: type=1326 audit(1783878547.091:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1569.009470][T15938] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1569.017976][T15938] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1569.026641][T15938] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1569.172220][ T26] audit: type=1326 audit(1783878547.091:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1571.365191][ T26] audit: type=1326 audit(1783878547.091:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1571.403737][ T26] audit: type=1326 audit(1783878547.091:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1571.562650][ T26] audit: type=1326 audit(1783878547.091:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1572.529219][ T26] audit: type=1326 audit(1783878547.091:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1572.554518][ T26] audit: type=1326 audit(1783878547.101:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1572.579578][ T26] audit: type=1326 audit(1783878547.101:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1572.619734][ T26] audit: type=1326 audit(1783878547.101:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1573.302716][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 1575.296082][ T26] audit: type=1326 audit(1783878547.101:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1575.332683][ T26] audit: type=1326 audit(1783878547.101:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1575.356793][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.363157][ T26] audit: type=1326 audit(1783878547.121:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.0.1959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57839de59 code=0x7ffc0000 [ 1575.514103][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1575.530356][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1575.541352][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1575.549447][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1575.562248][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1575.570311][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1576.795214][T15976] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1576.803414][T15976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1576.809926][T15976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1576.825037][T15976] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1576.832846][T15976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1576.839010][T15976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1576.865567][T15976] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1576.874341][T15976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1576.880299][T15976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1576.903064][T15976] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1576.995959][T15981] block device autoloading is deprecated and will be removed. [ 1579.669663][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 1579.677008][ T4279] Bluetooth: hci5: command 0x0c1a tx timeout [ 1579.683194][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 1579.683636][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 1580.161964][T16003] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1581.479211][ T4337] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.511430][T15969] chnl_net:caif_netlink_parms(): no params data found [ 1581.656003][ T4337] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.703154][T15999] Bluetooth: hci2: command 0x0406 tx timeout [ 1581.709288][T15999] Bluetooth: hci1: command 0x040f tx timeout [ 1581.722856][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 1581.820452][ T4337] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.639399][ T4337] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.912072][T16026] device syzkaller0 entered promiscuous mode [ 1583.028717][T15969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.040702][T15969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.058904][T15969] device bridge_slave_0 entered promiscuous mode [ 1583.076958][T15969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.093886][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.122829][T15969] device bridge_slave_1 entered promiscuous mode [ 1583.152967][T16026] tipc: Started in network mode [ 1583.158049][T16026] tipc: Node identity c2d3de3dd941, cluster identity 4711 [ 1583.198692][T16026] tipc: Enabled bearer , priority 0 [ 1583.322046][T15969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.380658][T16019] tipc: Resetting bearer [ 1583.539895][T16019] tipc: Disabling bearer [ 1583.703770][T15969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.785150][T15999] Bluetooth: hci1: command 0x0419 tx timeout [ 1584.456249][T15969] team0: Port device team_slave_0 added [ 1584.478751][T15969] team0: Port device team_slave_1 added [ 1585.863058][T15999] Bluetooth: hci1: command 0x0c1a tx timeout [ 1587.952537][T15999] Bluetooth: hci1: command 0x0406 tx timeout [ 1589.843362][T15969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.854028][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.940398][T16078] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1985'. [ 1589.974159][T15969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.989336][T16079] loop4: detected capacity change from 0 to 256 [ 1590.086848][T16081] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1590.881001][T15969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.912716][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.973311][T15969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.076389][T16079] FAT-fs (loop4): Directory bread(block 64) failed [ 1591.113896][T16079] FAT-fs (loop4): Directory bread(block 65) failed [ 1591.147819][T16079] FAT-fs (loop4): Directory bread(block 66) failed [ 1591.193261][T16079] FAT-fs (loop4): Directory bread(block 67) failed [ 1591.226125][T16079] FAT-fs (loop4): Directory bread(block 68) failed [ 1591.235220][T16079] FAT-fs (loop4): Directory bread(block 69) failed [ 1591.242453][T16079] FAT-fs (loop4): Directory bread(block 70) failed [ 1591.249794][T16079] FAT-fs (loop4): Directory bread(block 71) failed [ 1591.952769][T16079] FAT-fs (loop4): Directory bread(block 72) failed [ 1591.959391][T16079] FAT-fs (loop4): Directory bread(block 73) failed [ 1592.219986][T15969] device hsr_slave_0 entered promiscuous mode [ 1592.255832][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 1592.255905][ T26] audit: type=1804 audit(1783878574.951:386): pid=16100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1989" name="bus" dev="ramfs" ino=74233 res=1 errno=0 [ 1592.286930][T16100] binder: 16098:16100 ioctl 402c5828 0 returned -22 [ 1592.450405][T15969] device hsr_slave_1 entered promiscuous mode [ 1592.619689][T15969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1592.684980][ T26] audit: type=1804 audit(1783878574.981:387): pid=16100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1989" name="bus" dev="ramfs" ino=74233 res=1 errno=0 [ 1592.705529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.778025][T15969] Cannot create hsr debugfs directory [ 1592.884296][T16088] tipc: Enabled bearer , priority 