last executing test programs: 7m10.811922982s ago: executing program 1 (id=135): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) setreuid(0x0, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x5, "ee"}, 0x3, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc0000000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x8000000) 7m9.417256586s ago: executing program 1 (id=138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000100) close(r4) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r5, 0x0, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x8}}, './cgroup\x00'}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f00000005c0)={0x6, "56b6ddb0cf21760ae68bcde943ab860eef3a92b027e57f6b2147757c223320465a5abc92a7e8f6a5d19d3c104168b6c8a3d4f0a7776739684daf1e16c28455a2d98d583af6c43e9f18596a41906c8a8ac2220245673814c2b91e8ea0269a8119d8f14960805df98811c9a8ef0c2a6a0a39a953111f0f4b9248ac60b62606dbc2a4fd0b42a5adaf8c530e91e70cc37acead81e33a5b45ed1101fc84d31f6396a85facd946b8887633c358da053a821ab3e8037902d414ec440eb063c6db1cb5a569c300eed7011cec47e04a623ddbf22bfff867b7d9e8500db937f70e90781a800be5fed9084802e9120c5062d3bdd3c1e8897617831a68f03bbde372f60d3c71789a0d08c844cb305dba3b6c4a287760e146f978eb33b0b2051257e23b0db50975f9bc0feffa97d51138146c6788205246f1b5f2aedb3844fd08e25da09b32baf0492bd7d6f39b025fcc488b779ae4db06a7f8c5ce4a4b97d1680282c70d075d8deadb4288692d0b3eeedc25ce4e6bf9c51641d48f9684316561ccccbf57ced06f05af048e0b348dce9f121b8a224f8ec717dfd40030fbedfad82c0bc0330bf9df9f09376ef7fb1af7ca2520e0dbd65854054d9494512d8f7173db9cb72c9c6722a602179f253daa8d136df1db25004d9b0737a7901f8012310d27e38153005c21274581986291146955713eff1ff00a908781c8d43bf6f2a19fd5d824033fb4"}) msgrcv(0x0, 0x0, 0x2000, 0x1, 0x5800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004a41}, 0x48810) 7m8.277667404s ago: executing program 1 (id=144): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000)=0x488, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) r8 = openat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) clock_gettime(0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100)=0x1, 0x4) 7m5.865381463s ago: executing program 1 (id=149): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000140)=0xe996) r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) shutdown(r4, 0x1) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) r6 = syz_open_procfs(r0, &(0x7f0000000080)='wchan\x00') pwritev(r6, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {0x0, 0xa00}], 0x2, 0x0, 0x0) r7 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1, 0x2, 0x3, 0x1, 0x100000}, 0x6}) connect$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 7m3.360745794s ago: executing program 1 (id=153): prlimit64(0x0, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x141) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043b0a"], 0xd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 7m2.030171816s ago: executing program 1 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x1000) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fanotify_mark(r3, 0x105, 0x10000839, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r3, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 6m46.64244242s ago: executing program 32 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x1000) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fanotify_mark(r3, 0x105, 0x10000839, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r3, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 1m46.320088971s ago: executing program 2 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) pipe2$9p(&(0x7f00000001c0), 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) pipe(&(0x7f00000003c0)) io_setup(0x3fb, &(0x7f0000000500)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000140)={0x0, 0x0}) r0 = syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x280000000000, &(0x7f0000000180)="4f9745fe9369804ff9c29a370b0394c216470e9532c1fdb611963471d34fd024463837a7ecc7b6d34ecabc3607bfdb888cb46b8f127915c22396ec5cc8e187da2be431269042152a18ab2ab8c602a0aae04f57f9897e7ae66197276f9eebf48091655f73233c00a6d85c17f0febeb7c8603b22a195f627c204ebeff6da14d90ceb9393d332f47324a91450bf461c89e441709519164b3d387c1c9f720c34cbf2770f9d838c27b1232fa51cb9b0a3d20f74361df9ed50aa51") ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x20000001) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xefc, 0x30, 0xb, 0x0, 0x0, {}, [{0xee8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe9c, 0x2, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xb, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x7, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x5}, {0x7, 0x4, 0x4, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x5, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xefc}}, 0x0) r3 = syz_pidfd_open(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x102) setns(r3, 0x24020000) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)}], 0x1}, 0x2000c8c0) 1m38.328681425s ago: executing program 2 (id=687): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x4, 0x8, 0x0, 0x0, {0x43, 0x3, 0x5, 0xffff, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) readv(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x24000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0xa2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0xfc, "8100e1c8e80b598c36ff000800"}) r7 = syz_open_pts(r4, 0x5052c2) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r3, &(0x7f00000000c0)=0x58, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000020000008510000006000000180200ff", @ANYRES32, @ANYBLOB="00000000fffffffe6600020080ffffff18000000fffffffe00000000000000049500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1m34.133979297s ago: executing program 2 (id=694): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x4570f01f, 0x9, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0x6, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x1, 0x1, 0x1, 0x8, 0x100, 0x6, 0x12000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x1, 0x2, 0x1002, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x3ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x7f, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x800, 0x10010001, 0xffffbffd, 0xa, 0x79a, 0x40, 0x9, 0x4, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb029, 0xfffffff8, 0x0, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) read$hiddev(r7, &(0x7f0000000040)=""/117, 0x75) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000200}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@remote, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 1m30.70804139s ago: executing program 2 (id=698): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2929c0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) timerfd_create(0x9, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x408100) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x24000, 0x148, 0x26}, 0x18) mkdirat(r6, 0x0, 0x20) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x88c0) close(0x4) close(r0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 1m29.342084653s ago: executing program 2 (id=699): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x2, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0x8000000000000b, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x124, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x1) read(r2, &(0x7f0000000280)=""/249, 0xf9) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="a77704725bebf554", 0x8}], 0x1) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00005c9000/0x1000)=nil, 0x1000, 0xb) 1m27.550878186s ago: executing program 2 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x5b) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 1m11.049485616s ago: executing program 33 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x5b) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 25.604861329s ago: executing program 5 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 24.092656075s ago: executing program 6 (id=788): syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r3, 0xa1) shutdown(r3, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, &(0x7f0000000100)) ioctl$KDSETLED(r4, 0x4b32, 0x8) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0xd) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) timerfd_create(0x8, 0x800) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) 24.092443295s ago: executing program 3 (id=789): prlimit64(0x0, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x141) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043b0a"], 0xd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22.931948104s ago: executing program 6 (id=790): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) getpid() prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) flock(0xffffffffffffffff, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000840), &(0x7f0000000280)=@udp=r3}, 0x20) recvmsg(r3, 0x0, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b6a, &(0x7f0000000040)={0x200f, 0x200d, 0x2000d, 0x7, 0x200c, 0x0}) 21.084077608s ago: executing program 4 (id=791): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0xf1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0, 0x0, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/55, 0x37}, {0x0}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f0000000740)=""/121, 0x79}, {&(0x7f00000007c0)=""/63, 0x3f}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000a80)=""/72, 0x48}, {0x0}], 0x2}, 0x5}], 0x2, 0x40, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000005280), 0x402, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200cd4c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x10000) 21.080546758s ago: executing program 0 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 19.865626087s ago: executing program 5 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) 19.820327259s ago: executing program 0 (id=794): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r6, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18}}], 0x18}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB], 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14c}}, 0x4884) tkill(0x0, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b03112003"], 0x7) 19.819792069s ago: executing program 6 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 18.55631149s ago: executing program 6 (id=796): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x2, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0x8000000000000b, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x124, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x1) read(r2, &(0x7f0000000280)=""/249, 0xf9) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="a77704725bebf554", 0x8}], 0x1) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0x2000a78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00005c9000/0x1000)=nil, 0x1000, 0xb) 17.27234011s ago: executing program 0 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 16.048558291s ago: executing program 3 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 14.889885858s ago: executing program 0 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 13.666720938s ago: executing program 3 (id=801): prlimit64(0x0, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x141) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043b0a"], 0xd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13.468552143s ago: executing program 4 (id=802): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000380), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x601, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2003}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4400c04c}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x6) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRES32=r3, @ANYBLOB="c9b510370344a14cdfe2fd9204c8735af012063d447bbf45202100"/39, @ANYRESHEX]) 13.063335603s ago: executing program 4 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000500), 0x0, 0x40000) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000540)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1, 0xffff}, 0x20) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@can_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "bee3f3b1d2424418"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "3f0d8de98686b453"}, 0x8b7e0472ff469332}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x80) 11.962076739s ago: executing program 4 (id=804): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) rt_tgsigqueueinfo(r0, r1, 0x28, &(0x7f0000000200)={0x2c, 0x4993, 0x8}) 10.544538824s ago: executing program 5 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 9.300670054s ago: executing program 6 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 8.092314883s ago: executing program 0 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 7.902940308s ago: executing program 4 (id=808): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@noquota}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff00}}, {@errors_remount}, {@commit={'commit', 0x3d, 0x7}}, {@orlov}], [{@subj_role={'subj_role', 0x3d, 'commit'}}]}, 0xfc, 0x587, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xda, 0x3, 0x2b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x7, 0x2582}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) 7.311097792s ago: executing program 3 (id=809): prlimit64(0x0, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x141) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043b0a"], 0xd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 6.188415279s ago: executing program 3 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 4.947535149s ago: executing program 3 (id=811): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x48}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x58}}, 0x24040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="080001", @ANYRES32=r3], 0x90}}, 0x4048801) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x20004, r5, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = io_uring_setup(0x566d, &(0x7f0000000580)={0x0, 0x968, 0x4000, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 3.477495475s ago: executing program 6 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 3.432411296s ago: executing program 5 (id=813): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(r0, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002bc0)={0xa0, 0x0, r1, {{0x3, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getcwd(&(0x7f0000000200)=""/113, 0x71) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x6], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x9, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x9, 0x9, 0x3, 0x35, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x2, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0xa0, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xfff, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x401, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x1, 0x7, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0x1, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040061}, 0x10) 2.287295764s ago: executing program 0 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000500), 0x0, 0x40000) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000540)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1, 0xffff}, 0x20) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000946b9ad98d8b4f628bf8092767404bf02c67cba3992349df2a61a9c4b94426b6a81b5bfc11a573747f9da9d0d7bd95e847b88b4389a8a81c19f661d15dce4b2601b1b78c1d98083f6094bf689f9d77332c0b19fc42e4af6a34f4f68921d82507b24b8b90fb0de5044ba0701a1a18a8bc0c"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@can_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "bee3f3b1d2424418"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "3f0d8de98686b453"}, 0x8b7e0472ff469332}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x80) 1.169554971s ago: executing program 5 