last executing test programs: 25.879457131s ago: executing program 4 (id=319): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) bind$rds(r4, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) exit(0x1ff) syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 23.598144459s ago: executing program 4 (id=322): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@orlov}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@nolazytime}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$eJzs3M1vFOUfAPDvTOkbFFr4kZ/yolTR2Ii2tKBy8KBGEy4aEz3gsZZKkAKG1kQIkWIMHo1/AXo0MfHkRS+aqFEvarzq3ZgQwwXUxNTM7kx32+5ut1torfv5JNt9nplnXr7PzDP77DzbCaBtDWZ/koi+iPg5IvrL2YUFBstvN69fnPjj+sWJJObmXvg9KZW7cf3iRFG0WG5LnhlKI9K3k9hTY7vT5y+cGp+amjyX50dmTr82Mn3+wsMnT4+fmDwxeWbsyJHDh0Yfe3TskabiuLTM/CyuG7vfPLt319GX3nt2Yi5e/vajbH/78vnVcZQNNLXdRgZjMOZylaldpb/3r3rt/y5boze683SyafHcy2u/QzSlIyKyw9VZav/90RGVg9cfz7w1n/lynXYQuG2yz6btS6Z25O/p/OcX8F+UaOPQpopP/Oz7b/Fay/7Herv2ZPZ3shT/zfz1/XPlukmz77IDEV299Zf/f41pPZXkXP8y2++rdLauRs37EA0kTZcEAJj3edb/eahW/y9d0LfZlo+hDETEgYjYERH/i4idkc6XuSMi7lzh9gcX5Zf2f35s0Ptavaz/93g+tlW8ynOKuJL53NZS/J3JKyenJg/mdTIUnd1ZfrTBNr54+qd3683L4j82++fV4pVtP3uvlEh/29S9cJnj4zPjqwh5gWuXI4lNteJP5kcCshrYFRG7W1h/VmcnH/xwb5betmXp/OXjb2DJONPKzX0Q8UD5+M/GovgLSXlL9cYnR3piavLgSHFWLPXdD1eer853VqUXxN/TXEw9rQZbw7XLEZtrnv95/EUzKMZrp/P8V31Nb+PKL+/U/U6z9PgncWy2ukR+/vdWqi07/7uSF0vprnzaG+MzM+dGIz7LJyyYPlZZW5EvymfxD+1fGH/5e3GaXeP+fj9fbk9EZCfxXRFxd0Tsy/f9noi4NyL2N4j/m6fue7VxDbV4/t8CWfzHGx3/iIGkery+hUTHqa8/rbf95q5/h0upoXxK9fWvq856m93B1dYfAAAAbARpaQw6SYcjYtFtxtgZm9Ops9MzBwbj9TPHy7+VH4jOtLjT1V91P3Q0vzdc5McW5Q9FxPbSL416S/nhibNTW9cpZqBsS1X7L18L0nR4uDzv14713jvgtlvROFr1j84+/uTW7wywpm7BODqwQWn/0L60f2hf2j+0r1rt/1LEzXXYFWCNtfr5v/gHA8DGo/8Pban0ZFbtH9qX9g9taem/xOePW8muCa3/y//UjqOreWLA7U/M9be+eNSfNbvyFXY0V7h4+kXTa26ucBJRhJM2iKtGItLKlL/yp0mWpnSWy3Q1v6trn0iXLfPEcrXRuaJnYvTUqI19eaI7Ippdz6U1q9XiCpF4yiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCh/RMAAP//3Wzjzw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x1d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0xfff, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffa}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x80003ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r8) 21.071698894s ago: executing program 4 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x194, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x17}, 0x0, &(0x7f00000000c0), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x20000040) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000003c0)={0x6}) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast1, 0x4e20, 0x9, 0x4e24, 0x2, 0x2, 0x0, 0xa0, 0x4}, {0x3d46, 0x4, 0xfffffffffffffff7, 0x6, 0x80, 0x1, 0x98e, 0x5}, {0x8, 0xfffffffffffffff9, 0x0, 0x3}, 0x2, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3503, 0x0, 0x2, 0x5, 0xfae, 0x101, 0xc}}, 0xe4) connect$pppoe(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 15.768893579s ago: executing program 3 (id=334): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='16', 0x2) 15.752155489s ago: executing program 2 (id=335): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e9f49a6a81e72a6b"}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x1, 0x14) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 12.923456401s ago: executing program 4 (id=336): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(r1, 0x0, 0x4001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open_tree(0xffffffffffffff9c, 0x0, 0x80001) 12.229662698s ago: executing program 3 (id=338): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(r1, 0x0, 0x4001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open_tree(0xffffffffffffff9c, 0x0, 0x80001) 11.327671582s ago: executing program 4 (id=340): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x4441, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC], 0x0, 0x31d, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r2, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) waitid(0x2, r2, 0x0, 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x306c1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) 11.106810327s ago: executing program 3 (id=341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x3501, 0x4, 0x0, 0x0, 0xfffffff7}]}]}, 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) r6 = socket$inet_udp(0x2, 0x2, 0x0) getrlimit(0xd, 0x0) sendto$inet(r6, &(0x7f0000000500)="1234", 0x4, 0x0, &(0x7f0000000580)={0x2, 0x1234, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$TIOCGSOFTCAR(r8, 0x5419, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="a7aa823d3d55a9edc65c1ce43aad9411a507972e8b7d74980e2842849380c9b9b67a002a744bb8bc4d9ff82c860b", 0x2e, 0x20000800, 0x0, 0x0) mmap(&(0x7f00004ad000/0x1000)=nil, 0x1000, 0xa, 0x2010, r3, 0xbe9f9000) 10.548559761s ago: executing program 2 (id=342): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 10.347696257s ago: executing program 0 (id=343): io_setup(0x8, &(0x7f0000001d80)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x17}}]}}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) io_pgetevents(r0, 0x3, 0x0, &(0x7f0000000000), &(0x7f0000001e40), 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='blkio.reset_stats\x00', 0x2, 0x0) getpid() r8 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000040)=0xfffc, 0x4) sendto$inet6(r8, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r8, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) 8.656146209s ago: executing program 3 (id=344): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e9f49a6a81e72a6b"}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x1, 0x14) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 8.358712437s ago: executing program 4 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001200)={{r4, 0x0, 0x3, [0x218358d3, 0x3]}, {0x80000000, 0x0, 0x1, [0x4c198b8a, 0x3]}, 0x2, [0x7ff, 0x63]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) syz_read_part_table(0x1075, &(0x7f0000001080)="$eJzs0MFJBEEQBdDf7Mzsjh48G4FpmJi4ghF49WAoXg1JECzp3h2MQPfy3qEofhXV0OGi1vf5Lkk9Jmt2IzokU5J9kpfzVt2kDz8r+ap9VVVa5iRLP5GMZNSqNvru++Ftmg+5farpNOp53W9Pt16WY0vWq+uRfOSY1yV5HsN2Wpuy29r8njmb/+OPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCv/QQAAP//PXovTQ==") 8.357587367s ago: executing program 2 (id=346): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000300)='./config\x00') 8.212025621s ago: executing program 1 (id=347): fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x2, 0x4) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000900), 0x6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r3 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x210002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a00010027bd7000fbdbdf258100800e"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000001200)=0xd4, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) 8.100103174s ago: executing program 0 (id=348): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e9f49a6a81e72a6b"}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x1, 0x14) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 7.182927297s ago: executing program 3 (id=349): socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x3062a650, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, 0x0, 0x0) unshare(0x2030b00) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 5.520454229s ago: executing program 1 (id=350): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000240)='./sys\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r5, r6, 0x0) 5.420155922s ago: executing program 2 (id=351): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(r1, 0x0, 0x4001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open_tree(0xffffffffffffff9c, 0x0, 0x80001) 4.535983984s ago: executing program 0 (id=352): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e9f49a6a81e72a6b"}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x1, 0x14) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 4.486364375s ago: executing program 1 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r5}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x7, 0x1, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x40, 0x7800, 0x80000000, 0x7f}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xea, 0xf, 0x80000000, 0x10, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f10, 0x80, 0x1, 0xf9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x20, 0x8, 0xecf00, 0x4, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0x13, 0x29, [@broadcast, @multicast2, @local, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.3020413s ago: executing program 0 (id=354): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003380)={0x2020}, 0x2020) r5 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x12\x9b\xf4\x01\x9f^\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xd7n\x97]||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xcdq#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3', 0x5) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r6, 0x0, 0x0) execveat(r5, 0x0, 0x0, 0x0, 0x1000) 3.490417831s ago: executing program 1 (id=355): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f00000001c0)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', &(0x7f00000004c0), 0x98008, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000018000100000000000100d000001d010000080009", @ANYRESOCT=r0, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r4], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008030) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 3.356490425s ago: executing program 2 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r8, 0x0) 2.115699686s ago: executing program 0 (id=357): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 1.988092329s ago: executing program 1 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r5}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x7, 0x1, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x40, 0x7800, 0x80000000, 0x7f}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9, 0x5}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c804}, 0x2008c010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xea, 0xf, 0x80000000, 0x10, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f10, 0x80, 0x1, 