0 [ 1594.208096][T16086] tipc: Disabling bearer [ 1597.448435][T16129] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.1994'. [ 1598.405878][T16136] device syzkaller0 entered promiscuous mode [ 1599.330072][ T26] audit: type=1804 audit(1783878582.021:388): pid=16144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1996" name="bus" dev="ramfs" ino=74296 res=1 errno=0 [ 1599.353638][T16144] binder: 16137:16144 ioctl 402c5828 0 returned -22 [ 1599.600660][ T26] audit: type=1804 audit(1783878582.041:389): pid=16144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1996" name="bus" dev="ramfs" ino=74296 res=1 errno=0 [ 1600.712354][T16151] loop9: detected capacity change from 0 to 256 [ 1601.067939][T16151] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1601.078914][T16151] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1602.325009][T16151] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1602.923516][ T26] audit: type=1804 audit(1783878585.621:390): pid=16160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2001" name="bus" dev="ramfs" ino=74322 res=1 errno=0 [ 1602.948170][T16160] binder: 16157:16160 ioctl 402c5828 0 returned -22 [ 1604.399123][ T26] audit: type=1804 audit(1783878585.641:391): pid=16160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2001" name="bus" dev="ramfs" ino=74322 res=1 errno=0 [ 1604.420245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1605.104722][T13051] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1605.707151][T16164] tipc: Enabled bearer , priority 0 [ 1605.793063][T13051] usb 10-1: Using ep0 maxpacket: 32 [ 1605.827138][T13051] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.845646][T13051] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1605.904903][T13051] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1605.908265][T16161] tipc: Disabling bearer [ 1605.953431][T13051] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.002413][T13051] usb 10-1: Product: syz [ 1606.008180][T13051] usb 10-1: Manufacturer: syz [ 1606.013264][T13051] usb 10-1: SerialNumber: syz [ 1606.035639][T13051] usb 10-1: config 0 descriptor?? [ 1606.399772][ T4337] device hsr_slave_0 left promiscuous mode [ 1606.417895][ T4337] device hsr_slave_1 left promiscuous mode [ 1606.444377][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1606.463055][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.471116][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1606.479017][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.488669][ T4337] device bridge_slave_1 left promiscuous mode [ 1606.510841][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.520341][ T4337] device bridge_slave_0 left promiscuous mode [ 1606.532281][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.908639][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.918085][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.382083][ T4337] device veth1_macvtap left promiscuous mode [ 1607.392336][ T4337] device veth0_macvtap left promiscuous mode [ 1607.400791][ T4337] device veth1_vlan left promiscuous mode [ 1607.408209][ T4337] device veth0_vlan left promiscuous mode [ 1608.486064][T15502] usb 10-1: USB disconnect, device number 11 [ 1608.627339][T16224] loop6: detected capacity change from 0 to 256 [ 1608.785572][T16228] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1610.631811][ T26] audit: type=1804 audit(1783878593.321:392): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2011" name="bus" dev="ramfs" ino=74408 res=1 errno=0 [ 1610.655786][T16238] binder: 16236:16238 ioctl 402c5828 0 returned -22 [ 1611.476822][ T26] audit: type=1804 audit(1783878593.351:393): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2011" name="bus" dev="ramfs" ino=74408 res=1 errno=0 [ 1613.664654][ T26] audit: type=1804 audit(1783878596.361:394): pid=16265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2015" name="bus" dev="ramfs" ino=74806 res=1 errno=0 [ 1613.691416][T16265] binder: 16263:16265 ioctl 402c5828 0 returned -22 [ 1613.914074][ T26] audit: type=1804 audit(1783878596.391:395): pid=16265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2015" name="bus" dev="ramfs" ino=74806 res=1 errno=0 [ 1616.005338][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 1616.505406][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 1616.690198][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.804669][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.993958][ T4337] bond0 (unregistering): Released all slaves [ 1618.193626][T16258] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1618.199803][T16258] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1618.205954][T16258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1618.211983][T16258] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1618.226602][T16258] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1618.234282][T16258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1618.240324][T16258] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1618.248012][T16258] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1618.731489][ T8621] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1619.362872][ T8621] usb 5-1: Using ep0 maxpacket: 32 [ 1619.375406][ T8621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.299173][ T4279] Bluetooth: hci2: command 0x0c1a tx timeout [ 1620.305534][ T4279] Bluetooth: hci0: command 0x0c1a tx timeout [ 1620.311585][ T4279] Bluetooth: hci5: command 0x0c1a tx timeout [ 1620.318263][T15999] Bluetooth: hci1: command 0x0c1a tx timeout [ 1620.852170][T15969] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1621.051699][ T8621] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1621.075001][T15969] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1621.116229][ T8621] usb 5-1: string descriptor 0 read error: -71 [ 1621.123901][ T8621] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1621.133934][T15969] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1621.143311][ T8621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.164130][ T8621] usb 5-1: config 0 descriptor?? [ 1621.181985][ T8621] usb 5-1: can't set config #0, error -71 [ 1621.192255][ T8621] usb 5-1: USB disconnect, device number 2 [ 1621.204689][T15969] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1621.481952][T15969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.510603][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1621.525824][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1621.541728][T15969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.568152][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1621.589256][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1621.603359][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.610529][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.634491][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1621.700389][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1621.739418][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1621.752333][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.759588][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.777749][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1621.789729][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1621.832355][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1621.857452][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1621.872931][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1621.891237][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1621.900226][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1621.918010][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1621.939469][T15969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1621.960848][T15969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1621.973486][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1621.989149][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1621.999784][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1622.339377][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1622.344795][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 