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000500), 0x0, 0x40000) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000540)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1, 0xffff}, 0x20) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000946b9ad98d8b4f628bf8092767404bf02c67cba3992349df2a61a9c4b94426b6a81b5bfc11a573747f9da9d0d7bd95e847b88b4389a8a81c19f661d15dce4b2601b1b78c1d98083f6094bf689f9d77332c0b19fc42e4af6a34f4f68921d82507b24b8b90fb0de5044ba0701a1a18a8bc0c"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@can_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "bee3f3b1d2424418"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "3f0d8de98686b453"}, 0x8b7e0472ff469332}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x80) 71.152947ms ago: executing program 5 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) futex_waitv(&(0x7f0000005a00)=[{0x7, &(0x7f0000000000)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110cb000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x573}, 0x94) rmdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/gser.usb0\x00') symlink(&(0x7f0000000100)='./config\x00', &(0x7f0000000140)='./config\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) socket$inet(0x2, 0x1, 0x100) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) pselect6(0x40, &(0x7f0000000100)={0x7fffffffffffffff, 0x8, 0x10001, 0x10001, 0x9, 0x2b2, 0x8, 0xffffffffffffffff}, &(0x7f00000001c0)={0x6, 0x9, 0xfffffffffffffff8, 0x9, 0x1, 0x0, 0x400, 0x5}, &(0x7f0000000240)={0x9, 0x0, 0x4, 0x4d, 0x4, 0x400, 0x800, 0x8}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x3]}, 0x8}) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x166) 0s ago: executing program 4 (id=817): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000000c0)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="2e000000010002", 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0x9361, 0x0) kernel console output (not intermixed with test programs): uld impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.750896][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.766491][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.773467][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.799642][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.918213][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.937816][ T4279] device hsr_slave_0 entered promiscuous mode [ 71.945036][ T4279] device hsr_slave_1 entered promiscuous mode [ 71.952190][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.962605][ T4279] Cannot create hsr debugfs directory [ 71.980718][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.021324][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.063640][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.105684][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.116429][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.125601][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.145571][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.218923][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.246775][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.256234][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.278079][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.379334][ T4282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.401363][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.408649][ T4282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.418171][ T4282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.439783][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.448908][ T4282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.500968][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.512941][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.523600][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.531955][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.539817][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.550868][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.568998][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.580674][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.589712][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.599502][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.606906][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.616444][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.627390][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.638961][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.647877][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.656974][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.664123][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.679119][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.688226][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.697427][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.704605][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.726616][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.736099][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.746178][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.768414][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.777800][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.789167][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.799270][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.808905][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.816049][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.824130][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.832715][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.848766][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.856725][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.877481][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.886629][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.896330][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.907416][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.916455][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.925529][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.934225][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.952524][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.972522][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.983989][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.992461][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.001780][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.011236][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.021295][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.030664][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.037804][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.049012][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.057835][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.067795][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.110067][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.121236][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.132854][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.142194][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.151398][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.160328][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.167456][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.176251][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.185531][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.229502][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.239343][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.249307][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.258441][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.268543][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.278581][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.287928][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.297647][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.306955][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.326658][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.345883][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.352772][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.364695][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.389518][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.408055][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.423330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.432358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.474342][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.482729][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.495825][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.510016][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.567110][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.595968][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.615589][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.622724][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.659501][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.675149][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 73.690286][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.700866][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.708351][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.717667][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.732003][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.740641][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.753971][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 73.760020][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 73.761275][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.773484][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 73.773555][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 73.799362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.818099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.840113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.861459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.875455][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.882593][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.890949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.900603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.909988][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.917212][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.925236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.935005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.967316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.978706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.987811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.999353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.010080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.020908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.031639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.041426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.050906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.058864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.067152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.099976][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.109539][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.119581][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.128461][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.137602][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.146414][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.155707][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.173154][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.183870][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.220110][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.245254][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.260965][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.272752][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.287809][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.299810][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.312454][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.323374][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.335661][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.343200][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.356672][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.379052][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.424629][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.434944][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.476008][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.492329][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.516294][ T4273] device veth0_vlan entered promiscuous mode [ 74.539282][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.552637][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.565873][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.580003][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.596315][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.605540][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.620599][ T4273] device veth1_vlan entered promiscuous mode [ 74.652073][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.666192][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.678519][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.688427][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.701196][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.749238][ T4277] device veth0_vlan entered promiscuous mode [ 74.772159][ T4277] device veth1_vlan entered promiscuous mode [ 74.781810][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.790096][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.799281][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.807197][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.815980][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.825675][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.837939][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.860494][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.868698][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.877404][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.885479][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.894463][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.903948][ T4278] device veth0_vlan entered promiscuous mode [ 74.911011][ T4273] device veth0_macvtap entered promiscuous mode [ 74.933145][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.959914][ T4278] device veth1_vlan entered promiscuous mode [ 74.973617][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.983449][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.993167][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.001430][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.009407][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.018811][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.030084][ T4273] device veth1_macvtap entered promiscuous mode [ 75.043618][ T4277] device veth0_macvtap entered promiscuous mode [ 75.111987][ T4277] device veth1_macvtap entered promiscuous mode [ 75.125207][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.133408][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.157766][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.177771][ T4279] device veth0_vlan entered promiscuous mode [ 