0xf9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x20, 0x8, 0xecf00, 0x4, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0x13, 0x29, [@broadcast, @multicast2, @local, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.063314873s ago: executing program 2 (id=359): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e9f49a6a81e72a6b"}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x1, 0x14) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 114.101887ms ago: executing program 0 (id=360): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 99.825067ms ago: executing program 1 (id=361): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4a, &(0x7f0000000180)={0x0, 0x32}, 0x1, 0x0, 0x0, 0xf6a4e2cdb9663961}, 0x2000c890) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa909, 0x1f480, 0x2, 0x254}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x400) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x4', 0xc) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4) 0s ago: executing program 3 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r5}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x7, 0x1, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x40, 0x7800, 0x80000000, 0x7f}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9, 0x5}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c804}, 0x2008c010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xea, 0xf, 0x80000000, 0x10, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f10, 0x80, 0x1, 0xf9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x20, 0x8, 0xecf00, 0x4, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0x13, 0x29, [@broadcast, @multicast2, @local, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 59.567182][ T4259] cgroup: Unknown subsys name 'net' [ 59.668762][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.951226][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.266841][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.272974][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.283776][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.284204][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.291852][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.300514][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.306193][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.313467][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.320413][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.334153][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.335009][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.342417][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.349631][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.356378][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.364909][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.370090][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.377176][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.391344][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.392721][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.399528][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.406759][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.420497][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.441209][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.449991][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.450067][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.465861][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.473486][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.481196][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.481331][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.496549][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.759249][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 62.897466][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 62.947459][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.955583][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.964052][ T4273] device bridge_slave_0 entered promiscuous mode [ 62.974721][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 63.000498][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.010352][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.019752][ T4273] device bridge_slave_1 entered promiscuous mode [ 63.056876][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 63.124961][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.151301][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.166892][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.175168][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.182810][ T4277] device bridge_slave_0 entered promiscuous mode [ 63.216990][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 63.227038][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.234272][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.242000][ T4277] device bridge_slave_1 entered promiscuous mode [ 63.262343][ T4273] team0: Port device team_slave_0 added [ 63.270621][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.278047][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.285859][ T4279] device bridge_slave_0 entered promiscuous mode [ 63.315840][ T4273] team0: Port device team_slave_1 added [ 63.321777][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.328981][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.336732][ T4279] device bridge_slave_1 entered promiscuous mode [ 63.352644][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.376830][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.419228][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.426412][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.455463][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.470661][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.478106][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.486324][ T4282] device bridge_slave_0 entered promiscuous mode [ 63.501420][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.508629][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.516910][ T4282] device bridge_slave_1 entered promiscuous mode [ 63.525841][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.535494][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.542447][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.569087][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.588349][ T4277] team0: Port device team_slave_0 added [ 63.603704][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.633696][ T4277] team0: Port device team_slave_1 added [ 63.646857][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.661426][ T4279] team0: Port device team_slave_0 added [ 63.684934][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.707947][ T4279] team0: Port device team_slave_1 added [ 63.713968][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.721050][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.728975][ T4272] device bridge_slave_0 entered promiscuous mode [ 63.749438][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.756484][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.782549][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.800724][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.808200][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.840409][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.872611][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.879765][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.888170][ T4272] device bridge_slave_1 entered promiscuous mode [ 63.898495][ T4282] team0: Port device team_slave_0 added [ 63.910531][ T4273] device hsr_slave_0 entered promiscuous mode [ 63.917327][ T4273] device hsr_slave_1 entered promiscuous mode [ 63.928436][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.937620][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.966667][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.985193][ T4282] team0: Port device team_slave_1 added [ 64.001153][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.008583][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.034512][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.068049][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.086091][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.115897][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.122901][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.149399][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.185685][ T4279] device hsr_slave_0 entered promiscuous mode [ 64.192523][ T4279] device hsr_slave_1 entered promiscuous mode [ 64.199529][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.207630][ T4279] Cannot create hsr debugfs directory [ 64.217512][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.227231][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.253515][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.279301][ T4277] device hsr_slave_0 entered promiscuous mode [ 64.285987][ T4277] device hsr_slave_1 entered promiscuous mode [ 64.292397][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.300127][ T4277] Cannot create hsr debugfs directory [ 64.326250][ T4272] team0: Port device team_slave_0 added [ 64.356860][ T4272] team0: Port device team_slave_1 added [ 64.417411][ T4282] device hsr_slave_0 entered promiscuous mode [ 64.424228][ T4282] device hsr_slave_1 entered promiscuous mode [ 64.430623][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.438362][ T4282] Cannot create hsr debugfs directory [ 64.453877][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 64.460084][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 64.468727][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.476190][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.502285][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.520409][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.527425][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.553532][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 64.559719][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 64.565952][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 64.572935][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.704765][ T4272] device hsr_slave_0 