1622.353890][T15999] Bluetooth: hci2: command 0x0406 tx timeout [ 1622.357396][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1622.379480][T15969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1622.866459][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1622.876413][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1622.907321][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1622.917426][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1622.929112][T15969] device veth0_vlan entered promiscuous mode [ 1622.945248][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1622.959907][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1622.976474][T15969] device veth1_vlan entered promiscuous mode [ 1623.003849][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1623.026302][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1623.034879][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1623.044491][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1623.056379][T15969] device veth0_macvtap entered promiscuous mode [ 1623.071019][T15969] device veth1_macvtap entered promiscuous mode [ 1623.098629][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.116735][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.130615][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.161777][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.178555][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.189887][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.207081][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.219937][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.236612][T15969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1623.264789][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1623.278571][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1623.287572][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1623.304421][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1623.323900][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.335194][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.345711][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.358129][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.369081][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.379819][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.391101][T15969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1623.406869][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1623.418879][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1623.430647][T15969] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.441100][T15969] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.450479][T15969] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.460064][T15969] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.568807][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.588127][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.608615][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1623.624115][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.632285][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.642217][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1623.787269][T16376] gfs2: gfs2 mount does not exist [ 1633.892293][T16441] loop6: detected capacity change from 0 to 256 [ 1642.636989][T16504] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1643.993329][T16517] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1644.850832][T16523] device syzkaller0 entered promiscuous mode [ 1644.875389][T16526] loop4: detected capacity change from 0 to 256 [ 1648.708557][T16557] Attempt to restore checkpoint with obsolete wellknown handles [ 1652.009034][T16590] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1653.134483][T16600] IPVS: set_ctl: invalid protocol: 121 172.30.0.1:20004 [ 1654.639257][T16612] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1655.086671][ T26] audit: type=1804 audit(1783878637.781:396): pid=16623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2072" name="bus" dev="ramfs" ino=76266 res=1 errno=0 [ 1655.111285][T16623] binder: 16621:16623 ioctl 402c5828 0 returned -22 [ 1655.417862][ T26] audit: type=1804 audit(1783878637.811:397): pid=16623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2072" name="bus" dev="ramfs" ino=76266 res=1 errno=0 [ 1658.699676][T16647] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1658.711524][T16647] Cannot find add_set index 0 as target [ 1663.009645][T11227] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1665.408836][T16686] loop9: detected capacity change from 0 to 40427 [ 1665.430604][T16686] F2FS-fs (loop9): invalid crc_offset: 4177530876 [ 1665.532254][T16686] F2FS-fs (loop9): Wrong journal entry on segno 65538 [ 1665.541423][T16686] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-117) [ 1665.923680][T16696] xt_connbytes: Forcing CT accounting to be enabled [ 1667.661859][T16704] loop8: detected capacity change from 0 to 128 [ 1668.227069][T16704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1668.239126][T16704] hpfs: filesystem error: improperly stopped [ 1668.245390][T16704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1668.253367][T16704] hpfs: You really don't want any checks? You are crazy... [ 1668.260659][T16704] hpfs: Code page index out of array [ 1668.266183][T16704] hpfs: code page support is disabled [ 1668.279380][T16704] hpfs: hpfs_map_4sectors(): unaligned read [ 1668.285851][T16704] hpfs: hpfs_map_4sectors(): unaligned read [ 1668.291826][T16704] hpfs: filesystem error: unable to find root dir [ 1668.319894][T16704] hpfs: hpfs_map_sector(): read error [ 1668.327732][T16704] hpfs: hpfs_map_sector(): read error [ 1668.345831][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.352138][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.227519][T16728] loop8: detected capacity change from 0 to 512 [ 1671.240849][T16728] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1672.802146][T16728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1672.814901][T16728] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1672.821361][T16728] EXT4-fs error (device loop8): ext4_orphan_get:1431: comm syz.8.2094: bad orphan inode 3 [ 1672.835062][T16728] EXT4-fs (loop8): Remounting filesystem read-only [ 