75.197133][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.207028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.219468][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.238697][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.255053][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.271029][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.283430][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.293327][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.301996][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.311434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.320590][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.329534][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.343259][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.374662][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.387190][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.405481][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.414831][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.425913][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.435436][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.449903][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.462043][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.472537][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.481636][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.514700][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.536683][ T4279] device veth1_vlan entered promiscuous mode [ 75.550983][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.560301][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.569300][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.578162][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.604855][ T4278] device veth0_macvtap entered promiscuous mode [ 75.622300][ T4278] device veth1_macvtap entered promiscuous mode [ 75.634962][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.648720][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.657136][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.668171][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.676981][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.685374][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.722195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.732156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.754404][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 75.811718][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.822138][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.833872][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 75.839918][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 75.844167][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 75.847591][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 75.856015][ T4282] device veth0_vlan entered promiscuous mode [ 75.876051][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.889789][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.900685][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.911630][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.926094][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.933506][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.943086][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.955202][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.966191][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.976468][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.987721][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.002939][ T4279] device veth0_macvtap entered promiscuous mode [ 76.024281][ T4282] device veth1_vlan entered promiscuous mode [ 76.040443][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.051528][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.061574][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.073287][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.090546][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.107360][ T4279] device veth1_macvtap entered promiscuous mode [ 76.119380][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.130777][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.140145][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.142677][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.161999][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.176201][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.186842][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.196210][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.205305][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.230013][ T4282] device veth0_macvtap entered promiscuous mode [ 76.278885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.287542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.301804][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.313279][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.323657][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.334910][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.344984][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.355748][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.367263][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.376770][ T4282] device veth1_macvtap entered promiscuous mode [ 76.389847][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.398749][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.408437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.414915][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.418023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.430028][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.432603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.449218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.458177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.466319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.481197][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.493259][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.503208][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.514174][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.529634][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.540707][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.553121][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.581058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.595490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.619717][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.633369][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.647472][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.658168][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.668084][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.679121][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.689140][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.699824][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.720963][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.749513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.760140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.772621][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.782140][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.791601][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.801539][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.813353][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.827376][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.837231][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.848137][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.858404][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.868940][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.881045][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.892133][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.904508][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.931067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.942181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.955445][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.963357][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.003398][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.029705][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.045948][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.047160][ T4357] Cannot find set identified by id 0 to match [ 77.058049][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.071521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.425111][ T4358] device batadv_slave_1 entered promiscuous mode [ 77.540626][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.666942][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.714946][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.734158][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.834054][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 77.865365][ T4356] device batadv_slave_1 left promiscuous mode [ 77.872440][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.882972][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.915814][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 77.922266][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 77.928621][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 77.935299][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 78.034905][ T4369] 9pnet_fd: Insufficient options for proto=fd [ 78.511156][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.519825][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.541360][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.601246][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.765964][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.949606][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.003982][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.177943][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.296132][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.373548][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.390030][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.604267][ T4384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.128861][ T4286] Bluetooth: hci4: unexpected subevent 0x0e length: 32 > 15 [ 80.423905][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.283718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 81.303721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 81.313723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 81.333730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 81.343732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 81.353727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 81.363733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 81.373733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 81.383731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 81.403736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 82.114321][ T4404] loop4: detected capacity change from 0 to 8 [ 84.061868][ T4414] loop0: detected capacity change from 0 to 2048 [ 84.077029][ T4414] UDF-fs: bad mount option "wg2" or missing value [ 84.628933][ T4364] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.937796][ T4420] 9pnet_fd: Insufficient options for proto=fd [ 86.711085][ T130] cfg80211: failed to load regulatory.db [ 88.360742][ T4446] device syz_tun entered promiscuous mode [ 90.998539][ T4444] loop0: detected capacity change from 0 to 32768 [ 92.441432][ T4473] process 'syz.0.24' launched '/dev/fd/5' with NULL argv: empty string added [ 92.678488][ T4476] tipc: Started in network mode [ 92.678635][ T4476] tipc: Node identity 2003, cluster identity 4711 [ 92.678672][ T4476] tipc: Node number set to 8195 [ 92.748440][ T4478] 9pnet_fd: Insufficient options for proto=fd [ 93.556321][ T26] audit: type=1107 audit(1785266355.638:2): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f‹lPH]‰€x»ôµî®@' [ 95.205240][ T4504] loop4: detected capacity change from 0 to 128 [ 95.206059][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 95.273026][ T4504] FAT-fs (loop4): Directory bread(block 414) failed [ 95.284995][ T4504] FAT-fs (loop4): Directory bread(block 415) failed [ 95.291795][ T4504] FAT-fs (loop4): Directory bread(block 416) failed [ 95.307148][ T4504] FAT-fs (loop4): Directory bread(block 417) failed [ 95.319160][ T4504] FAT-fs (loop4): Directory bread(block 418) failed [ 95.331515][ T4502] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.340756][ T4502] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.349495][ T4502] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.358249][ T4502] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.372964][ T4504] FAT-fs (loop4): Directory bread(block 419) failed [ 95.379812][ T4504] FAT-fs (loop4): Directory bread(block 420) failed [ 95.389457][ T4504] FAT-fs (loop4): Directory bread(block 421) failed [ 95.454287][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 95.660329][ T4505] Zero length message leads to an empty skb [ 95.755974][ T4509] FAT-fs (loop4): Directory bread(block 414) failed [ 95.762917][ T4509] FAT-fs (loop4): Directory bread(block 415) failed [ 96.241826][ T4511] input: syz0 as /devices/virtual/input/input5 [ 97.478822][ T4521] Bluetooth: MGMT ver 1.22 [ 98.218376][ T4525] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 98.471469][ T4511] syz.2.33 (4511): drop_caches: 2 [ 98.637611][ T4524] tty tty4: ldisc open failed (-12), clearing slot 3 [ 99.138296][ T4530] can0: slcan on ttyS3. [ 100.004211][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.013571][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.021162][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.057413][ T4537] loop4: detected capacity change from 0 to 1024 [ 100.064781][ T4537] ======================================================= [ 100.064781][ T4537] WARNING: The mand mount option has been deprecated and [ 100.064781][ T4537] and is ignored by this kernel. Remove the mand [ 100.064781][ T4537] option from the mount to silence this warning. [ 100.064781][ T4537] ======================================================= [ 101.055209][ T4534] sched: RT throttling activated [ 101.162425][ T4537] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 101.173278][ T4537] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (6416!