entered promiscuous mode [ 64.711402][ T4272] device hsr_slave_1 entered promiscuous mode [ 64.718687][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.726317][ T4272] Cannot create hsr debugfs directory [ 64.856611][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.886849][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.895501][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.907962][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.971901][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.983831][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.004794][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.022503][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.066992][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.097815][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.121601][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.139853][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.148371][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.178134][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.188881][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.210117][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.239715][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.251573][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.272610][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.283822][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.292977][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.306604][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.315608][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.322781][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.332992][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.346828][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.356000][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.363263][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.378913][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.426729][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.435773][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.452575][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.480693][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.490977][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.501163][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.511140][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.520048][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.528743][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.538222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.552782][ T4282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.585956][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.595559][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.604724][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.612419][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.620618][ T4282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.630627][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.646689][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.657667][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.667472][ T4282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.676651][ T4282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.692132][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.700460][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.726526][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.737021][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.746491][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.753915][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.767451][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.800445][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.871925][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.882256][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.892168][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.899331][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.909773][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.918469][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.927215][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.936189][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.944961][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.952064][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.960544][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.969385][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.978078][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.985207][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.994384][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.003176][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.012959][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.043970][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.064958][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.075329][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.086501][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.098763][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.115279][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.126857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.138580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.179066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.195905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.205835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.214914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.223468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.231340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.239705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.250612][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.259783][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.278832][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.287507][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.298117][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.309769][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.323529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.336209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.351108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.359338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.372356][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.399707][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.412147][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.434426][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.443085][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.450262][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.470676][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.486724][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.495925][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.505201][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.514455][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.521667][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.538648][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 66.544820][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 66.565516][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.575006][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.584196][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.593986][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.602664][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.613616][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 66.619669][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 66.621487][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 66.658541][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.668143][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.701296][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.719699][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.735128][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.755774][ T2949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.776459][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.812393][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.848591][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.882348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.891336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.906974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.919444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.931066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.948116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.956927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.968373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.977065][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.984275][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.992470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.001389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.010008][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.017138][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.026232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.035702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.043711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.051510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.059335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.068098][ T4273] device veth0_vlan entered promiscuous mode [ 67.108719][ T4273] device veth1_vlan entered promiscuous mode [ 