1672.841745][T16728] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1672.865996][T16728] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.2094: dx entry: limit 0 != root limit 125 [ 1672.878610][T16728] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2094: Corrupt directory, running e2fsck is recommended [ 1673.113502][T15969] EXT4-fs (loop8): unmounting filesystem. [ 1676.132047][ T26] audit: type=1804 audit(1783878658.821:398): pid=16748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2098" name="bus" dev="ramfs" ino=76831 res=1 errno=0 [ 1676.181868][T16748] binder: 16733:16748 ioctl 402c5828 0 returned -22 [ 1678.017444][ T26] audit: type=1804 audit(1783878658.861:399): pid=16748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2098" name="bus" dev="ramfs" ino=76831 res=1 errno=0 [ 1678.294641][T16745] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1678.316729][T16745] File: /dev/nullb0 PID: 16745 Comm: syz.8.2099 [ 1685.855206][ T26] audit: type=1804 audit(1783878668.551:400): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2113" name="bus" dev="ramfs" ino=76926 res=1 errno=0 [ 1685.875439][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.885005][T16811] binder: 16809:16811 ioctl 402c5828 0 returned -22 [ 1688.686806][ T26] audit: type=1804 audit(1783878668.581:401): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2113" name="bus" dev="ramfs" ino=76926 res=1 errno=0 [ 1689.230659][T16823] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2116'. [ 1694.084260][ T4450] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.553284][ T4450] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.256068][ T4450] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.213707][T16886] binder: 16878:16886 ioctl 402c5828 0 returned -22 [ 1697.963304][T16891] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2124'. [ 1698.471369][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1698.487520][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1698.496855][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1698.539885][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1698.552993][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1698.560427][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1699.081048][T16910] loop9: detected capacity change from 0 to 4096 [ 1700.516256][ T4450] bond0: (slave netdevsim0): Releasing backup interface [ 1700.571760][ T4450] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.583154][T15999] Bluetooth: hci3: command 0x0409 tx timeout [ 1702.662769][T15999] Bluetooth: hci3: command 0x041b tx timeout [ 1704.742679][T15999] Bluetooth: hci3: command 0x040f tx timeout [ 1706.154183][ T26] audit: type=1804 audit(1783878688.851:402): pid=16944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2135" name="bus" dev="ramfs" ino=77382 res=1 errno=0 [ 1706.177801][T16944] binder: 16942:16944 ioctl 402c5828 0 returned -22 [ 1706.822602][T15999] Bluetooth: hci3: command 0x0419 tx timeout [ 1707.848222][ T4450] tipc: Left network mode [ 1708.032726][ T26] audit: type=1804 audit(1783878688.881:403): pid=16944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2135" name="bus" dev="ramfs" ino=77382 res=1 errno=0 [ 1708.080695][T16892] chnl_net:caif_netlink_parms(): no params data found [ 1709.725573][T16964] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2139'. [ 1710.338305][ T26] audit: type=1804 audit(1783878693.031:404): pid=16962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2140" name="bus" dev="ramfs" ino=77415 res=1 errno=0 [ 1710.362397][T16962] binder: 16956:16962 ioctl 402c5828 0 returned -22 [ 1711.076795][ T26] audit: type=1804 audit(1783878693.061:405): pid=16962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2140" name="bus" dev="ramfs" ino=77415 res=1 errno=0 [ 1711.096941][ C1] vkms_vblank_simulate: vblank timer overrun [ 1713.922708][T13051] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1714.992964][T13051] usb 9-1: Using ep0 maxpacket: 32 [ 1715.002192][T13051] usb 9-1: config index 0 descriptor too short (expected 13339, got 27) [ 1715.475821][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.574596][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.639602][T13051] usb 9-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 1715.817135][T16892] device bridge_slave_0 entered promiscuous mode [ 1715.851846][T13051] usb 9-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 1718.301218][T13051] usb 9-1: string descriptor 0 read error: -71 [ 1718.334475][T13051] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1718.372878][T13051] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1718.467822][T13051] usb 9-1: can't set config #108, error -71 [ 1718.498678][T13051] usb 9-1: USB disconnect, device number 2 [ 1719.529840][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.539631][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.559172][T16892] device bridge_slave_1 entered promiscuous mode [ 1721.594560][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.640620][T17030] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1722.661787][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.980007][T17040] block device autoloading is deprecated and will be removed. [ 1724.641064][ T26] audit: type=1804 audit(1783878707.331:406): pid=17048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2152" name="bus" dev="ramfs" ino=77939 res=1 errno=0 [ 1724.663212][T17048] binder: 17036:17048 ioctl 402c5828 0 returned -22 [ 1726.313300][ T26] audit: type=1804 audit(1783878707.361:407): pid=17048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2152" name="bus" dev="ramfs" ino=77939 res=1 errno=0 [ 1726.995604][T16892] team0: Port device team_slave_0 added [ 1727.237902][T16892] team0: Port device team_slave_1 added [ 1727.371505][T16892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.402086][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1727.472107][T16892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.245088][T17068] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1729.008906][T16892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.038449][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.132668][T16892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.318189][ T4450] device hsr_slave_0 left promiscuous mode [ 1729.372813][ T4450] device hsr_slave_1 left promiscuous mode [ 1729.381911][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.439512][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.466175][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.491976][ T4450] device bridge_slave_1 left promiscuous mode [ 1729.516881][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.536683][ T4450] device bridge_slave_0 left promiscuous mode [ 1729.550678][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.652746][T13051] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1729.701929][ T4450] device veth1_macvtap left promiscuous mode [ 1729.712914][ T4450] device veth0_macvtap left promiscuous mode [ 1729.719450][ T4450] device veth1_vlan left promiscuous mode [ 1729.742686][ T4450] device veth0_vlan left promiscuous mode [ 