=35945) [ 101.487003][ T4537] EXT4-fs error (device loop4): __ext4_fill_super:5465: inode #2: comm syz.4.36: iget: special inode unallocated [ 101.503117][ T4537] EXT4-fs (loop4): get root inode failed [ 101.508833][ T4537] EXT4-fs (loop4): mount failed [ 101.628270][ T4529] can0 (unregistered): slcan off ttyS3. [ 101.716626][ T4351] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.913319][ T4545] tipc: Started in network mode [ 101.918485][ T4545] tipc: Node identity 2003, cluster identity 4711 [ 101.925136][ T4545] tipc: Node number set to 8195 [ 101.937298][ T4545] 9pnet_fd: Insufficient options for proto=fd [ 103.394092][ T4556] loop4: detected capacity change from 0 to 128 [ 103.413838][ T4556] FAT-fs (loop4): Directory bread(block 414) failed [ 103.420477][ T4556] FAT-fs (loop4): Directory bread(block 415) failed [ 103.427153][ T4556] FAT-fs (loop4): Directory bread(block 416) failed [ 103.433813][ T4556] FAT-fs (loop4): Directory bread(block 417) failed [ 103.440391][ T4556] FAT-fs (loop4): Directory bread(block 418) failed [ 103.446993][ T4556] FAT-fs (loop4): Directory bread(block 419) failed [ 103.453574][ T4556] FAT-fs (loop4): Directory bread(block 420) failed [ 103.460235][ T4556] FAT-fs (loop4): Directory bread(block 421) failed [ 104.513107][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 104.896330][ T26] audit: type=1107 audit(1785266366.988:3): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f‹lPH]‰€x»ôµî®@' [ 105.641899][ T4585] netlink: 'syz.2.47': attribute type 5 has an invalid length. [ 105.650230][ T4585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 106.371281][ T4586] netlink: 188 bytes leftover after parsing attributes in process `syz.4.46'. [ 106.599435][ T26] audit: type=1326 audit(1785266367.668:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.46" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd19c39de99 code=0x0 [ 107.038466][ T4601] wlan0 speed is unknown, defaulting to 1000 [ 107.045255][ T4601] wlan0 speed is unknown, defaulting to 1000 [ 107.054019][ T4601] wlan0 speed is unknown, defaulting to 1000 [ 107.064547][ T4601] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.077961][ T4601] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 107.164879][ T4601] wlan0 speed is unknown, defaulting to 1000 [ 107.172160][ T4601] wlan0 speed is unknown, defaulting to 1000 [ 107.179310][ T4601] wlan0 speed is unknown, defaulting to 1000 [ 107.187032][ T4601] wlan0 speed is unknown, defaulting to 1000 [ 107.194336][ T4601] wlan0 speed is unknown, defaulting to 1000 [ 107.895299][ T4600] input: syz0 as /devices/virtual/input/input7 [ 108.503990][ T4615] 9pnet_fd: Insufficient options for proto=fd [ 108.912943][ T4600] syz.0.49 (4600): drop_caches: 2 [ 110.280446][ T4641] tipc: Started in network mode [ 110.285361][ T4641] tipc: Node identity 2003, cluster identity 4711 [ 110.291760][ T4641] tipc: Node number set to 8195 [ 110.301307][ T4641] 9pnet_fd: Insufficient options for proto=fd [ 110.696014][ T4638] Process accounting resumed [ 110.871927][ T4648] loop4: detected capacity change from 0 to 1024 [ 111.532727][ T4648] EXT4-fs: inline encryption not supported [ 113.071142][ T53] block nbd3: Attempted send on invalid socket [ 113.077658][ T53] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 113.088709][ T4664] vxfs: unable to read disk superblock at 1 [ 113.098732][ T53] block nbd3: Attempted send on invalid socket [ 113.106014][ T53] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 113.117581][ T4664] vxfs: unable to read disk superblock at 8 [ 113.123590][ T4664] vxfs: can't find superblock. [ 113.166455][ T4666] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 113.174874][ T4666] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 113.183425][ T4666] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 113.738316][ T4648] EXT4-fs: failed to create workqueue [ 113.775927][ T4648] EXT4-fs (loop4): mount failed [ 113.940922][ T4656] Process accounting resumed [ 114.298938][ T4679] 9pnet_fd: Insufficient options for proto=fd [ 114.329962][ T4680] overlayfs: missing 'lowerdir' [ 115.765292][ T4685] input: syz0 as /devices/virtual/input/input8 [ 116.260068][ T4697] netlink: 96 bytes leftover after parsing attributes in process `syz.4.69'. [ 116.274681][ T4697] loop4: detected capacity change from 0 to 512 [ 116.283491][ T4697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.296586][ T4697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.327087][ T4697] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 116.427135][ T4697] EXT4-fs (loop4): Remounting filesystem read-only [ 116.434185][ T4697] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.448416][ T4697] EXT4-fs (loop4): 1 truncate cleaned up [ 116.454179][ T4697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.518179][ T4685] syz.3.68 (4685): drop_caches: 2 [ 118.048881][ T4717] loop3: detected capacity change from 0 to 128 [ 119.187200][ T4718] bridge0: port 3(syz_tun) entered blocking state [ 119.196817][ T4718] bridge0: port 3(syz_tun) entered disabled state [ 119.243876][ T4718] device syz_tun entered promiscuous mode [ 119.252853][ T4718] bridge0: port 3(syz_tun) entered blocking state [ 119.259763][ T4718] bridge0: port 3(syz_tun) entered forwarding state [ 119.527254][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 121.423544][ T4722] sctp: failed to load transform for md5: -2 [ 124.881179][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 125.064092][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 130.788656][ T4813] 9pnet_fd: Insufficient options for proto=fd [ 132.033371][ T4790] syz.0.88 (4790) used greatest stack depth: 17440 bytes left [ 132.483862][ T4799] loop1: detected capacity change from 0 to 4096 [ 132.718524][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.726140][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.327701][ T4799] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 135.852327][ T4834] loop4: detected capacity change from 0 to 4096 [ 136.021202][ T4834] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 137.518847][ T4844] SET target dimension over the limit! [ 138.134218][ T4865] 9pnet_fd: Insufficient options for proto=fd [ 139.029068][ T4879] loop1: detected capacity change from 0 to 1024 [ 141.544756][ T4904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 141.686904][ T4906] syz.2.116 uses obsolete (PF_INET,SOCK_PACKET) [ 142.887070][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 143.147133][ T4919] tipc: Started in network mode [ 143.152196][ T4919] tipc: Node identity 2003, cluster identity 4711 [ 143.158852][ T4919] tipc: Node number set to 8195 [ 143.169994][ T4919] 9pnet_fd: Insufficient options for proto=fd [ 146.856783][ T4962] loop0: detected capacity change from 0 to 128 [ 146.904742][ T4962] FAT-fs (loop0): Directory bread(block 414) failed [ 146.957179][ T4962] FAT-fs (loop0): Directory bread(block 415) failed [ 146.969987][ T4962] FAT-fs (loop0): Directory bread(block 416) failed [ 147.612389][ T4962] FAT-fs (loop0): Directory bread(block 417) failed [ 147.873487][ T4962] FAT-fs (loop0): Directory bread(block 418) failed [ 148.020810][ T4962] FAT-fs (loop0): Directory bread(block 419) failed [ 148.097217][ T4962] FAT-fs (loop0): Directory bread(block 420) failed [ 148.119199][ T4976] loop3: detected capacity change from 0 to 128 [ 148.152640][ T4976] FAT-fs (loop3): Directory bread(block 414) failed [ 148.160239][ T4976] FAT-fs (loop3): Directory bread(block 415) failed [ 148.167234][ T4976] FAT-fs (loop3): Directory bread(block 416) failed [ 148.173991][ T4976] FAT-fs (loop3): Directory bread(block 417) failed [ 148.180711][ T4976] FAT-fs (loop3): Directory bread(block 418) failed [ 148.187454][ T4976] FAT-fs (loop3): Directory bread(block 419) failed [ 148.194203][ T4976] FAT-fs (loop3): Directory bread(block 420) failed [ 148.200928][ T4976] FAT-fs (loop3): Directory bread(block 421) failed [ 148.603901][ T4962] FAT-fs (loop0): Directory bread(block 421) failed [ 149.564152][ T4982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 149.685368][ T4991] FAT-fs (loop0): Directory bread(block 414) failed [ 149.693035][ T4991] FAT-fs (loop0): Directory bread(block 415) failed [ 151.087006][ T5003] loop4: detected capacity change from 0 to 8 [ 156.848036][ T5048] loop2: detected capacity change from 0 to 128 [ 157.410566][ T4351] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.449923][ T5048] loop2: detected capacity change from 0 to 128 [ 157.460616][ T4351] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.561830][ T4351] Buffer I/O error on dev loop2, logical block 0, async page read [ 158.509547][ T5066] loop3: detected capacity change from 0 to 128 [ 158.589434][ T5066] FAT-fs (loop3): Directory bread(block 414) failed [ 158.625065][ T5066] FAT-fs (loop3): Directory bread(block 415) failed [ 158.684001][ T5066] FAT-fs (loop3): Directory bread(block 416) failed [ 158.690675][ T5066] FAT-fs (loop3): Directory bread(block 417) failed [ 159.213896][ T5066] FAT-fs (loop3): Directory bread(block 418) failed [ 159.220572][ T5066] FAT-fs (loop3): Directory bread(block 419) failed [ 159.271603][ T5066] FAT-fs (loop3): Directory bread(block 420) failed [ 159.294977][ T5066] FAT-fs (loop3): Directory bread(block 421) failed [ 159.672916][ T5079] 9pnet_fd: Insufficient options for proto=fd [ 160.251929][ T5087] FAT-fs (loop3): Directory bread(block 414) failed [ 160.258827][ T5087] FAT-fs (loop3): Directory bread(block 415) failed [ 164.037276][ T5113] Config c/1 of g_uac2 needs at least one function. [ 164.080533][ T5113] udc usbip-vudc.0: failed to start g_uac2: -22 [ 164.205335][ T5113] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 164.329478][ T5113] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 164.852468][ T5126] 9pnet_fd: Insufficient options for proto=fd [ 168.110958][ T5151] loop4: detected capacity change from 0 to 512 [ 169.518783][ T5151] EXT4-fs: error -4 creating inode table initialization thread [ 169.527029][ T5151] EXT4-fs (loop4): mount failed [ 172.552969][ T5180] tipc: Started in network mode [ 172.558048][ T5180] tipc: Node identity 2003, cluster identity 4711 [ 172.564544][ T5180] tipc: Node number set to 8195 [ 172.574125][ T5180] 9pnet_fd: Insufficient options for proto=fd [ 172.725336][ T5181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.732529][ T5181] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 173.200453][ T5181] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 173.207908][ T5181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.216378][ T5181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 173.225229][ T5181] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 173.232402][ T5181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.238829][ T5181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 173.319546][ T5181] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 173.413888][ T5181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.419940][ T5181] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.608194][ T5181] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 173.692021][ T5194] 9pnet_fd: Insufficient options for proto=fd [ 173.938818][ T5196] fuse: Bad value for 'fd' [ 173.946235][ T5181] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.029259][ T5181] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 174.139723][ T5181] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 175.895686][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.895705][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.895790][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.901729][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.993932][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 176.079041][ T5202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'. [ 176.124632][ T5202] device lo entered promiscuous mode [ 176.284819][ T5202] netlink: 44 bytes leftover after parsing attributes in process `syz.3.185'. [ 176.830960][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.841085][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.850880][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.861001][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.868857][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 176.878157][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.138542][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 177.187017][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.194642][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.202791][ T5216] device bridge_slave_0 entered promiscuous mode [ 177.211725][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.218955][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.227087][ T5216] device bridge_slave_1 entered promiscuous mode [ 177.250270][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.261630][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.290336][ T5216] team0: Port device team_slave_0 added [ 177.304458][ T5216] team0: Port device team_slave_1 added [ 177.325829][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.332803][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.358682][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.365959][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.381235][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.388530][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.415904][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.447591][ T5216] device hsr_slave_0 entered promiscuous mode [ 177.454915][ T5216] device hsr_slave_1 entered promiscuous mode [ 177.461462][ T5216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.469215][ T5216] Cannot create hsr debugfs directory [ 177.559712][ T5216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.569563][ T5216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.578687][ T5216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.589798][ T5216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.612322][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.619761][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.628134][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.635277][ T5216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.680758][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.696881][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.705902][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.714535][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.728345][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.741368][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.750495][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.757638][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.768975][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.780319][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.787465][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.809369][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.821376][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.832829][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.851776][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.862968][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.877952][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.914108][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 177.914546][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 177.994551][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 178.057690][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.068352][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.074753][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 178.090216][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.315118][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.324620][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.342943][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.355535][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.367807][ T5216] device veth0_vlan entered promiscuous mode [ 178.376917][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.386353][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.400669][ T5216] device veth1_vlan entered promiscuous mode [ 178.418181][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.427512][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.436116][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.445727][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.456811][ T5216] device veth0_macvtap entered promiscuous mode [ 178.469209][ T5216] device veth1_macvtap entered promiscuous mode [ 178.484418][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.496354][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.506261][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.516872][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.527046][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.538364][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.548426][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.559379][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.569973][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.580678][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.592232][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.600428][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.609351][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.617604][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.626389][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.639058][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.650141][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.660539][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.672605][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.682488][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.693400][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.703298][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.714380][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.724598][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.735143][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.746276][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.755378][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.764849][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.777650][ T5216] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.786999][ T5216] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.796651][ T5216] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.805950][ T5216] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.859973][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.874721][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.883639][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.904540][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.912491][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.920664][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.953982][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 182.225219][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 183.211230][ T5272] 9pnet_fd: Insufficient options for proto=fd [ 184.140688][ T5287] 9pnet_fd: Insufficient options for proto=fd [ 184.348125][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 184.536878][ T5285] sctp: [Deprecated]: syz.3.202 (pid 5285) Use of int in max_burst socket option deprecated. [ 184.536878][ T5285] Use struct sctp_assoc_value instead [ 185.435879][ T5292] netlink: 204 bytes leftover after parsing attributes in process `syz.3.202'. [ 186.749707][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 187.841442][ T130] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 188.589668][ T130] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.173291][ T5330] fido_id[5330]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 190.244636][ T26] audit: type=1804 audit(1785266452.367:5): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.213" name="bus" dev="ramfs" ino=37491 res=1 errno=0 [ 191.009560][ T26] audit: type=1804 audit(1785266452.397:6): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.213" name="bus" dev="ramfs" ino=37491 res=1 errno=0 [ 191.235592][ T5341] 9pnet_fd: Insufficient options for proto=fd [ 192.149591][ T5352] futex_wake_op: syz.0.216 tries to shift op by 144; fix this program [ 192.174438][ T5353] futex_wake_op: syz.4.217 tries to shift op by 144; fix this program [ 192.236535][ T5353] loop4: detected capacity change from 0 to 256 [ 192.279916][ T5354] loop0: detected capacity change from 0 to 128 [ 192.413253][ T5353] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 192.525189][ T26] audit: type=1800 audit(1785266454.613:7): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.217" name="file1" dev="loop4" ino=1048613 res=0 errno=0 [ 192.683037][ T5355] syz.4.217: attempt to access beyond end of device [ 192.683037][ T5355] loop4: rw=0, sector=184, nr_sectors = 120 limit=256 [ 192.759471][ T5355] syz.4.217: attempt to access beyond end of device [ 192.759471][ T5355] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 192.775109][ T5355] syz.4.217: attempt to access beyond end of device [ 192.775109][ T5355] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 192.789397][ T5355] syz.4.217: attempt to access beyond end of device [ 192.789397][ T5355] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 192.803459][ T5355] syz.4.217: attempt to access beyond end of device [ 192.803459][ T5355] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 192.816755][ T5355] syz.4.217: attempt to access beyond end of device [ 192.816755][ T5355] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 192.830049][ T5355] syz.4.217: attempt to access beyond end of device [ 192.830049][ T5355] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 192.843324][ T5355] syz.4.217: attempt to access beyond end of device [ 192.843324][ T5355] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 192.856656][ T5355] syz.4.217: attempt to access beyond end of device [ 192.856656][ T5355] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 192.869813][ T5355] syz.4.217: attempt to access beyond end of device [ 192.869813][ T5355] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 195.036784][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.043151][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.385889][ T5384] sctp: failed to load transform for md5: -2 [ 197.113830][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 197.119967][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 197.120019][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 197.126102][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 199.340656][ T5407] 9pnet_fd: Insufficient options for proto=fd [ 199.427520][ T5406] 9pnet_fd: Insufficient options for proto=fd [ 199.934840][ T5416] UBIFS error (pid: 5416): cannot open "(null)", error -22 [ 200.524229][ T5422] loop4: detected capacity change from 0 to 512 [ 200.591588][ T5422] FAT-fs (loop4): Directory bread(block 199916) failed [ 200.598952][ T5422] FAT-fs (loop4): Directory bread(block 199917) failed [ 200.606045][ T5422] FAT-fs (loop4): Directory bread(block 199918) failed [ 200.613134][ T5422] FAT-fs (loop4): Directory bread(block 199919) failed [ 200.620266][ T5422] FAT-fs (loop4): Directory bread(block 199920) failed [ 200.627294][ T5422] FAT-fs (loop4): Directory bread(block 199921) failed [ 200.634390][ T5422] FAT-fs (loop4): Directory bread(block 199922) failed [ 200.641459][ T5422] FAT-fs (loop4): Directory bread(block 199923) failed [ 200.898406][ T5421] FAT-fs (loop4): FAT read failed (blocknr 128) [ 202.548356][ T5437] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 202.564705][ T5437] cramfs: wrong magic [ 202.949521][ T5437] netlink: 52 bytes leftover after parsing attributes in process `syz.4.235'. [ 204.993114][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.000468][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.506605][ T5458] 9pnet_fd: Insufficient options for proto=fd [ 205.699161][ T5455] 9pnet_fd: Insufficient options for proto=fd [ 206.398267][ T5466] netlink: 44 bytes leftover after parsing attributes in process `syz.5.243'. [ 206.407351][ T5466] netlink: 84 bytes leftover after parsing attributes in process `syz.5.243'. [ 207.311060][ T5472] loop0: detected capacity change from 0 to 32768 [ 207.324665][ T5472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.248 (5472) [ 207.361779][ T5472] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.373882][ T5472] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 207.382614][ T5472] BTRFS info (device loop0): turning on sync discard [ 207.389391][ T5472] BTRFS info (device loop0): using free space tree [ 209.080552][ T5472] BTRFS info (device loop0): enabling ssd optimizations [ 209.713858][ T26] audit: type=1800 audit(1785266471.813:8): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.248" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 210.870218][ T5530] 9pnet_fd: Insufficient options for proto=fd [ 210.886177][ T5532] blktrace: Concurrent blktraces are not allowed on loop10 [ 211.178905][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 211.252101][ T5529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.296075][ T53] block nbd5: Attempted send on invalid socket [ 211.302501][ T53] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 211.324651][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 211.335541][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 211.374636][ T5534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.414689][ T5534] bond1: (slave bond0): Enslaving as an active interface with an up link [ 211.433581][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 211.811942][ T4277] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.918038][ T5547] 9pnet_fd: Insufficient options for proto=fd [ 212.140948][ T5551] loop5: detected capacity change from 0 to 128 [ 212.279282][ T4351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4351) [ 212.737020][ T26] audit: type=1326 audit(1785266474.803:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 212.760906][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.301385][ T26] audit: type=1326 audit(1785266474.813:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 213.325990][ T26] audit: type=1326 audit(1785266474.813:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 213.380678][ T26] audit: type=1326 audit(1785266474.813:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 213.423428][ T26] audit: type=1326 audit(1785266474.813:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 213.534298][ T26] audit: type=1326 audit(1785266474.813:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 213.570382][ T26] audit: type=1326 audit(1785266474.813:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 213.603002][ T26] audit: type=1326 audit(1785266474.813:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 213.633940][ T26] audit: type=1326 audit(1785266474.813:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.5.257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7ff5c219de99 code=0x7ffc0000 [ 217.512223][ T5593] 9pnet_fd: Insufficient options for proto=fd [ 218.642104][ T5604] futex_wake_op: syz.0.269 tries to shift op by 144; fix this program [ 218.682045][ T5604] loop0: detected capacity change from 0 to 256 [ 218.744051][ T5604] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 218.800138][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 218.800194][ T26] audit: type=1800 audit(1785266480.913:66): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.269" name="file1" dev="loop0" ino=1048618 res=0 errno=0 [ 218.850075][ T5604] bio_check_eod: 1743 callbacks suppressed [ 218.850111][ T5604] syz.0.269: attempt to access beyond end of device [ 218.850111][ T5604] loop0: rw=0, sector=184, nr_sectors = 120 limit=256 [ 218.908914][ T5603] syz.0.269: attempt to access beyond end of device [ 218.908914][ T5603] loop0: rw=524288, sector=3480, nr_sectors = 256 limit=256 [ 218.909577][ T5604] syz.0.269: attempt to access beyond end of device [ 218.909577][ T5604] loop0: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 218.923407][ T5603] syz.0.269: attempt to access beyond end of device [ 218.923407][ T5603] loop0: rw=0, sector=3608, nr_sectors = 8 limit=256 [ 218.924124][ T5603] syz.0.269: attempt to access beyond end of device [ 218.924124][ T5603] loop0: rw=0, sector=3608, nr_sectors = 8 limit=256 [ 218.938829][ T5604] syz.0.269: attempt to access beyond end of device [ 218.938829][ T5604] loop0: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 218.951334][ T5603] syz.0.269: attempt to access beyond end of device [ 218.951334][ T5603] loop0: rw=0, sector=3608, nr_sectors = 8 limit=256 [ 218.964964][ T5604] syz.0.269: attempt to access beyond end of device [ 218.964964][ T5604] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 218.978692][ T5603] syz.0.269: attempt to access beyond end of device [ 218.978692][ T5603] loop0: rw=0, sector=3608, nr_sectors = 8 limit=256 [ 218.992012][ T5604] syz.0.269: attempt to access beyond end of device [ 218.992012][ T5604] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 219.570363][ T4274] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 220.126699][ T41] libceph: connect (1)[c::]:6789 error -101 [ 220.135279][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 220.202807][ T5616] loop3: detected capacity change from 0 to 128 [ 220.230619][ T5616] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 221.114049][ T41] libceph: connect (1)[c::]:6789 error -101 [ 221.197508][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 221.204165][ T5607] ceph: No mds server is up or the cluster is laggy [ 221.263918][ T5616] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 221.302907][ T4431] udevd[4431]: incorrect jbd checksum on /dev/loop3 [ 221.432728][ T4351] udevd[4351]: incorrect jbd checksum on /dev/loop3 [ 222.699767][ T5633] loop3: detected capacity change from 0 to 1024 [ 224.105449][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 226.378782][ T5641] loop5: detected capacity change from 0 to 1024 [ 226.502494][ T5640] hfsplus: b-tree write err: -5, ino 25 [ 226.590826][ T5640] hfsplus: b-tree write err: -5, ino 4 [ 226.597309][ T5640] hfsplus: b-tree write err: -5, ino 2 [ 226.700202][ T5648] loop4: detected capacity change from 0 to 2048 [ 226.752138][ T5648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 226.808266][ T5658] 9pnet_fd: Insufficient options for proto=fd [ 228.480352][ T5661] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 228.496652][ T5661] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 228.509065][ T5661] EXT4-fs (loop4): This should not happen!! Data will be lost [ 228.509065][ T5661] [ 228.518709][ T5661] EXT4-fs (loop4): Total free blocks count 0 [ 228.524688][ T5661] EXT4-fs (loop4): Free/Dirty block details [ 228.530613][ T5661] EXT4-fs (loop4): free_blocks=2415919104 [ 228.537418][ T5661] EXT4-fs (loop4): dirty_blocks=39760 [ 228.542838][ T5661] EXT4-fs (loop4): Block reservation details [ 228.548864][ T5661] EXT4-fs (loop4): i_reserved_data_blocks=2485 [ 228.714921][ T4274] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 229.919055][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 231.030881][ T5688] loop5: detected capacity change from 0 to 4096 [ 231.900327][ T5688] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 232.619816][ T5703] loop2: detected capacity change from 0 to 1024 [ 232.748669][ T5703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 233.758523][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 235.840893][ T5723] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 237.589110][ T5726] kvm: apic: phys broadcast and lowest prio [ 238.205137][ T5739] loop0: detected capacity change from 0 to 256 [ 239.169983][ T4274] Bluetooth: hci5: command 0x0405 tx timeout [ 239.834572][ T4282] EXT4-fs: 15 callbacks suppressed [ 239.834586][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 240.877895][ T5759] block device autoloading is deprecated and will be removed. [ 240.887298][ T5760] block device autoloading is deprecated and will be removed. [ 241.027410][ T5762] loop3: detected capacity change from 0 to 128 [ 241.374418][ T5762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.395157][ T5762] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.427104][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.513018][ T5767] loop0: detected capacity change from 0 to 256 [ 242.520904][ T5767] exfat: Deprecated parameter 'namecase' [ 242.730446][ T5767] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 243.111726][ T5781] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 244.467098][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 244.644946][ T5789] kvm: apic: phys broadcast and lowest prio [ 245.193404][ T5799] afs: Bad value for 'source' [ 246.364542][ T5808] loop5: detected capacity change from 0 to 1024 [ 246.411763][ T5808] EXT4-fs: Ignoring removed bh option [ 246.557689][ T5800] lo speed is unknown, defaulting to 1000 [ 246.798815][ T5800] lo speed is unknown, defaulting to 1000 [ 246.829050][ T5808] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 247.067307][ T5808] System zones: 0-1, 3-12 [ 247.415164][ T5800] lo speed is unknown, defaulting to 1000 [ 247.436205][ T5808] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 247.458229][ T5800] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 248.405770][ T5824] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.414817][ T5824] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 248.660939][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 249.048798][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.311'. [ 249.061241][ T5800] lo speed is unknown, defaulting to 1000 [ 249.091735][ T5800] lo speed is unknown, defaulting to 1000 [ 249.098054][ T5800] lo speed is unknown, defaulting to 1000 [ 249.136835][ T5800] lo speed is unknown, defaulting to 1000 [ 249.143219][ T5800] lo speed is unknown, defaulting to 1000 [ 249.187602][ T5800] lo speed is unknown, defaulting to 