67.121434][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.138111][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.150526][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.161344][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.171473][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.201419][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.219461][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.229763][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.240265][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.249550][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.259466][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.268587][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.277730][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.291784][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.304376][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.330775][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.341115][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.351064][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.418205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.441107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.464468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.499300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.514507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.524812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.552535][ T4273] device veth0_macvtap entered promiscuous mode [ 67.566759][ T4273] device veth1_macvtap entered promiscuous mode [ 67.579450][ T4279] device veth0_vlan entered promiscuous mode [ 67.600414][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.614948][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.623778][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.632228][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.642545][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.651985][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.662767][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.671561][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.685214][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.696844][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.707384][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.717288][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.728027][ T4277] device veth0_vlan entered promiscuous mode [ 67.740666][ T4279] device veth1_vlan entered promiscuous mode [ 67.756524][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.768979][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.778485][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.786713][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.837352][ T4277] device veth1_vlan entered promiscuous mode [ 67.850643][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.870247][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.879100][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.888152][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.897080][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.907978][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.917102][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.926034][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.935105][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.948863][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.962146][ T4279] device veth0_macvtap entered promiscuous mode [ 67.995071][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.013927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.034526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.042649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.053400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.067491][ T4277] device veth0_macvtap entered promiscuous mode [ 68.081872][ T4279] device veth1_macvtap entered promiscuous mode [ 68.099062][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.108650][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.118508][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.127666][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.147457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.156124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.165196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.179453][ T4272] device veth0_vlan entered promiscuous mode [ 68.189702][ T4277] device veth1_macvtap entered promiscuous mode [ 68.215987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.225190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.235109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.253648][ T4272] device veth1_vlan entered promiscuous mode [ 68.268686][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.284757][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.298806][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.313307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.321247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.335265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.344840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.354953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.365796][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.379148][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.389669][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.401160][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.417506][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.450467][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.484948][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.506201][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.517345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.526029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.541752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.551148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.567794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.583003][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.595277][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.605446][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.613538][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 68.616385][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 68.628666][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.639651][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.662727][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.673254][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.681985][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.691741][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.699145][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 68.706514][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 68.712523][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 68.724713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.734296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.748481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.758343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.772646][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.782898][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.792384][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.801189][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.829811][ T4272] device veth0_macvtap entered promiscuous mode [ 68.839933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.849543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.858807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.907140][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.916494][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.918499][ T4272] device veth1_macvtap entered promiscuous mode [ 68.948088][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.958095][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.966963][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.976573][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.985303][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.994344][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.027601][ T4282] device veth0_vlan entered promiscuous mode [ 69.061386][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.074200][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.082357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.101833][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.114658][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.125505][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.136044][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.146095][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.156816][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.168503][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.186039][ T4282] device veth1_vlan entered promiscuous mode [ 69.195989][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.212399][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.222243][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.239685][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.250799][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.261534][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.272432][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.282757][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.293389][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.305873][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.336761][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.351333][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.361679][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.371588][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.421094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.460216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.490876][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.500454][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.598502][ T4282] device veth0_macvtap entered promiscuous mode [ 69.659671][ T4355] usb usb7: usbfs: process 4355 (syz.0.1) did not claim interface 0 before use [ 69.708461][ T4282] device veth1_macvtap entered promiscuous mode [ 