1729.788170][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.794712][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.849460][T13051] usb 5-1: Using ep0 maxpacket: 32 [ 1729.856979][T13051] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.907846][T13051] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1729.961280][T13051] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1730.009607][ T26] audit: type=1804 audit(1783878712.701:408): pid=17088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2161" name="bus" dev="ramfs" ino=77990 res=1 errno=0 [ 1730.035340][T17088] binder: 17079:17088 ioctl 402c5828 0 returned -22 [ 1730.068409][T13051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.141380][T13051] usb 5-1: Product: syz [ 1730.172017][ T26] audit: type=1804 audit(1783878712.731:409): pid=17088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2161" name="bus" dev="ramfs" ino=77990 res=1 errno=0 [ 1730.204100][T13051] usb 5-1: Manufacturer: syz [ 1730.250426][T13051] usb 5-1: SerialNumber: syz [ 1730.361387][T13051] usb 5-1: config 0 descriptor?? [ 1732.776414][ T4671] usb 5-1: USB disconnect, device number 3 [ 1735.008978][T17108] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 1736.196215][ T4450] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1736.470035][ T4450] bond1 (unregistering): Released all slaves [ 1737.294529][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 1737.365635][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 1737.431053][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.503307][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.969314][ T4450] bond0 (unregistering): Released all slaves [ 1738.105794][T16892] device hsr_slave_0 entered promiscuous mode [ 1738.120266][T16892] device hsr_slave_1 entered promiscuous mode [ 1738.175976][T17104] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1738.238416][T17104] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1738.270187][T17104] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1742.985460][T17133] tty tty21: ldisc open failed (-12), clearing slot 20 [ 1745.572422][ T26] audit: type=1804 audit(1783878728.261:410): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2173" name="bus" dev="ramfs" ino=77661 res=1 errno=0 [ 1745.598834][T17158] binder: 17153:17158 ioctl 402c5828 0 returned -22 [ 1747.289701][ T26] audit: type=1804 audit(1783878728.291:411): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2173" name="bus" dev="ramfs" ino=77661 res=1 errno=0 [ 1747.626033][T17166] loop4: detected capacity change from 0 to 256 [ 1748.344065][T17175] erofs: (device loop8): erofs_read_superblock: cannot find valid erofs superblock [ 1750.447879][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1750.459957][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1750.468901][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1750.484073][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1750.494791][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1750.502938][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1751.199175][T17194] chnl_net:caif_netlink_parms(): no params data found [ 1751.326683][T17194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.335022][T17194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.353761][T17194] device bridge_slave_0 entered promiscuous mode [ 1751.373498][T17194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.380744][T17194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.389518][T17194] device bridge_slave_1 entered promiscuous mode [ 1751.417729][T17194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.430348][T17194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.476845][T17194] team0: Port device team_slave_0 added [ 1751.492087][T17194] team0: Port device team_slave_1 added [ 1751.547717][T17194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.558736][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.585991][T17194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.600553][T17194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.607883][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.635025][T17194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.710853][T17194] device hsr_slave_0 entered promiscuous mode [ 1751.728386][T17194] device hsr_slave_1 entered promiscuous mode [ 1751.746174][T17194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1751.757779][T17194] Cannot create hsr debugfs directory [ 1752.066897][T17194] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1752.076802][T17194] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1752.096403][T17194] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1752.116981][T17194] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1752.260413][T17194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1752.301567][T17194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1752.309488][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1752.317900][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1752.344181][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1752.354162][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1752.364173][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.371318][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1752.379545][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1752.396087][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1752.407742][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.414943][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1752.437934][ T4450] device hsr_slave_0 left promiscuous mode [ 1752.445563][ T4450] device hsr_slave_1 left promiscuous mode [ 1752.455126][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.463752][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1752.471709][ T4450] device bridge_slave_1 left promiscuous mode [ 1752.482227][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.491572][ T4450] device bridge_slave_0 left promiscuous mode [ 1752.498111][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.583040][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 1752.820810][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 1752.870943][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 1752.915664][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.960717][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.087198][ T4450] bond0 (unregistering): Released all slaves [ 1753.146824][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1753.158361][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1753.168385][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1753.183362][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1753.194019][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1753.203328][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1753.237051][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1753.247432][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1753.298569][T17194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1753.310340][T17194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1753.340252][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1753.361841][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1753.371646][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1753.381110][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1753.436270][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1753.842175][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1753.850513][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1753.871278][T17194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1754.404490][T16844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1754.422047][T16844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1754.470635][T17194] device