1000 [ 249.648070][ T5843] loop4: detected capacity change from 0 to 16 [ 249.793687][ T5845] loop5: detected capacity change from 0 to 1024 [ 250.283221][ T5843] erofs: (device loop4): mounted with root inode @ nid 36. [ 250.335248][ T5843] IPv6: sit1: Disabled Multicast RS [ 252.438182][ T5862] futex_wake_op: syz.5.319 tries to shift op by 144; fix this program [ 253.053208][ T5857] kvm: apic: phys broadcast and lowest prio [ 253.991857][ T5882] loop4: detected capacity change from 0 to 512 [ 254.240912][ T5882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 254.250154][ T5882] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.345386][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 256.037170][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.043580][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.594765][ T5907] loop3: detected capacity change from 0 to 512 [ 259.700926][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.768800][ T5903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.957273][ T5922] 9pnet_fd: Insufficient options for proto=fd [ 261.147419][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 262.097602][ T5927] team0: Port device team_slave_0 removed [ 262.107939][ T3935] device veth1_vlan left promiscuous mode [ 262.169858][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.621745][ T5939] input: syz1 as /devices/virtual/input/input10 [ 262.712474][ T4290] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 266.106061][ T5957] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 266.117759][ T5957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.007383][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.329860][ T4290] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 272.921513][ T6012] loop4: detected capacity change from 0 to 512 [ 272.976748][ T6011] block device autoloading is deprecated and will be removed. [ 273.040527][ T6012] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 273.052686][ T6012] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 273.063026][ T6012] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.347: Corrupt directory, running e2fsck is recommended [ 273.098127][ T6012] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 273.112866][ T6012] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.347: corrupted in-inode xattr [ 273.129588][ T6012] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.347: couldn't read orphan inode 15 (err -117) [ 273.147322][ T6012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 273.170832][ T6012] EXT4-fs (loop4): unmounting filesystem. [ 274.353832][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.674336][ T6027] autofs4:pid:6027:autofs_fill_super: called with bogus options [ 276.348726][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.453487][ T6042] tipc: Started in network mode [ 276.458477][ T6042] tipc: Node identity 2003, cluster identity 4711 [ 276.465120][ T6042] tipc: Node number set to 8195 [ 276.504791][ T6042] 9pnet_fd: Insufficient options for proto=fd [ 276.853437][ T6052] loop2: detected capacity change from 0 to 2048 [ 276.895150][ T6052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.326632][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.724994][ T6060] netlink: 72 bytes leftover after parsing attributes in process `syz.4.357'. [ 280.261882][ T9] tipc: Left network mode [ 280.447831][ T26] audit: type=1326 audit(1785791084.249:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.4.361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd19c39de99 code=0x0 [ 281.185342][ T6073] Can't find ip_set type ho# [ 282.503470][ T6094] autofs4:pid:6094:autofs_fill_super: called with bogus options [ 283.471010][ T6101] Bluetooth: MGMT ver 1.22 [ 283.558814][ T6098] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 283.796337][ T6108] input: syz0 as /devices/virtual/input/input11 [ 285.947498][ T6132] loop4: detected capacity change from 0 to 16 [ 286.184515][ T6132] erofs: (device loop4): mounted with root inode @ nid 36. [ 286.234153][ T4274] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 286.270913][ T6132] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 286.391134][ T26] audit: type=1800 audit(1785791089.637:68): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.371" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 287.474126][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 288.328702][ T6124] ./file0: Can't open blockdev [ 289.637422][ T6171] autofs4:pid:6171:autofs_fill_super: called with bogus options [ 291.835390][ T6174] 9pnet_fd: Insufficient options for proto=fd [ 294.030725][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 294.107984][ T6184] device bridge_slave_1 left promiscuous mode [ 294.171774][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.395295][ T6184] device bridge_slave_0 left promiscuous mode [ 294.408288][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.486039][ T9] device hsr_slave_0 left promiscuous mode [ 298.508158][ T6237] loop2: detected capacity change from 0 to 256 [ 298.521865][ T9] device hsr_slave_1 left promiscuous mode [ 299.212115][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.311365][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.580184][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.587833][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.641023][ T9] device bridge_slave_1 left promiscuous mode [ 299.658973][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.697526][ T9] device bridge_slave_0 left promiscuous mode [ 299.717632][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.277539][ T9] device veth1_macvtap left promiscuous mode [ 301.384927][ T6270] loop3: detected capacity change from 0 to 1024 [ 301.398871][ T9] device veth0_macvtap left promiscuous mode [ 301.424246][ T9] device veth1_vlan left promiscuous mode [ 301.434502][ T9] device veth0_vlan left promiscuous mode [ 301.548193][ T6270] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 302.813008][ T6289] binfmt_misc: register: failed to install interpreter file ./file0 [ 303.601837][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 303.750672][ T9] team0 (unregistering): Port device team_slave_1 removed [ 303.798404][ T9] team0 (unregistering): Port device team_slave_0 removed [ 303.854086][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.929466][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.670149][ T9] bond0 (unregistering): Released all slaves [ 304.882486][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 304.900678][ T6260] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 304.900908][ T6253] device batadv_slave_0 entered promiscuous mode [ 304.910840][ T6260] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 304.927128][ T6260] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 304.939331][ T6274] netlink: 52 bytes leftover after parsing attributes in process `syz.5.395'. [ 305.010616][ T6274] device netdevsim0 entered promiscuous mode [ 305.057755][ T6251] device batadv_slave_0 left promiscuous mode [ 305.264159][ T6305] afs: Bad value for 'source' [ 305.357781][ T6307] siw: device registration error -23 [ 307.217988][ T6317] Bluetooth: MGMT ver 1.22 [ 307.271707][ T6317] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.936849][ T6322] 9pnet_fd: Insufficient options for proto=fd [ 308.207645][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 308.293254][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.409'. [ 308.308040][ T6329] o2cb: This node has not been configured. [ 308.314230][ T6329] o2cb: Cluster check failed. Fix errors before retrying. [ 308.321558][ T6329] (syz.2.409,6329,1):user_dlm_register:674 ERROR: status = -22 [ 308.329546][ T6329] (syz.2.409,6329,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 308.930390][ T6335] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 309.992698][ T4290] Bluetooth: hci2: command 0x0401 tx timeout [ 310.014340][ T4274] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 310.818368][ T6346] loop3: detected capacity change from 0 to 512 [ 311.224509][ T6346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 311.391016][ T6346] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.227572][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 314.861073][ T6378] XFS (nullb0): Invalid superblock magic number [ 318.691608][ T6417] futex_wake_op: syz.0.426 tries to shift op by 144; fix this program [ 321.334844][ T6439] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 322.443282][ T6451] loop2: detected capacity change from 0 to 128 [ 322.504625][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.511079][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.557646][ T6451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 322.605123][ T6451] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 323.079335][ T6456] 9pnet_fd: Insufficient options for proto=fd [ 323.446239][ T6464] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 323.832800][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 324.751318][ T6474] loop2: detected capacity change from 0 to 512 [ 324.850736][ T6474] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 324.937856][ T6480] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 324.945208][ T6480] /dev/nullb0: Can't open blockdev [ 326.968724][ T6474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 326.981806][ T6474] System zones: 1-12 [ 327.793580][ T6474] EXT4-fs (loop2): 1 truncate cleaned up [ 327.825783][ T6474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.075086][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 330.515792][ T6525] futex_wake_op: syz.3.448 tries to shift op by 144; fix this program [ 330.587463][ T6525] loop3: detected capacity change from 0 to 256 [ 331.712461][ T6525] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 331.778280][ T26] audit: type=1800 audit(1786315675.714:69): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.448" name="file1" dev="loop3" ino=1048632 res=0 errno=0 [ 332.271331][ T6524] bio_check_eod: 5449 callbacks suppressed [ 332.271411][ T6524] syz.3.448: attempt to access beyond end of device [ 332.271411][ T6524] loop3: rw=0, sector=184, nr_sectors = 120 limit=256 [ 333.616226][ T6540] overlayfs: missing 'lowerdir' [ 333.777973][ T6535] (syz.3.450,6535,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 335.538516][ T6551] loop2: detected capacity change from 0 to 512 [ 335.588548][ T6551] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 335.597203][ T6551] EXT4-fs (loop2): DAX unsupported by block device. [ 336.060745][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.454'. [ 337.166981][ T6559] loop4: detected capacity change from 0 to 128 [ 337.608767][ T4274] Bluetooth: hci4: unexpected event for opcode 0x042c [ 338.971916][ T6559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 339.182068][ T6559] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 339.744240][ T6577] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 340.169386][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 341.020353][ T6593] futex_wake_op: syz.4.462 tries to shift op by 144; fix this program [ 341.059742][ T6593] loop4: detected capacity change from 0 to 256 [ 341.520748][ T6593] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 341.600326][ T26] audit: type=1800 audit(1786315684.766:70): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.462" name="file1" dev="loop4" ino=1048633 res=0 errno=0 [ 341.721434][ T6594] syz.4.462: attempt to access beyond end of device [ 341.721434][ T6594] loop4: rw=0, sector=184, nr_sectors = 120 limit=256 [ 345.645173][ T6630] input: syz0 as /devices/virtual/input/input12 [ 346.847673][ T6645] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.475' sets config #1024 [ 347.813196][ T6645] netlink: 'syz.3.475': attribute type 10 has an invalid length. [ 347.959858][ T6657] futex_wake_op: syz.5.478 tries to shift op by 144; fix this program [ 347.999183][ T6657] loop5: detected capacity change from 0 to 256 [ 348.686200][ T6657] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 348.764933][ T26] audit: type=1800 audit(1786315691.373:71): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.478" name="file1" dev="loop5" ino=1048634 res=0 errno=0 [ 348.802070][ T6657] syz.5.478: attempt to access beyond end of device [ 348.802070][ T6657] loop5: rw=0, sector=184, nr_sectors = 120 limit=256 [ 348.874161][ T6655] syz.5.478: attempt to access beyond end of device [ 348.874161][ T6655] loop5: rw=524288, sector=6320, nr_sectors = 256 limit=256 [ 348.874266][ T6657] syz.5.478: attempt to access beyond end of device [ 348.874266][ T6657] loop5: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 348.888267][ T6655] syz.5.478: attempt to access beyond end of device [ 348.888267][ T6655] loop5: rw=0, sector=6448, nr_sectors = 8 limit=256 [ 348.904037][ T6657] syz.5.478: attempt to access beyond end of device [ 348.904037][ T6657] loop5: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 348.915990][ T6655] syz.5.478: attempt to access beyond end of device [ 348.915990][ T6655] loop5: rw=0, sector=6448, nr_sectors = 8 limit=256 [ 348.929353][ T6657] syz.5.478: attempt to access beyond end of device [ 348.929353][ T6657] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 348.929518][ T6657] syz.5.478: attempt to access beyond end of device [ 348.929518][ T6657] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 348.943265][ T6655] syz.5.478: attempt to access beyond end of device [ 348.943265][ T6655] loop5: rw=0, sector=6448, nr_sectors = 8 limit=256 [ 348.955987][ T6657] syz.5.478: attempt to access beyond end of device [ 348.955987][ T6657] loop5: rw=0, sector=664, nr_sectors = 8 limit=256 [ 349.221176][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 349.326804][ T76] Bluetooth: hci0: Frame reassembly failed (-84) [ 349.327211][ T6650] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.475' sets config #1 [ 349.343404][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 349.358301][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 349.665940][ T6669] futex_wake_op: syz.2.490 tries to shift op by 144; fix this program [ 349.710851][ T6669] loop2: detected capacity change from 0 to 256 [ 349.808958][ T6669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 349.950970][ T26] audit: type=1800 audit(1786315692.415:72): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.490" name="file1" dev="loop2" ino=1048635 res=0 errno=0 [ 352.403785][ T4290] Bluetooth: hci0: command 0x1003 tx timeout [ 352.411887][ T4274] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 352.425051][ T6674] sctp: failed to load transform for md5: -2 [ 353.929269][ T6700] loop3: detected capacity change from 0 to 512 [ 354.235020][ T6700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.484: bg 0: block 393: padding at end of block bitmap is not set [ 354.260565][ T6700] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 354.275356][ T6700] EXT4-fs (loop3): 2 truncates cleaned up [ 354.281408][ T6700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 354.606359][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 355.038639][ T6712] 9pnet_fd: Insufficient options for proto=fd [ 358.154003][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 360.983159][ T6770] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 362.385746][ T6779] futex_wake_op: syz.2.510 tries to shift op by 144; fix this program [ 362.397619][ T6780] loop2: detected capacity change from 0 to 256 [ 363.054158][ T6780] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 363.100371][ T26] audit: type=1800 audit(1786315704.613:73): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.510" name="file1" dev="loop2" ino=1048636 res=0 errno=0 [ 363.123533][ T6778] bio_check_eod: 20739 callbacks suppressed [ 363.123549][ T6778] syz.2.510: attempt to access beyond end of device [ 363.123549][ T6778] loop2: rw=0, sector=184, nr_sectors = 120 limit=256 [ 363.165668][ T6778] syz.2.510: attempt to access beyond end of device [ 363.165668][ T6778] loop2: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 363.180193][ T6778] syz.2.510: attempt to access beyond end of device [ 363.180193][ T6778] loop2: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 363.193974][ T6778] syz.2.510: attempt to access beyond end of device [ 363.193974][ T6778] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 363.207805][ T6778] syz.2.510: attempt to access beyond end of device [ 363.207805][ T6778] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 363.220935][ T6778] syz.2.510: attempt to access beyond end of device [ 363.220935][ T6778] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 363.234082][ T6778] syz.2.510: attempt to access beyond end of device [ 363.234082][ T6778] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 363.247238][ T6778] syz.2.510: attempt to access beyond end of device [ 363.247238][ T6778] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 363.260440][ T6778] syz.2.510: attempt to access beyond end of device [ 363.260440][ T6778] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 363.273593][ T6778] syz.2.510: attempt to access beyond end of device [ 363.273593][ T6778] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 363.511068][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 364.213360][ T41] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.107405][ T6811] PKCS7: Unknown OID: [4] 0.0 [ 366.112504][ T6811] PKCS7: Only support pkcs7_signedData type [ 366.132781][ T6811] xt_policy: output policy not valid in PREROUTING and INPUT [ 366.266860][ C0] hrtimer: interrupt took 37061 ns [ 366.660670][ T6793] fido_id[6793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 368.291216][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 368.300423][ T6825] device bridge_slave_1 left promiscuous mode [ 368.307408][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.041220][ T6825] device bridge_slave_0 left promiscuous mode [ 369.047468][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.948707][ T6894] db_root: cannot be changed because it's in use [ 377.090577][ T6894] se_device not configured yet, cannot port link [ 377.489657][ T26] audit: type=1804 audit(1786315717.900:74): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.523" name="bus" dev="ramfs" ino=42763 res=1 errno=0 [ 378.755664][ T26] audit: type=1804 audit(1786315717.919:75): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.523" name="bus" dev="ramfs" ino=42763 res=1 errno=0 [ 380.766254][ T6886] ./file0: Can't open blockdev [ 385.849239][ T6963] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 388.180172][ T6984] futex_wake_op: syz.2.536 tries to shift op by 144; fix this program [ 388.251283][ T6984] loop2: detected capacity change from 0 to 256 [ 389.293766][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.300474][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.315638][ T6984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 389.366899][ T26] audit: type=1800 audit(1786315728.853:76): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.536" name="file1" dev="loop2" ino=1048637 res=0 errno=0 [ 389.389878][ T6982] bio_check_eod: 2239 callbacks suppressed [ 389.389891][ T6982] syz.2.536: attempt to access beyond end of device [ 389.389891][ T6982] loop2: rw=0, sector=184, nr_sectors = 120 limit=256 [ 389.431323][ T6982] syz.2.536: attempt to access beyond end of device [ 389.431323][ T6982] loop2: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 389.446106][ T6982] syz.2.536: attempt to access beyond end of device [ 389.446106][ T6982] loop2: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 389.459982][ T6982] syz.2.536: attempt to access beyond end of device [ 389.459982][ T6982] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 389.473453][ T6982] syz.2.536: attempt to access beyond end of device [ 389.473453][ T6982] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 389.486811][ T6982] syz.2.536: attempt to access beyond end of device [ 389.486811][ T6982] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 389.500180][ T6982] syz.2.536: attempt to access beyond end of device [ 389.500180][ T6982] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 389.513975][ T6982] syz.2.536: attempt to access beyond end of device [ 389.513975][ T6982] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 389.527310][ T6982] syz.2.536: attempt to access beyond end of device [ 389.527310][ T6982] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 389.540583][ T6982] syz.2.536: attempt to access beyond end of device [ 389.540583][ T6982] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 390.008699][ T26] audit: type=1804 audit(1786315729.443:77): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.540" name="bus" dev="ramfs" ino=43186 res=1 errno=0 [ 390.239793][ T26] audit: type=1804 audit(1786315729.471:78): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.540" name="bus" dev="ramfs" ino=43186 res=1 errno=0 [ 392.176993][ T4317] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.234201][ T4317] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.319398][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.544'. [ 394.328786][ T7018] device bridge_slave_1 left promiscuous mode [ 394.338046][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.366797][ T7018] device bridge_slave_0 left promiscuous mode [ 394.416432][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.183294][ T7010] fido_id[7010]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 396.288323][ T7029] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 398.218854][ T7042] loop3: detected capacity change from 0 to 32768 [ 398.236229][ T7042] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 398.292563][ T7044] db_root: cannot be changed because it's in use [ 398.313543][ T6917] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 398.399963][ T7044] se_device not configured yet, cannot port link [ 398.550582][ T7055] loop5: detected capacity change from 0 to 512 [ 398.570919][ T7055] FAT-fs (loop5): Directory bread(block 199916) failed [ 398.578764][ T7055] FAT-fs (loop5): Directory bread(block 199917) failed [ 398.585980][ T7055] FAT-fs (loop5): Directory bread(block 199918) failed [ 398.593160][ T7055] FAT-fs (loop5): Directory bread(block 199919) failed [ 398.601048][ T7055] FAT-fs (loop5): Directory bread(block 199920) failed [ 398.608271][ T7055] FAT-fs (loop5): Directory bread(block 199921) failed [ 398.616370][ T7055] FAT-fs (loop5): Directory bread(block 199922) failed [ 398.623525][ T7055] FAT-fs (loop5): Directory bread(block 199923) failed [ 398.714872][ T7055] FAT-fs (loop5): FAT read failed (blocknr 128) [ 400.288324][ T7075] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 400.931668][ T7078] block device autoloading is deprecated and will be removed. [ 407.236190][ T4290] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 407.912118][ T7135] 9pnet_fd: Insufficient options for proto=fd [ 408.044564][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 408.050855][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 408.261294][ T7127] ceph: No mds server is up or the cluster is laggy [ 408.529779][ T41] libceph: connect (1)[c::]:6789 error -101 [ 409.384051][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 411.352772][ T7156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.574'. [ 411.361832][ T7156] netlink: 84 bytes leftover after parsing attributes in process `syz.2.574'. [ 413.411024][ T7175] lo speed is unknown, defaulting to 1000 [ 414.101967][ T7180] fuse: Bad value for 'fd' [ 414.578410][ T7195] 9pnet_fd: Insufficient options for proto=fd [ 415.479460][ T7193] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 417.995708][ T7220] syz.2.587 sent an empty control message without MSG_MORE. [ 420.072462][ T7252] lo speed is unknown, defaulting to 1000 [ 423.127268][ T7277] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 425.995762][ T7311] sctp: failed to load transform for md5: -2 [ 428.293015][ T7335] loop3: detected capacity change from 0 to 128 [ 432.486794][ T7363] loop3: detected capacity change from 0 to 512 [ 432.989589][ T7363] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 433.002414][ T7363] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 433.013552][ T7363] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.616: Corrupt directory, running e2fsck is recommended [ 433.030536][ T7363] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 433.039141][ T7363] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.616: corrupted in-inode xattr [ 433.052215][ T7363] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.616: couldn't read orphan inode 15 (err -117) [ 433.064779][ T7363] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 433.076012][ T7363] EXT4-fs (loop3): unmounting filesystem. [ 434.852320][ T4290] Bluetooth: hci2: unexpected event for opcode 0x200c [ 437.828242][ T7406] netlink: 44 bytes leftover after parsing attributes in process `syz.3.626'. [ 437.837233][ T7406] netlink: 84 bytes leftover after parsing attributes in process `syz.3.626'. [ 438.359772][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 438.371297][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 438.381218][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 438.392761][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 438.403498][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 438.419003][ T7412] 9pnet_virtio: no channels available for device syz [ 439.516634][ T7424] loop4: detected capacity change from 0 to 32768 [ 439.565900][ T7424] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 439.779438][ T7057] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 445.253540][ T7473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.639'. [ 445.262684][ T7473] netlink: 84 bytes leftover after parsing attributes in process `syz.4.639'. [ 446.436738][ T7482] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 450.085235][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 451.412069][ T7535] loop4: detected capacity change from 0 to 1024 [ 455.063428][ T7561] PKCS7: Unknown OID: [4] 0.0 [ 455.068168][ T7561] PKCS7: Only support pkcs7_signedData type [ 455.083186][ T7561] xt_policy: output policy not valid in PREROUTING and INPUT [ 455.679383][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.685869][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.246101][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 457.612440][ T7557] 9pnet_fd: Insufficient options for proto=fd [ 457.780988][ T7583] Cannot find map_set index 135 as target [ 459.363238][ T7594] input: syz0 as /devices/virtual/input/input13 [ 460.821145][ T7607] tmpfs: Unknown parameter 'usrquota' [ 465.681567][ T7647] netlink: 'syz.5.666': attribute type 13 has an invalid length. [ 465.753846][ T7649] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 465.839091][ T7653] IPVS: rr: FWM 3 0x00000003 - no destination available [ 465.908453][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 465.935101][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.960627][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.692133][ T7685] loop3: detected capacity change from 0 to 128 [ 467.718420][ T7685] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 467.730804][ T7685] hpfs: filesystem error: improperly stopped [ 467.736932][ T7685] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 467.744841][ T7685] hpfs: You really don't want any checks? You are crazy... [ 467.753063][ T7685] hpfs: Code page index out of array [ 467.758442][ T7685] hpfs: code page support is disabled [ 467.770703][ T7685] hpfs: hpfs_map_4sectors(): unaligned read [ 467.779448][ T7685] hpfs: hpfs_map_4sectors(): unaligned read [ 467.785628][ T7685] hpfs: filesystem error: unable to find root dir [ 467.964387][ T7685] hpfs: hpfs_map_sector(): read error [ 467.971944][ T7685] hpfs: hpfs_map_sector(): read error [ 471.476003][ T7686] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 472.829892][ T7720] team_slave_1: Caught tx_queue_len zero misconfig [ 473.705222][ T7728] input: syz0 as /devices/virtual/input/input14 [ 474.417465][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.681'. [ 474.463952][ T7735] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 475.913482][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.683'. [ 477.633073][ T7756] siw: device registration error -23 [ 478.243438][ T7751] loop3: detected capacity change from 0 to 256 [ 478.301389][ T7751] exfat: Deprecated parameter 'utf8' [ 480.391808][ T7767] loop0: detected capacity change from 0 to 1024 [ 481.911505][ T7751] exFAT-fs (loop3): bogus number of FAT structure [ 482.399195][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.687'. [ 482.531731][ T7751] exFAT-fs (loop3): failed to read boot sector [ 483.566942][ T7751] exFAT-fs (loop3): failed to recognize exfat type [ 486.950608][ T7799] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 486.959407][ T7799] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 486.982664][ T7800] input: syz0 as /devices/virtual/input/input15 [ 489.548772][ T7799] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 490.020990][ T7810] smc: net device vlan1 applied user defined pnetid SYZ2 [ 493.609099][ T7834] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 493.633397][ T7837] loop3: detected capacity change from 0 to 512 [ 493.841310][ T7837] EXT4-fs error (device loop3): __ext4_fill_super:5465: inode #2: comm syz.3.702: inode has both inline data and extents flags [ 493.905167][ T7837] EXT4-fs (loop3): get root inode failed [ 493.945003][ T7837] EXT4-fs (loop3): mount failed [ 494.543623][ T4317] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 495.100512][ T4317] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 495.126823][ T4317] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 495.136455][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.147029][ T4317] usb 6-1: Product: syz [ 495.153049][ T4317] usb 6-1: Manufacturer: syz [ 495.157776][ T4317] usb 6-1: SerialNumber: syz [ 495.204666][ T4317] usb 6-1: config 0 descriptor?? [ 495.218719][ T7838] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 495.234668][ T4317] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 495.253272][ T7850] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 498.547055][ T5558] usb 6-1: USB disconnect, device number 2 [ 500.014028][ T41] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 500.634740][ T41] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.755199][ T7897] input: syz0 as /devices/virtual/input/input16 [ 503.342686][ T7914] 9pnet_fd: Insufficient options for proto=fd [ 505.141974][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 509.574733][ T41] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 509.682232][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 509.700129][ T41] usb 3-1: can't set config #1, error -32 [ 510.771637][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.782115][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.791026][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.824468][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.857197][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 510.864702][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.151682][ T7956] lo speed is unknown, defaulting to 1000 [ 511.456227][ T5560] usb 3-1: USB disconnect, device number 2 [ 512.163342][ T7964] 9pnet_fd: p9_fd_create_tcp (7964): problem connecting socket to 127.0.0.1 [ 514.115108][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 514.222110][ T7978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.725'. [ 515.230641][ T4423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.387195][ T4423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.606230][ T4423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.794234][ T7956] chnl_net:caif_netlink_parms(): no