veth0_vlan entered promiscuous mode [ 1754.482316][T16844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1754.498929][T16844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1754.511970][T16844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1754.528504][T16844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1754.547380][T17194] device veth1_vlan entered promiscuous mode [ 1754.580220][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1754.598700][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1754.608733][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1754.618033][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1754.631199][T17194] device veth0_macvtap entered promiscuous mode [ 1754.647237][T17194] device veth1_macvtap entered promiscuous mode [ 1754.662998][T15999] Bluetooth: hci4: command 0x041b tx timeout [ 1754.677133][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1754.692201][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.703584][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1754.714363][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.725388][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1754.736300][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.747523][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1754.758553][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.770629][T17194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1754.786789][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1754.797467][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.810021][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1754.820847][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.832118][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1754.843404][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.854932][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1754.871753][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.885128][T17194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1754.893130][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1754.901359][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1754.917122][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1754.929256][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1754.941952][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1754.957389][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1754.971390][T17194] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.982339][T17194] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.995073][T17194] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.004815][T17194] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.168599][T15756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.183316][T15756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.204332][T15756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1755.219920][ T4450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.237892][ T4450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.247675][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1757.012864][T15999] Bluetooth: hci4: command 0x040f tx timeout [ 1757.668710][T17270] batman_adv: batadv0: Adding interface: dummy0 [ 1759.303304][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 1759.344551][T17270] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1759.432980][T17270] batman_adv: batadv0: Interface activated: dummy0 [ 1759.563250][T17279] batadv0: mtu less than device minimum [ 1759.618254][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.631701][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.643987][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.656391][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.668111][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.679835][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.691457][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.703555][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.715220][T17279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1760.890722][T17308] loop9: detected capacity change from 0 to 256 [ 1761.914469][ T26] audit: type=1804 audit(1783878744.611:412): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2186" name="bus" dev="ramfs" ino=78408 res=1 errno=0 [ 1761.941048][T17316] binder: 17309:17316 ioctl 402c5828 0 returned -22 [ 1762.508586][ T26] audit: type=1804 audit(1783878744.641:413): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2186" name="bus" dev="ramfs" ino=78408 res=1 errno=0 [ 1766.313366][T17330] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1767.319825][T17330] File: /dev/nullb0 PID: 17330 Comm: syz.7.2195 [ 1767.572233][T17349] loop4: detected capacity change from 0 to 512 [ 1768.530561][T17349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1768.660952][T17349] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1769.316418][T17371] futex_wake_op: syz.8.2183 tries to shift op by 144; fix this program [ 1769.327490][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2183'. [ 1769.336680][T17371] netlink: 'syz.8.2183': attribute type 2 has an invalid length. [ 1769.375790][T17371] can0: slcan on ttyS3. [ 1770.372778][T17368] can0 (unregistered): slcan off ttyS3. [ 1770.712327][T17380] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 1772.262897][T15542] EXT4-fs (loop4): unmounting filesystem. [ 1772.485431][ T26] audit: type=1804 audit(1783878755.181:414): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2204" name="bus" dev="ramfs" ino=78563 res=1 errno=0 [ 1772.509135][T17391] binder: 17387:17391 ioctl 402c5828 0 returned -22 [ 1772.658451][T17390] loop9: detected capacity change from 0 to 256 [ 1772.744011][ T26] audit: type=1804 audit(1783878755.211:415): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2204" name="bus" dev="ramfs" ino=78563 res=1 errno=0 [ 1777.082165][T17423] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1777.128204][T17423] net_ratelimit: 10 callbacks suppressed [ 1777.128247][T17423] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1777.928771][T17429] afs: Unknown parameter '' [ 1778.351757][T17428] infiniband syz1: set active [ 1778.357828][T17428] infiniband syz1: added bond0 [ 1778.498283][T17428] RDS/IB: syz1: added [ 1778.506340][T17428] smc: adding ib device syz1 with port count 1 [ 1778.514865][T17428] smc: ib device syz1 port 1 has pnetid [ 1781.173505][T17442] loop8: detected capacity change from 0 to 256 [ 1781.204523][T17438] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1781.252131][T17442] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1781.299499][T17438] File: /dev/nullb0 PID: 17438 Comm: syz.0.2212 [ 1782.705474][T17458] binder: 17454:17458 ioctl 402c5828 0 returned -22 [ 1783.998718][T17466] loop7: detected capacity change from 0 to 256 [ 1787.192812][T17468] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1787.274323][T17468] File: /dev/nullb0 PID: 17468 Comm: syz.9.2228 [ 1791.227000][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.238081][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.244071][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1791.330311][T17509] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1793.538113][T13051] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1793.832754][T13051] usb 10-1: Using ep0 maxpacket: 32 [ 1793.843902][T13051] usb 10-1: config index 0 descriptor too short (expected 8219, got 27) [ 1793.992316][T13051] usb 10-1: config 32 has an invalid descriptor of length 32, skipping remainder of the config [ 1794.223425][T13051] usb 10-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 1794.676800][T17526] lo speed is unknown, defaulting to 1000 [ 1794.683062][T17526] lo speed is unknown, defaulting to 1000 [ 1794.692999][T17526] lo speed is unknown, defaulting to 1000 [ 1794.787268][T17526] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1794.845871][T17526] lo speed is unknown, defaulting to 1000 [ 1794.856697][T17526] lo speed is unknown, defaulting to 1000 [ 1794.867208][T17526] lo speed is unknown, defaulting to 1000 [ 1794.877817][T17526] lo speed is unknown, defaulting to 1000 [ 1794.888551][T17526] lo speed is unknown, defaulting to 1000 [ 1795.805388][T13051] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1795.922870][T13051] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1795.961042][T13051] usb 10-1: can't set config #32, error -71 [ 1796.026096][T13051] usb 10-1: USB disconnect, device number 12 [ 1796.115104][ T26] audit: type=1804 audit(1783878778.811:416): pid=17535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2232" name="bus" dev="ramfs" ino=79874 res=1 errno=0 [ 1796.176661][T17540] binder: 17530:17540 ioctl 402c5828 0 returned -22 [ 1798.647147][ T26] audit: type=1804 audit(1783878778.871:417): pid=17540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2232" name="bus" dev="ramfs" ino=79874 res=1 errno=0 [ 1799.132576][T17544] binder: 17538:17544 ioctl 402c5828 0 returned -22 [ 1799.671170][T17549] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2237'. [ 1799.818034][T17560] siw: device registration error -23 [ 1802.372595][ T8710] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1802.569602][ T8710] usb 9-1: Using ep0 maxpacket: 32 [ 1803.174097][ T8710] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.211214][ T8710] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1803.255736][ T8710] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1804.410705][T17584] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1804.471059][ T8710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.520414][ T8710] usb 9-1: Product: syz [ 1804.550775][ T8710] usb 9-1: Manufacturer: syz [ 1804.598153][ T8710] usb 9-1: SerialNumber: syz [ 1804.634552][ T8710] usb 9-1: config 0 descriptor?? [ 1805.304886][T17596] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1805.315652][T17596] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1806.508577][ T8889] usb 9-1: USB disconnect, device number 3 [ 1807.374229][T17614] binder: 17611:17614 ioctl 402c5828 0 returned -22 [ 1809.309739][ T26] audit: type=1804 audit(1783878792.001:418): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2248" name="bus" dev="ramfs" ino=79956 res=1 errno=0 [ 1809.333455][T17623] binder: 17617:17623 ioctl 402c5828 0 returned -22 [ 1809.873375][T17626] loop7: detected capacity change from 0 to 256 [ 1809.881184][ T26] audit: type=1804 audit(1783878792.031:419): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2248" name="bus" dev="ramfs" ino=79956 res=1 errno=0 [ 1810.743434][T17638] ubi0: attaching mtd0 [ 1810.753322][T17638] ubi0: scanning is finished [ 1811.384288][T17638] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1815.736656][T17680] loop0: detected capacity change from 0 to 8 [ 1815.861042][T17687] ================================================================== [ 1815.869184][T17687] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 1815.876445][T17687] Read of size 8 at addr ffff888029242e18 by task syz.4.2252/17687 [ 1815.884390][T17687] [ 1815.886750][T17687] CPU: 0 PID: 17687 Comm: syz.4.2252 Not tainted syzkaller #0 [ 1815.894363][T17687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1815.904489][T17687] Call Trace: [ 1815.907802][T17687] [ 1815.910769][T17687] dump_stack_lvl+0x188/0x24e [ 1815.915505][T17687] ? read_lock_is_recursive+0x10/0x10 [ 1815.920956][T17687] ? show_regs_print_info+0x12/0x12 [ 1815.926221][T17687] ? load_image+0x410/0x410 [ 1815.930804][T17687] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1815.936437][T17687] ? __virt_addr_valid+0x188/0x540 [ 1815.941604][T17687] ? __virt_addr_valid+0x467/0x540 [ 1815.946766][T17687] ? dvb_device_open+0xc5/0x360 [ 1815.951758][T17687] print_report+0xa8/0x210 [ 1815.956232][T17687] kasan_report+0x10b/0x140 [ 1815.960806][T17687] ? dvb_device_open+0xc5/0x360 [ 1815.965726][T17687] dvb_device_open+0xc5/0x360 [ 1815.970458][T17687] chrdev_open+0x585/0x5f0 [ 1815.974954][T17687] ? cd_forget+0x160/0x160 [ 1815.979425][T17687] ? fsnotify_perm+0x39b/0x550 [ 1815.984235][T17687] ? cd_forget+0x160/0x160 [ 1815.988697][T17687] do_dentry_open+0x7dd/0x10b0 [ 1815.993522][T17687] path_openat+0x2674/0x2f10 [ 1815.998175][T17687] ? verify_lock_unused+0x140/0x140 [ 1816.003436][T17687] ? do_sys_openat2+0xdd/0x4f0 [ 1816.008256][T17687] ? do_filp_open+0x420/0x420 [ 1816.012988][T17687] do_filp_open+0x1ee/0x420 [ 1816.017624][T17687] ? vfs_tmpfile+0x470/0x470 [ 1816.022337][T17687] ? _raw_spin_unlock+0x24/0x40 [ 1816.027237][T17687] ? alloc_fd+0x590/0x640 [ 1816.031629][T17687] do_sys_openat2+0x14b/0x4f0 [ 1816.036374][T17687] ? do_sys_open+0xe0/0xe0 [ 1816.040845][T17687] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1816.046886][T17687] ? lock_chain_count+0x20/0x20 [ 1816.051826][T17687] __x64_sys_openat+0x135/0x160 [ 1816.056766][T17687] do_syscall_64+0x4c/0xa0 [ 1816.061229][T17687] ? clear_bhb_loop+0x60/0xb0 [ 1816.065956][T17687] ? clear_bhb_loop+0x60/0xb0 [ 1816.070695][T17687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.076658][T17687] RIP: 0033:0x7f0c7a75e68e [ 1816.081119][T17687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1816.100863][T17687] RSP: 002b:00007f0c7b6b0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1816.109329][T17687] RAX: ffffffffffffffda RBX: 00007f0c7b6b16c0 RCX: 00007f0c7a75e68e [ 1816.117444][T17687] RDX: 0000000000000002 RSI: 00007f0c7b6b0c00 RDI: ffffffffffffff9c [ 1816.125462][T17687] RBP: 00007f0c7b6b0c00 R08: 0000000000000000 R09: 0000000000000000 [ 1816.133478][T17687] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1816.141584][T17687] R13: 00007f0c7aa26128 R14: 00007f0c7aa26090 R15: 00007fffd5e8f7a8 [ 1816.149730][T17687] [ 1816.152782][T17687] [ 1816.155133][T17687] Allocated by task 1: [ 1816.159225][T17687] kasan_set_track+0x4b/0x70 [ 1816.163866][T17687] __kasan_kmalloc+0x8e/0xa0 [ 1816.168501][T17687] dvb_register_device+0x305/0x1dc0 [ 1816.173772][T17687] dvb_register_frontend+0x629/0x900 [ 1816.179101][T17687] vidtv_bridge_probe+0x9cf/0xf50 [ 1816.184220][T17687] platform_probe+0x137/0x1c0 [ 1816.188945][T17687] really_probe+0x24a/0xb40 [ 1816.193492][T17687] __driver_probe_device+0x1f5/0x390 [ 1816.198815][T17687] driver_probe_device+0x4f/0x420 [ 1816.203886][T17687] __driver_attach+0x43d/0x6c0 [ 1816.208709][T17687] bus_for_each_dev+0x182/0x1f0 [ 1816.213609][T17687] bus_add_driver+0x324/0x5d0 [ 1816.218344][T17687] driver_register+0x32d/0x430 [ 1816.223143][T17687] vidtv_bridge_init+0x39/0x67 [ 1816.227955][T17687] do_one_initcall+0x257/0x800 [ 1816.232762][T17687] do_initcall_level+0x13d/0x1ed [ 1816.237742][T17687] do_initcalls+0x4b/0x8a [ 1816.242107][T17687] kernel_init_freeable+0x401/0x5ab [ 1816.247340][T17687] kernel_init+0x19/0x1b0 [ 1816.251722][T17687] ret_from_fork+0x1f/0x30 [ 1816.256218][T17687] [ 1816.258580][T17687] Freed by task 17584: [ 1816.262679][T17687] kasan_set_track+0x4b/0x70 [ 1816.267322][T17687] kasan_save_free_info+0x27/0x40 [ 1816.272393][T17687] ____kasan_slab_free+0x126/0x1f0 [ 1816.277555][T17687] slab_free_freelist_hook+0x133/0x1b0 [ 1816.283060][T17687] __kmem_cache_free+0xb6/0x200 [ 1816.287955][T17687] dvb_device_open+0x2d2/0x360 [ 1816.292853][T17687] chrdev_open+0x585/0x5f0 [ 1816.297316][T17687] do_dentry_open+0x7dd/0x10b0 [ 1816.302121][T17687] path_openat+0x2674/0x2f10 [ 1816.306746][T17687] do_filp_open+0x1ee/0x420 [ 1816.311283][T17687] do_sys_openat2+0x14b/0x4f0 [ 1816.316005][T17687] __x64_sys_openat+0x135/0x160 [ 1816.320898][T17687] do_syscall_64+0x4c/0xa0 [ 1816.325363][T17687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.331305][T17687] [ 1816.333664][T17687] The buggy address belongs to the object at ffff888029242e00 [ 1816.333664][T17687] which belongs to the cache kmalloc-256 of size 256 [ 1816.347760][T17687] The buggy address is located 24 bytes inside of [ 1816.347760][T17687] 256-byte region [ffff888029242e00, ffff888029242f00) [ 1816.360994][T17687] [ 1816.363358][T17687] The buggy address belongs to the physical page: [ 1816.369821][T17687] page:ffffea0000a49080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29242 [ 1816.380012][T17687] head:ffffea0000a49080 order:1 compound_mapcount:0 compound_pincount:0 [ 1816.388371][T17687] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1816.396397][T17687] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 1816.405028][T17687] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1816.413736][T17687] page dumped because: kasan: bad access detected [ 1816.420196][T17687] page_owner tracks the page as allocated [ 1816.425938][T17687] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18728279652, free_ts 0 [ 1816.445693][T17687] post_alloc_hook+0x173/0x1a0 [ 1816.450542][T17687] get_page_from_freelist+0x206b/0x2180 [ 1816.456141][T17687] __alloc_pages+0x1ec/0x4f0 [ 1816.460777][T17687] alloc_page_interleave+0x24/0x1e0 [ 1816.466024][T17687] alloc_slab_page+0x5d/0x180 [ 1816.470741][T17687] new_slab+0x87/0x2d0 [ 1816.474850][T17687] ___slab_alloc+0xbc5/0x1240 [ 1816.479560][T17687] __kmem_cache_alloc_node+0x126/0x270 [ 1816.485063][T17687] kmalloc_trace+0x26/0xe0 [ 1816.489532][T17687] bus_add_driver+0xdc/0x5d0 [ 1816.494170][T17687] driver_register+0x32d/0x430 [ 1816.498972][T17687] usb_register_driver+0x201/0x3c0 [ 1816.504119][T17687] uvc_init+0x23/0x4a [ 1816.508141][T17687] do_one_initcall+0x257/0x800 [ 1816.512944][T17687] do_initcall_level+0x13d/0x1ed [ 1816.517913][T17687] do_initcalls+0x4b/0x8a [ 1816.522274][T17687] page_owner free stack trace missing [ 1816.527702][T17687] [ 1816.530058][T17687] Memory state around the buggy address: [ 1816.535721][T17687] ffff888029242d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1816.543817][T17687] ffff888029242d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1816.551914][T17687] >ffff888029242e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1816.560008][T17687] ^ [ 1816.564892][T17687] ffff888029242e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1816.572981][T17687] ffff888029242f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1816.581071][T17687] ================================================================== [ 1816.589234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.610133][T17687] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1816.617418][T17687] CPU: 0 PID: 17687 Comm: syz.4.2252 Not tainted syzkaller #0 [ 1816.624923][T17687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1816.635052][T17687] Call Trace: [ 1816.638368][T17687] [ 1816.641334][T17687] dump_stack_lvl+0x188/0x24e [ 1816.646061][T17687] ? memcpy+0x3c/0x60 [ 1816.650081][T17687] ? show_regs_print_info+0x12/0x12 [ 1816.655332][T17687] ? load_image+0x410/0x410 [ 1816.659907][T17687] panic+0x2d3/0x710 [ 1816.663853][T17687] ? bpf_jit_dump+0xd0/0xd0 [ 1816.668397][T17687] ? check_panic_on_warn+0x6c/0xa0 [ 1816.673558][T17687] check_panic_on_warn+0x80/0xa0 [ 1816.678541][T17687] ? dvb_device_open+0xc5/0x360 [ 1816.683443][T17687] end_report+0x66/0x110 [ 1816.687737][T17687] kasan_report+0x118/0x140 [ 1816.692321][T17687] ? dvb_device_open+0xc5/0x360 [ 1816.697221][T17687] dvb_device_open+0xc5/0x360 [ 1816.701946][T17687] chrdev_open+0x585/0x5f0 [ 1816.706404][T17687] ? cd_forget+0x160/0x160 [ 1816.710870][T17687] ? fsnotify_perm+0x39b/0x550 [ 1816.715672][T17687] ? cd_forget+0x160/0x160 [ 1816.720125][T17687] do_dentry_open+0x7dd/0x10b0 [ 1816.724943][T17687] path_openat+0x2674/0x2f10 [ 1816.729576][T17687] ? verify_lock_unused+0x140/0x140 [ 1816.734820][T17687] ? do_sys_openat2+0xdd/0x4f0 [ 1816.739632][T17687] ? do_filp_open+0x420/0x420 [ 1816.744353][T17687] do_filp_open+0x1ee/0x420 [ 1816.748894][T17687] ? vfs_tmpfile+0x470/0x470 [ 1816.753561][T17687] ? _raw_spin_unlock+0x24/0x40 [ 1816.758467][T17687] ? alloc_fd+0x590/0x640 [ 1816.762851][T17687] do_sys_openat2+0x14b/0x4f0 [ 1816.767572][T17687] ? do_sys_open+0xe0/0xe0 [ 1816.772027][T17687] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1816.778056][T17687] ? lock_chain_count+0x20/0x20 [ 1816.782952][T17687] __x64_sys_openat+0x135/0x160 [ 1816.787846][T17687] do_syscall_64+0x4c/0xa0 [ 1816.792402][T17687] ? clear_bhb_loop+0x60/0xb0 [ 1816.797150][T17687] ? clear_bhb_loop+0x60/0xb0 [ 1816.801873][T17687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.807813][T17687] RIP: 0033:0x7f0c7a75e68e [ 1816.812350][T17687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1816.832004][T17687] RSP: 002b:00007f0c7b6b0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1816.840466][T17687] RAX: ffffffffffffffda RBX: 00007f0c7b6b16c0 RCX: 00007f0c7a75e68e [ 1816.848476][T17687] RDX: 0000000000000002 RSI: 00007f0c7b6b0c00 RDI: ffffffffffffff9c [ 1816.856483][T17687] RBP: 00007f0c7b6b0c00 R08: 0000000000000000 R09: 0000000000000000 [ 1816.864492][T17687] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1816.872495][T17687] R13: 00007f0c7aa26128 R14: 00007f0c7aa26090 R15: 00007fffd5e8f7a8 [ 1816.880508][T17687] [ 1816.884156][T17687] Kernel Offset: disabled [ 1816.888513][T17687] Rebooting in 86400 seconds..