params data found [ 516.380873][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 516.586990][ T4423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.491218][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.567856][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.633361][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 518.671695][ T7956] device bridge_slave_0 entered promiscuous mode [ 518.897215][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.917172][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.985454][ T7956] device bridge_slave_1 entered promiscuous mode [ 519.725330][ T7956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.106272][ T7956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.188378][ T8023] Bluetooth: MGMT ver 1.22 [ 520.877296][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 521.223547][ T4423] tipc: Left network mode [ 521.595782][ T7956] team0: Port device team_slave_0 added [ 522.860591][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.867003][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.879998][ T7956] team0: Port device team_slave_1 added [ 522.909416][ T8039] 9pnet_fd: Insufficient options for proto=fd [ 522.945528][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.163880][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.245266][ T7956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.417270][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.427692][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.520394][ T7956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.651025][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.760739][ T7956] device hsr_slave_0 entered promiscuous mode [ 524.793955][ T7956] device hsr_slave_1 entered promiscuous mode [ 528.720560][ T7956] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 528.769560][ T7956] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 529.528877][ T7956] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 529.555730][ T7956] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 529.831844][ T4423] device hsr_slave_0 left promiscuous mode [ 529.861958][ T4423] device hsr_slave_1 left promiscuous mode [ 529.926462][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.933941][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.967761][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.980962][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.996374][ T4423] device bridge_slave_1 left promiscuous mode [ 530.004060][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.015838][ T4423] device bridge_slave_0 left promiscuous mode [ 530.022089][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.077240][ T26] audit: type=1326 audit(1786315858.686:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5c219de99 code=0x0 [ 530.193315][ T4423] device veth1_macvtap left promiscuous mode [ 530.454687][ T4423] device veth0_macvtap left promiscuous mode [ 530.474958][ T4423] device veth0_vlan left promiscuous mode [ 534.359803][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 534.639503][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 535.314728][ T4423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.500887][ T4423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.820969][ T4423] bond0 (unregistering): Released all slaves [ 536.077409][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.094014][ T7956] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.101782][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 536.123766][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.155306][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 536.167718][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 536.184020][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.191192][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.206853][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 536.241656][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 536.253988][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 536.269074][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.276276][ T5327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.295040][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 536.320315][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 536.339959][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 536.360507][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 536.383306][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 536.398578][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.408779][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 536.417611][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 536.438229][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 536.455004][ T7956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.476533][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 536.496477][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 536.505762][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.820176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.827824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.854396][ T7956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.272144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 537.288575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.326111][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.336952][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.354050][ T7956] device veth0_vlan entered promiscuous mode [ 537.367288][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.377105][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.397481][ T7956] device veth1_vlan entered promiscuous mode [ 537.423599][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 537.435017][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 537.449892][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 537.460829][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 537.474701][ T7956] device veth0_macvtap entered promiscuous mode [ 537.487409][ T7956] device veth1_macvtap entered promiscuous mode [ 537.516449][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.529278][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.539885][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.551495][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.562179][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.572994][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.582899][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.593595][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.604695][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.620184][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 537.629423][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 537.638119][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.647888][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.658277][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.670023][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.681258][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.692167][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.706335][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.716940][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.726875][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.738354][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.749561][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.765133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.774073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.785670][ T7956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.796958][ T7956] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.806833][ T7956] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.815549][ T7956] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.877073][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.893867][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.903704][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 537.944880][ T5327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.953466][ T5327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.966761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.430771][ T8212] netlink: 72 bytes leftover after parsing attributes in process `syz.3.768'. [ 541.484811][ T8205] loop8: detected capacity change from 0 to 7 [ 541.571864][ T8205] Dev loop8: unable to read RDB block 7 [ 541.577881][ T8205] loop8: unable to read partition table [ 541.583792][ T8205] loop8: partition table beyond EOD, truncated [ 541.590089][ T8205] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 541.909259][ T8235] input: syz0 as /devices/virtual/input/input17 [ 544.542728][ T8264] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.405741][ T8335] ./file0: Can't open blockdev [ 558.779163][ T8364] 9pnet_fd: Insufficient options for proto=fd [ 562.518751][ T8395] raw_sendmsg: syz.0.794 forgot to set AF_INET. Fix it! [ 562.599323][ T4290] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 567.521126][ T8413] 9pnet_fd: Insufficient options for proto=fd [ 573.440543][ T8448] loop4: detected capacity change from 0 to 1024 [ 573.470818][ T8448] EXT4-fs: Invalid want_extra_isize 7 [ 578.644084][ T4451] libceph: connect (1)[c::]:6789 error -101 [ 578.723307][ T4451] libceph: mon0 (1)[c::]:6789 connect error [ 578.853715][ T8479] ceph: No mds server is up or the cluster is laggy [ 578.879780][ T4451] libceph: connect (1)[c::]:6789 error -101 [ 579.005667][ T4451] libceph: mon0 (1)[c::]:6789 connect error [ 581.060801][ T8491] [ 581.063367][ T8491] ====================================================== [ 581.070378][ T8491] WARNING: possible circular locking dependency detected [ 581.077413][ T8491] syzkaller #0 Not tainted [ 581.081841][ T8491] ------------------------------------------------------ [ 581.088864][ T8491] syz.5.816/8491 is trying to acquire lock: [ 581.094758][ T8491] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 581.104629][ T8491] [ 581.104629][ T8491] but task is already holding lock: [ 581.112003][ T8491] ffff88805556b900 (&sb->s_type->i_mutex_key#28){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 581.121956][ T8491] [ 581.121956][ T8491] which lock already depends on the new lock. [ 581.121956][ T8491] [ 581.132373][ T8491] [ 581.132373][ T8491] the existing dependency chain (in reverse order) is: [ 581.141401][ T8491] [ 581.141401][ T8491] -> #2 (&sb->s_type->i_mutex_key#28){++++}-{3:3}: [ 581.150221][ T8491] down_write+0x36/0x60 [ 581.154986][ T8491] configfs_depend_item_unlocked+0x14f/0x430 [ 581.161517][ T8491] usbg_make_tpg+0x1f3/0x580 [ 581.166715][ T8491] target_fabric_make_tpg+0xa0/0x6d0 [ 581.172617][ T8491] configfs_mkdir+0x511/0x9e0 [ 581.177839][ T8491] vfs_mkdir+0x386/0x570 [ 581.182621][ T8491] do_mkdirat+0x1d8/0x440 [ 581.187484][ T8491] __x64_sys_mkdir+0x6a/0x80 [ 581.192694][ T8491] do_syscall_64+0x4c/0xa0 [ 581.197692][ T8491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.204184][ T8491] [ 581.204184][ T8491] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 581.212028][ T8491] __mutex_lock+0x12d/0xae0 [ 581.217078][ T8491] tcm_set_name+0x26/0x90 [ 581.221956][ T8491] function_make+0x195/0x350 [ 581.227150][ T8491] configfs_mkdir+0x511/0x9e0 [ 581.232372][ T8491] vfs_mkdir+0x386/0x570 [ 581.237146][ T8491] do_mkdirat+0x1d8/0x440 [ 581.242004][ T8491] __x64_sys_mkdir+0x6a/0x80 [ 581.247126][ T8491] do_syscall_64+0x4c/0xa0 [ 581.252092][ T8491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.258526][ T8491] [ 581.258526][ T8491] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 581.266800][ T8491] __lock_acquire+0x2d18/0x7c40 [ 581.272226][ T8491] lock_acquire+0x1bb/0x4a0 [ 581.277268][ T8491] __mutex_lock+0x12d/0xae0 [ 581.282350][ T8491] configfs_rmdir+0x638/0x980 [ 581.287653][ T8491] vfs_rmdir+0x34e/0x4a0 [ 581.292438][ T8491] do_rmdir+0x29a/0x5c0 [ 581.297139][ T8491] __x64_sys_rmdir+0x45/0x50 [ 581.302265][ T8491] do_syscall_64+0x4c/0xa0 [ 581.307223][ T8491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.315224][ T8491] [ 581.315224][ T8491] other info that might help us debug this: [ 581.315224][ T8491] [ 581.325469][ T8491] Chain exists of: [ 581.325469][ T8491] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#28 [ 581.325469][ T8491] [ 581.340187][ T8491] Possible unsafe locking scenario: [ 581.340187][ T8491] [ 581.347644][ T8491] CPU0 CPU1 [ 581.353026][ T8491] ---- ---- [ 581.358407][ T8491] lock(&sb->s_type->i_mutex_key#28); [ 581.363897][ T8491] lock(&opts->dep_lock); [ 581.370936][ T8491] lock(&sb->s_type->i_mutex_key#28); [ 581.378953][ T8491] lock(gadget_subsys.su_mutex); [ 581.383985][ T8491] [ 581.383985][ T8491] *** DEADLOCK *** [ 581.383985][ T8491] [ 581.392128][ T8491] 3 locks held by syz.5.816/8491: [ 581.397152][ T8491] #0: ffff888146a84460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 581.406447][ T8491] #1: ffff888075d05590 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 581.417274][ T8491] #2: ffff88805556b900 (&sb->s_type->i_mutex_key#28){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 581.427430][ T8491] [ 581.427430][ T8491] stack backtrace: [ 581.433334][ T8491] CPU: 1 PID: 8491 Comm: syz.5.816 Not tainted syzkaller #0 [ 581.440633][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 581.450710][ T8491] Call Trace: [ 581.454058][ T8491] [ 581.457077][ T8491] dump_stack_lvl+0x188/0x24e [ 581.461840][ T8491] ? load_image+0x410/0x410 [ 581.466373][ T8491] ? show_regs_print_info+0x12/0x12 [ 581.471595][ T8491] ? print_circular_bug+0x12b/0x1a0 [ 581.476812][ T8491] check_noncircular+0x296/0x330 [ 581.481780][ T8491] ? add_chain_block+0x9b0/0x9b0 [ 581.486735][ T8491] ? lockdep_lock+0xf1/0x1f0 [ 581.491349][ T8491] ? _find_first_zero_bit+0xd2/0x100 [ 581.496748][ T8491] __lock_acquire+0x2d18/0x7c40 [ 581.501627][ T8491] ? mark_lock+0x94/0x320 [ 581.505980][ T8491] ? verify_lock_unused+0x140/0x140 [ 581.511202][ T8491] ? __lock_acquire+0x138a/0x7c40 [ 581.516254][ T8491] ? verify_lock_unused+0x140/0x140 [ 581.521476][ T8491] lock_acquire+0x1bb/0x4a0 [ 581.526000][ T8491] ? configfs_rmdir+0x638/0x980 [ 581.530863][ T8491] ? __might_sleep+0xd0/0xd0 [ 581.535530][ T8491] ? read_lock_is_recursive+0x10/0x10 [ 581.540911][ T8491] __mutex_lock+0x12d/0xae0 [ 581.545411][ T8491] ? configfs_rmdir+0x638/0x980 [ 581.550264][ T8491] ? configfs_rmdir+0x638/0x980 [ 581.555116][ T8491] ? dput+0x37/0x1d0 [ 581.558999][ T8491] ? mutex_lock_nested+0x10/0x10 [ 581.563923][ T8491] ? __lock_acquire+0x7c40/0x7c40 [ 581.568956][ T8491] ? lockref_put_or_lock+0x6e/0xb0 [ 581.574087][ T8491] ? dput+0x37/0x1d0 [ 581.578025][ T8491] ? dput+0x37/0x1d0 [ 581.581975][ T8491] configfs_rmdir+0x638/0x980 [ 581.586650][ T8491] vfs_rmdir+0x34e/0x4a0 [ 581.590895][ T8491] do_rmdir+0x29a/0x5c0 [ 581.595055][ T8491] ? d_delete_notify+0x150/0x150 [ 581.599981][ T8491] ? getname_flags+0x206/0x500 [ 581.604742][ T8491] __x64_sys_rmdir+0x45/0x50 [ 581.609328][ T8491] do_syscall_64+0x4c/0xa0 [ 581.613742][ T8491] ? clear_bhb_loop+0x60/0xb0 [ 581.618412][ T8491] ? clear_bhb_loop+0x60/0xb0 [ 581.623077][ T8491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.628975][ T8491] RIP: 0033:0x7ff5c219de99 [ 581.633448][ T8491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.653117][ T8491] RSP: 002b:00007ff5c3002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 581.661598][ T8491] RAX: ffffffffffffffda RBX: 00007ff5c2425fa0 RCX: 00007ff5c219de99 [ 581.669580][ T8491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 581.677565][ T8491] RBP: 00007ff5c2233eaf R08: 0000000000000000 R09: 0000000000000000 [ 581.685545][ T8491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.693524][ T8491] R13: 00007ff5c2426038 R14: 00007ff5c2425fa0 R15: 00007ffe96244da8 [ 581.701516][ T8491] [ 582.530628][ T8491] printk: console [ttyGS0] disabled [ 588.852492][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.858876][ T1280] ieee802154 phy1 wpan1: encryption failed: -22