69.899270][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.936449][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.980316][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.002353][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.035747][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.077236][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.114584][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.156935][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.207550][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.444330][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.461605][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.478612][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.488544][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.497189][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.506623][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.517928][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.522161][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.530708][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.537196][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.551950][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.566829][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.576880][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.590158][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.600073][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.613167][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.627024][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.642355][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.658962][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.667514][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.676520][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.693645][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 70.699692][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 70.714535][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.722384][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.764811][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.773255][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 70.779545][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 70.785972][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 70.803764][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.815114][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.825826][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.840951][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.914240][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.943454][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.000617][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.257053][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.263622][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.429777][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.511876][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.540696][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.553440][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.561271][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.603478][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.614083][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.621935][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.663542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.845067][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.929029][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 72.966036][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.034000][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.198543][ T4384] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 74.014835][ T4398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 75.733076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.063071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 76.083081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 76.093072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.103078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.166613][ T4425] rt1719: probe of 0-0049 failed with error -5 [ 76.175181][ T4425] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 76.183392][ T4431] i2c i2c-0: new_device: Missing parameters [ 76.524616][ T4440] Bluetooth: MGMT ver 1.22 [ 77.203074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 77.233072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 77.273085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.283079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.293078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.339644][ T4427] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12'. [ 77.353846][ T4427] loop1: detected capacity change from 0 to 512 [ 77.431854][ T4427] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.445117][ T4427] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.507351][ T4427] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 77.530772][ T4427] EXT4-fs (loop1): Remounting filesystem read-only [ 77.537769][ T4427] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.556538][ T4427] EXT4-fs (loop1): 1 truncate cleaned up [ 77.562304][ T4427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.829790][ T4448] loop3: detected capacity change from 0 to 512 [ 77.905079][ T4448] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.940023][ T4448] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 77.996488][ T4448] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 78.023789][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 78.139257][ T4448] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.17: attempt to clear invalid blocks 2 len 1 [ 78.231276][ T4453] Zero length message leads to an empty skb [ 78.831872][ T4448] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.17: invalid indirect mapped block 1819239214 (level 0) [ 78.857555][ T4448] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.17: invalid indirect mapped block 1819239214 (level 1) [ 78.872858][ T4448] EXT4-fs (loop3): 1 truncate cleaned up [ 78.878617][ T4448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.046563][ T4459] ======================================================= [ 79.046563][ T4459] WARNING: The mand mount option has been deprecated and [ 79.046563][ T4459] and is ignored by this kernel. Remove the mand [ 79.046563][ T4459] option from the mount to silence this warning. [ 79.046563][ T4459] ======================================================= [ 80.101334][ T4465] binder: 4462:4465 ioctl c0306201 0 returned -14 [ 81.486050][ T4465] sctp: failed to load transform for md5: -2 [ 81.570005][ T128] cfg80211: failed to load regulatory.db [ 81.651352][ T4456] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 81.659632][ T4456] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 81.668143][ T4456] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 83.141572][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 84.009664][ T4500] loop4: detected capacity change from 0 to 64 [ 86.094216][ T4518] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.701549][ T4521] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 86.925130][ T4428] Bluetooth: hci5: Frame reassembly failed (-84) [ 88.784078][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 88.793223][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 91.351101][ T4549] loop3: detected capacity change from 0 to 8 [ 93.072677][ T4549] SQUASHFS error: xz decompression failed, data probably corrupt [ 93.179380][ T4549] SQUASHFS error: Failed to read block 0x108: -5 [ 93.306856][ T4549] SQUASHFS error: Unable to read metadata cache entry [106] [ 93.380199][ T4549] SQUASHFS error: Unable to read inode 0x11f [ 94.584922][ T4553] sctp: failed to load transform for md5: -2 [ 97.699493][ T4587] random: crng reseeded on system resumption [ 98.549221][ T4579] sctp: failed to load transform for md5: -2 [ 99.043169][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.926688][ T4317] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 99.963157][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.462934][ T4317] usb 4-1: config 0 descriptor?? [ 101.305182][ T4625] netlink: 'syz.4.50': attribute type 8 has an invalid length. [ 102.584801][ T4597] batman_adv: batadv0: Adding interface: macvtap1 [ 102.591269][ T4597] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.798780][ T4633] loop0: detected capacity change from 0 to 32768 [ 102.814161][ T4633] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.51 (4633) [ 102.836789][ T4633] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.847400][ T4633] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 102.856977][ T4633] BTRFS info (device loop0): using free space tree [ 102.868697][ T4597] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 103.156271][ T4633] BTRFS info (device loop0): enabling ssd optimizations [ 103.259840][ T4662] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 103.988008][ T4665] bridge0: port 3(syz_tun) entered blocking state [ 103.995053][ T4665] bridge0: port 3(syz_tun) entered disabled state [ 104.007904][ T4665] device syz_tun entered promiscuous mode [ 104.015876][ T4665] bridge0: port 3(syz_tun) entered blocking state [ 104.022701][ T4665] bridge0: port 3(syz_tun) entered forwarding state [ 104.448647][ T4673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.55'. [ 104.535146][ T4317] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 104.553358][ T4317] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 104.581599][ T4317] [drm:udl_init] *ERROR* Selecting channel failed [ 104.608125][ T4317] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 104.615892][ T4317] [drm] Initialized udl on minor 2 [ 104.623645][ T4429] libceph: connect (1)[c::]:6789 error -101 [ 105.924890][ T4317] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.952811][ T4429] libceph: mon0 (1)[c::]:6789 connect error [ 105.952889][ T4317] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 105.987575][ T4317] usb 4-1: USB disconnect, device number 2 [ 105.995111][ T1172] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 106.005871][ T1172] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 106.014196][ T1172] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 106.065876][ T4669] ceph: No mds server is up or the cluster is laggy [ 106.216120][ T4273] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 106.234554][ T4679] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 106.365924][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 106.372072][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 106.974640][ T26] audit: type=1326 audit(1787921884.823:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 107.090611][ T26] audit: type=1326 audit(1787921884.893:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 107.202291][ T26] audit: type=1326 audit(1787921884.893:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 107.401560][ T4696] loop4: detected capacity change from 0 to 1024 [ 108.694026][ T26] audit: type=1326 audit(1787921884.893:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 108.720810][ T26] audit: type=1326 audit(1787921884.923:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 109.660630][ T4699] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 109.873492][ T26] audit: type=1326 audit(1787921884.923:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 110.538295][ T4696] hfsplus: failed to load root directory [ 110.675099][ T26] audit: type=1326 audit(1787921884.923:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 110.734767][ T26] audit: type=1326 audit(1787921884.923:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 110.823239][ T4690] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.003008][ T4714] loop0: detected capacity change from 0 to 512 [ 111.297038][ T4714] FAT-fs (loop0): Directory bread(block 199916) failed [ 111.304158][ T4714] FAT-fs (loop0): Directory bread(block 199917) failed [ 111.311043][ T4714] FAT-fs (loop0): Directory bread(block 199918) failed [ 111.318735][ T4714] FAT-fs (loop0): Directory bread(block 199919) failed [ 111.325715][ T4714] FAT-fs (loop0): Directory bread(block 199920) failed [ 111.332594][ T4714] FAT-fs (loop0): Directory bread(block 199921) failed [ 111.339547][ T4714] FAT-fs (loop0): Directory bread(block 199922) failed [ 111.346449][ T4714] FAT-fs (loop0): Directory bread(block 199923) failed [ 112.640540][ T4710] FAT-fs (loop0): FAT read failed (blocknr 128) [ 112.668532][ T26] audit: type=1326 audit(1787921884.933:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 112.699706][ T26] audit: type=1326 audit(1787921884.933:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 112.755238][ T4437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.765280][ T4690] usb 3-1: Using ep0 maxpacket: 8 [ 112.845137][ T4690] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.883752][ T26] audit: type=1326 audit(1787921884.943:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 112.910273][ T4690] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 112.944778][ T4690] usb 3-1: can't read configurations, error -71 [ 112.983161][ T26] audit: type=1326 audit(1787921884.943:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 113.050622][ T26] audit: type=1326 audit(1787921884.943:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 113.880832][ T26] audit: type=1326 audit(1787921884.943:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 114.068194][ T26] audit: type=1326 audit(1787921884.943:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 114.448883][ T26] audit: type=1326 audit(1787921884.983:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 114.699066][ T4721] null_blk: disk nullb1 created [ 114.819754][ T26] audit: type=1326 audit(1787921884.983:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 114.994382][ T26] audit: type=1326 audit(1787921884.983:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.2.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092d19e159 code=0x7ffc0000 [ 115.108607][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 116.425593][ T4742] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.789521][ T4757] device team_slave_0 entered promiscuous mode [ 117.796505][ T4757] device team_slave_1 entered promiscuous mode [ 117.806191][ T4757] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.020966][ T4752] sctp: failed to load transform for md5: -2 [ 122.680709][ T4787] netlink: 'syz.1.77': attribute type 5 has an invalid length. [ 122.688716][ T4787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.77'. [ 126.954322][ T4810] autofs4:pid:4810:autofs_fill_super: called with bogus options [ 127.570675][ T4798] Process accounting resumed [ 128.312627][ T4816] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.283383][ T128] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 132.157115][ T4865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.92'. [ 132.166000][ T4865] netlink: 84 bytes leftover after parsing attributes in process `syz.2.92'. [ 132.255735][ T4860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.93'. [ 132.834468][ T4873] autofs4:pid:4873:autofs_fill_super: called with bogus options [ 132.859055][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865771][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.742912][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 133.742925][ T26] audit: type=1326 audit(1787921911.597:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 135.432183][ T4866] Process accounting resumed [ 135.535000][ T26] audit: type=1326 audit(1787921911.597:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 135.565219][ T26] audit: type=1326 audit(1787921911.597:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 135.591025][ T26] audit: type=1326 audit(1787921911.597:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 135.951470][ T26] audit: type=1326 audit(1787921911.597:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 135.975620][ T26] audit: type=1326 audit(1787921911.597:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 136.001334][ T26] audit: type=1326 audit(1787921911.597:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 136.030989][ T26] audit: type=1326 audit(1787921911.597:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 136.058494][ T26] audit: type=1326 audit(1787921911.597:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 136.090618][ T26] audit: type=1326 audit(1787921911.597:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.3.93" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 136.523396][ T4895] Cannot find add_set index 0 as target [ 137.801702][ T4915] loop3: detected capacity change from 0 to 256 [ 137.809197][ T4915] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.830581][ T4906] process 'syz.2.102' launched '/dev/fd/8' with NULL argv: empty string added [ 137.874406][ T4915] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.454555][ T4921] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 138.513064][ C1] sched: RT throttling activated [ 139.117834][ T4932] autofs4:pid:4932:autofs_fill_super: called with bogus options [ 139.879814][ T4934] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 140.944041][ T4691] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.243591][ T4691] usb 4-1: Using ep0 maxpacket: 32 [ 142.315599][ T4691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.498084][ T4691] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.621499][ T4691] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 142.743093][ T4691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.804955][ T4691] usb 4-1: config 0 descriptor?? [ 143.839231][ T4691] usb 4-1: can't set config #0, error -71 [ 144.048600][ T4691] usb 4-1: USB disconnect, device number 3 [ 147.180147][ T4975] autofs4:pid:4975:autofs_fill_super: called with bogus options [ 147.817292][ T4972] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.848882][ T4972] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.943465][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 151.943480][ T26] audit: type=1326 audit(1787921929.807:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 152.064337][ T26] audit: type=1326 audit(1787921929.807:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 152.197830][ T26] audit: type=1326 audit(1787921929.877:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 152.384586][ T4289] Bluetooth: hci4: link tx timeout [ 152.390927][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.402308][ T4289] Bluetooth: hci4: link tx timeout [ 152.408371][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.418654][ T4289] Bluetooth: hci4: link tx timeout [ 152.424641][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.433006][ T4289] Bluetooth: hci4: link tx timeout [ 152.438680][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.454275][ T4289] Bluetooth: hci4: link tx timeout [ 152.459614][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.467985][ T4289] Bluetooth: hci4: link tx timeout [ 152.473668][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.482274][ T4289] Bluetooth: hci4: link tx timeout [ 152.487777][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.501499][ T4289] Bluetooth: hci4: link tx timeout [ 152.507098][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.515497][ T4289] Bluetooth: hci4: link tx timeout [ 152.521197][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.532678][ T4289] Bluetooth: hci4: link tx timeout [ 152.537999][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.546661][ T4289] Bluetooth: hci4: link tx timeout [ 152.552525][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.562714][ T4289] Bluetooth: hci4: link tx timeout [ 152.568783][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.577391][ T4289] Bluetooth: hci4: link tx timeout [ 152.588972][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.597719][ T4289] Bluetooth: hci4: link tx timeout [ 152.603705][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.612231][ T4289] Bluetooth: hci4: link tx timeout [ 152.619084][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.627592][ T4289] Bluetooth: hci4: link tx timeout [ 152.633215][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.641538][ T4289] Bluetooth: hci4: link tx timeout [ 152.647591][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.657611][ T4289] Bluetooth: hci4: link tx timeout [ 152.664989][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.673816][ T4289] Bluetooth: hci4: link tx timeout [ 152.679726][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.695999][ T4289] Bluetooth: hci4: link tx timeout [ 152.701789][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.710583][ T4289] Bluetooth: hci4: link tx timeout [ 152.716365][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.725297][ T4289] Bluetooth: hci4: link tx timeout [ 152.731118][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.860392][ T26] audit: type=1326 audit(1787921929.877:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 153.173225][ T5033] autofs4:pid:5033:autofs_fill_super: called with bogus options [ 153.411578][ T26] audit: type=1326 audit(1787921929.877:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 153.587402][ T26] audit: type=1326 audit(1787921929.877:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 153.759854][ T26] audit: type=1326 audit(1787921929.877:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 154.567517][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 155.552452][ T26] audit: type=1326 audit(1787921929.877:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.516287][ T26] audit: type=1326 audit(1787921929.877:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.728947][ T26] audit: type=1326 audit(1787921929.877:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.753600][ T26] audit: type=1326 audit(1787921929.877:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.778157][ T26] audit: type=1326 audit(1787921929.917:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.803160][ T26] audit: type=1326 audit(1787921929.917:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.828430][ T26] audit: type=1326 audit(1787921929.917:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.853029][ T26] audit: type=1326 audit(1787921929.957:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.877417][ T26] audit: type=1326 audit(1787921930.047:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 157.923161][ T26] audit: type=1326 audit(1787921930.047:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 158.705992][ T5067] netlink: 'syz.4.139': attribute type 4 has an invalid length. [ 159.628155][ T26] audit: type=1326 audit(1787921930.617:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9675b9e159 code=0x7ffc0000 [ 160.493769][ T5070] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 161.302898][ T5082] autofs4:pid:5082:autofs_fill_super: called with bogus options [ 163.110746][ T5109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'. [ 163.627169][ T5111] random: crng reseeded on system resumption [ 165.325936][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 167.970219][ T5149] autofs4:pid:5149:autofs_fill_super: called with bogus options [ 168.768427][ T5155] loop3: detected capacity change from 0 to 32768 [ 169.728658][ T5155] XFS (loop3): Mounting V5 Filesystem [ 169.896515][ T5155] XFS (loop3): Ending clean mount [ 169.982707][ T5175] loop4: detected capacity change from 0 to 8192 [ 172.283517][ T5206] autofs4:pid:5206:autofs_fill_super: called with bogus options [ 173.663273][ T5213] Process accounting resumed [ 173.840477][ T5200] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 173.847326][ T5200] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 174.088438][ T5200] vhci_hcd vhci_hcd.0: Device attached [ 174.105620][ T5215] vhci_hcd: connection closed [ 174.109640][ T4426] vhci_hcd: stop threads [ 174.184512][ T4426] vhci_hcd: release socket [ 174.190408][ T4426] vhci_hcd: disconnect device [ 174.332439][ T5226] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 174.341189][ T5226] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 174.350003][ T5226] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 179.020932][ T5244] netlink: 220 bytes leftover after parsing attributes in process `syz.4.176'. [ 179.689246][ T4277] XFS (loop3): Unmounting Filesystem [ 180.869241][ T5257] autofs4:pid:5257:autofs_fill_super: called with bogus options [ 184.786541][ T5296] loop1: detected capacity change from 0 to 32768 [ 185.675780][ T5296] XFS (loop1): Mounting V5 Filesystem [ 185.697928][ T5290] md: could not open device unknown-block(1,0). [ 185.954806][ T5296] XFS (loop1): Ending clean mount [ 186.059560][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 186.066327][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 186.066354][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 186.072337][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 187.695184][ T5323] bridge0: port 3(syz_tun) entered blocking state [ 187.702305][ T5323] bridge0: port 3(syz_tun) entered disabled state [ 187.709575][ T5323] device syz_tun entered promiscuous mode [ 187.715616][ T5323] bridge0: port 3(syz_tun) entered blocking state [ 187.723109][ T5323] bridge0: port 3(syz_tun) entered forwarding state [ 187.813865][ T5328] autofs4:pid:5328:autofs_fill_super: called with bogus options [ 188.375709][ T5323] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 190.243591][ T14] libceph: connect (1)[c::]:6789 error -101 [ 190.249647][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 190.353801][ T5331] ceph: No mds server is up or the cluster is laggy [ 190.424326][ T5344] bridge0: port 3(syz_tun) entered blocking state [ 190.430820][ T5344] bridge0: port 3(syz_tun) entered disabled state [ 190.439073][ T5344] device syz_tun entered promiscuous mode [ 190.445158][ T5344] bridge0: port 3(syz_tun) entered blocking state [ 190.451593][ T5344] bridge0: port 3(syz_tun) entered forwarding state [ 190.471406][ T5344] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 190.863393][ T5349] autofs4:pid:5349:autofs_fill_super: called with bogus options [ 194.141721][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.148112][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.593728][ T5376] autofs4:pid:5376:autofs_fill_super: called with bogus options [ 195.025024][ T5379] overlayfs: overlapping lowerdir path [ 195.531636][ T4279] XFS (loop1): Unmounting Filesystem [ 196.987036][ T5391] bridge0: port 3(syz_tun) entered blocking state [ 196.993571][ T5391] bridge0: port 3(syz_tun) entered disabled state [ 197.000616][ T5391] device syz_tun entered promiscuous mode [ 197.013421][ T5391] bridge0: port 3(syz_tun) entered blocking state [ 197.019899][ T5391] bridge0: port 3(syz_tun) entered forwarding state [ 197.079728][ T5395] autofs4:pid:5395:autofs_fill_super: called with bogus options [ 197.556049][ T5391] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 197.872970][ T5400] 0x000000000007-0x000000020000 : "" [ 197.901220][ T5400] ftl_cs: FTL header corrupt! [ 198.655463][ T5403] netlink: 48 bytes leftover after parsing attributes in process `syz.2.213'. [ 198.909198][ T5406] loop3: detected capacity change from 0 to 32768 [ 200.524052][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 200.583582][ T5406] XFS (loop3): Mounting V5 Filesystem [ 201.592342][ T5406] XFS (loop3): Ending clean mount [ 201.985439][ T5437] autofs4:pid:5437:autofs_fill_super: called with bogus options [ 202.009318][ T5428] autofs4:pid:5428:autofs_fill_super: called with bogus options [ 202.060278][ T5406] XFS (loop3): Quotacheck needed: Please wait. [ 202.155332][ T5406] XFS (loop3): Quotacheck: Done. [ 202.355896][ T4277] XFS (loop3): Unmounting Filesystem [ 202.569973][ T5439] loop1: detected capacity change from 0 to 32768 [ 202.662108][ T5444] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 202.848942][ T5439] XFS (loop1): Mounting V5 Filesystem [ 203.142620][ T5439] XFS (loop1): Ending clean mount [ 205.260856][ T5475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'. [ 207.031675][ T5482] loop0: detected capacity change from 0 to 2048 [ 207.259632][ T5482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 207.399118][ T5494] futex_wake_op: syz.3.231 tries to shift op by 144; fix this program [ 209.649896][ T5502] overlayfs: failed to resolve './bus': -2 [ 209.863566][ T5500] autofs4:pid:5500:autofs_fill_super: called with bogus options [ 210.505751][ T4279] XFS (loop1): Unmounting Filesystem [ 210.711740][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 210.774133][ T5512] netlink: 'syz.2.236': attribute type 4 has an invalid length. [ 210.937261][ T5511] netlink: 'syz.2.236': attribute type 4 has an invalid length. [ 211.677704][ T5511] syz.2.236 (5511) used greatest stack depth: 20592 bytes left [ 213.693851][ T5528] xt_cgroup: invalid path, errno=-2 [ 213.737603][ T5530] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 216.548853][ T5554] 9pnet_fd: Insufficient options for proto=fd [ 217.551717][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 218.774047][ T5560] loop2: detected capacity change from 0 to 32768 [ 219.006922][ T5560] XFS (loop2): Mounting V5 Filesystem [ 219.092677][ T5560] XFS (loop2): Ending clean mount [ 219.450822][ T5575] overlayfs: failed to resolve './bus': -2 [ 219.504924][ T5573] autofs4:pid:5573:autofs_fill_super: called with bogus options [ 219.761430][ T4272] XFS (loop2): Unmounting Filesystem [ 221.180581][ T5591] netlink: 56 bytes leftover after parsing attributes in process `syz.3.252'. [ 221.958118][ T5589] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 223.155662][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 223.156003][ T26] audit: type=1800 audit(1787922001.007:91): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.251" name="c_srate" dev="configfs" ino=38095 res=0 errno=0 [ 223.225235][ T5602] loop0: detected capacity change from 0 to 512 [ 223.603592][ T5612] binder_alloc: binder_alloc_mmap_handler: 5600 200000ffe000-200001000000 already mapped failed -16 [ 224.495290][ T4691] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 224.936870][ T5623] tipc: Started in network mode [ 224.941947][ T5623] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 224.955357][ T5623] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 224.965633][ T5623] tipc: Enabled bearer , priority 10 [ 225.011747][ T5623] loop2: detected capacity change from 0 to 256 [ 225.041646][ T5623] exfat: Deprecated parameter 'utf8' [ 225.047122][ T5623] exfat: Unexpected value for 'utf8' [ 226.078189][ T4319] tipc: Node number set to 1 [ 226.686984][ T5636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.222766][ T5635] loop0: detected capacity change from 0 to 128 [ 228.231293][ T5635] FAT-fs (loop0): Unrecognized mount option "òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ" or missing value [ 229.007916][ T4437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.094767][ T5632] loop0: detected capacity change from 0 to 1024 [ 229.243546][ T5651] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 230.504070][ T5632] EXT4-fs: failed to create workqueue [ 230.509477][ T5632] EXT4-fs (loop0): mount failed [ 230.930869][ T5668] futex_wake_op: syz.2.271 tries to shift op by 144; fix this program [ 231.006088][ T5668] loop2: detected capacity change from 0 to 512 [ 231.342993][ T5668] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.352408][ T5668] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.745831][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 231.870755][ T5680] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 233.308311][ T5686] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 233.676075][ T5697] loop1: detected capacity change from 0 to 32768 [ 234.921445][ T5713] loop3: detected capacity change from 0 to 2048 [ 235.394996][ T5713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.452899][ T5697] XFS (loop1): Mounting V5 Filesystem [ 235.657802][ T5697] XFS (loop1): Ending clean mount [ 236.090677][ T5725] bridge0: port 3(erspan0) entered blocking state [ 236.097297][ T5725] bridge0: port 3(erspan0) entered disabled state [ 236.105001][ T5725] device erspan0 entered promiscuous mode [ 236.111268][ T5725] bridge0: port 3(erspan0) entered blocking state [ 236.117805][ T5725] bridge0: port 3(erspan0) entered forwarding state [ 236.127760][ T5725] device erspan0 left promiscuous mode [ 236.133635][ T5725] bridge0: port 3(erspan0) entered disabled state [ 236.779641][ T4279] XFS (loop1): Unmounting Filesystem [ 236.952338][ T5729] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 237.090328][ T5733] loop4: detected capacity change from 0 to 64 [ 238.384128][ T5747] loop2: detected capacity change from 0 to 128 [ 239.055574][ T5747] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 239.068747][ T5747] hpfs: filesystem error: improperly stopped [ 239.074847][ T5747] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 239.082557][ T5747] hpfs: You really don't want any checks? You are crazy... [ 239.090250][ T5747] hpfs: hpfs_map_sector(): read error [ 239.095680][ T5747] hpfs: code page support is disabled [ 239.108581][ T5747] hpfs: hpfs_map_4sectors(): unaligned read [ 239.114760][ T5747] hpfs: hpfs_map_4sectors(): unaligned read [ 239.120740][ T5747] hpfs: filesystem error: unable to find root dir [ 241.117916][ T5761] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 241.351323][ T5773] loop2: detected capacity change from 0 to 1024 [ 241.374702][ T4282] hfs: node 4:3 still has 1 user(s)! [ 241.610362][ T5779] loop0: detected capacity change from 0 to 32768 [ 242.861241][ T5779] XFS (loop0): Mounting V5 Filesystem [ 243.201639][ T5779] XFS (loop0): Ending clean mount [ 244.240747][ T4273] XFS (loop0): Unmounting Filesystem [ 244.298399][ T5857] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 244.868573][ T5864] md: could not open device unknown-block(1,0). [ 245.077806][ T5874] autofs4:pid:5874:autofs_fill_super: called with bogus options [ 245.701448][ T5878] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 245.780208][ T5881] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.828881][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.302'. [ 246.723988][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.579911][ T5903] loop2: detected capacity change from 0 to 32768 [ 247.700832][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 248.182801][ T5903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.304 (5903) [ 248.988544][ T5912] futex_wake_op: syz.4.305 tries to shift op by 144; fix this program [ 249.003427][ T5912] loop4: detected capacity change from 0 to 256 [ 249.057967][ T5912] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 249.106261][ T5912] syz.4.305: attempt to access beyond end of device [ 249.106261][ T5912] loop4: rw=0, sector=184, nr_sectors = 120 limit=256 [ 249.150607][ T5912] syz.4.305: attempt to access beyond end of device [ 249.150607][ T5912] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 249.166213][ T5912] syz.4.305: attempt to access beyond end of device [ 249.166213][ T5912] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 249.180476][ T5912] syz.4.305: attempt to access beyond end of device [ 249.180476][ T5912] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 249.193928][ T5912] syz.4.305: attempt to access beyond end of device [ 249.193928][ T5912] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 249.207109][ T5912] syz.4.305: attempt to access beyond end of device [ 249.207109][ T5912] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 249.220280][ T5912] syz.4.305: attempt to access beyond end of device [ 249.220280][ T5912] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 249.233483][ T5912] syz.4.305: attempt to access beyond end of device [ 249.233483][ T5912] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 249.246661][ T5912] syz.4.305: attempt to access beyond end of device [ 249.246661][ T5912] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 249.259854][ T5912] syz.4.305: attempt to access beyond end of device [ 249.259854][ T5912] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 249.319645][ T5903] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.329964][ T5903] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 249.339531][ T5903] BTRFS info (device loop2): turning on sync discard [ 249.346281][ T5903] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 249.356681][ T5903] BTRFS info (device loop2): use zstd compression, level 3 [ 249.363992][ T5903] BTRFS info (device loop2): turning on async discard [ 249.371005][ T5903] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 249.381757][ T5903] BTRFS info (device loop2): trying to use backup root at mount time [ 249.389916][ T5903] BTRFS info (device loop2): enabling auto defrag [ 249.396424][ T5903] BTRFS info (device loop2): using free space tree [ 249.421958][ T26] audit: type=1800 audit(1787922026.942:92): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.305" name="file1" dev="loop4" ino=1048609 res=0 errno=0 [ 249.831804][ T5930] overlayfs: failed to resolve './bus': -2 [ 250.495504][ T5932] autofs4:pid:5932:autofs_fill_super: called with bogus options [ 250.540432][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 251.916868][ T5903] BTRFS error (device loop2): open_ctree failed: -12 [ 252.107658][ T4718] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4718) [ 253.534088][ T5959] overlayfs: failed to resolve './bus': -2 [ 253.591328][ T5960] autofs4:pid:5960:autofs_fill_super: called with bogus options [ 254.234766][ T5931] team0: Port device team_slave_0 removed [ 254.324261][ T5969] Bluetooth: ISO socket layer initialized [ 254.373761][ T5968] md: array md0 already has disks! [ 254.474538][ T5968] md: invalid raid superblock magic on ram1 [ 254.480492][ T5968] md: ram1 does not have a valid v0.0 superblock, not importing! [ 254.577093][ T5968] md: md_import_device returned -22 [ 254.603855][ T5977] using random self ethernet address [ 254.623739][ T5975] md: invalid raid superblock magic on ram2 [ 254.629688][ T5975] md: ram2 does not have a valid v0.0 superblock, not importing! [ 254.643448][ T5977] using random host ethernet address [ 254.696572][ T5975] md: md_import_device returned -22 [ 254.982880][ T5987] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 255.585278][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.591627][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.143114][ T5995] tmpfs: Unknown parameter 'usrquota' [ 257.951901][ T5998] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 258.111734][ T6001] loop4: detected capacity change from 0 to 512 [ 258.142924][ T6001] EXT4-fs: Ignoring removed orlov option [ 258.818923][ T6001] ext4: Bad value for 'data' [ 260.958938][ T6026] lo speed is unknown, defaulting to 1000 [ 260.966553][ T6026] lo speed is unknown, defaulting to 1000 [ 260.974777][ T6026] lo speed is unknown, defaulting to 1000 [ 261.007086][ T6026] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 261.444213][ T6026] lo speed is unknown, defaulting to 1000 [ 261.456972][ T6026] lo speed is unknown, defaulting to 1000 [ 262.167820][ T6039] tipc: Enabling of bearer rejected, failed to enable media [ 262.727854][ T6045] kAFS: Invalid Command on /proc/fs/afs/cells file [ 263.908922][ T6044] device dummy0 entered promiscuous mode [ 263.931945][ T6026] lo speed is unknown, defaulting to 1000 [ 263.983933][ T6026] lo speed is unknown, defaulting to 1000 [ 263.990527][ T6026] lo speed is unknown, defaulting to 1000 [ 264.281325][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 264.997415][ T6060] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 267.468596][ T6064] syz.3.334 (6064) used greatest stack depth: 16304 bytes left [ 267.747644][ T6066] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 268.783903][ T6078] autofs4:pid:6078:autofs_fill_super: called with bogus options [ 268.993866][ T6081] autofs4:pid:6081:autofs_fill_super: called with bogus options [ 269.430094][ T6087] loop4: detected capacity change from 0 to 128 [ 269.555124][ T6087] FAT-fs (loop4): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 271.081871][ T6094] xt_nfacct: accounting object `syz0' does not exist [ 272.422416][ T6109] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 273.515550][ T6121] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 275.344686][ T6124] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 276.243551][ T6128] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 276.789872][ T6138] autofs4:pid:6138:autofs_fill_super: called with bogus options [ 279.249248][ T6151] fuse: Bad value for 'fd' [ 279.809520][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801c3e3000: rx timeout, send abort [ 280.319516][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801c3e3000: abort rx timeout. Force session deactivation [ 281.170505][ T6171] loop4: detected capacity change from 0 to 8192 [ 281.578972][ T6174] ================================================================== [ 281.587081][ T6174] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 281.594331][ T6174] Read of size 8 at addr ffff8880299c6218 by task syz.1.361/6174 [ 281.602064][ T6174] [ 281.604411][ T6174] CPU: 1 PID: 6174 Comm: syz.1.361 Not tainted syzkaller #0 [ 281.611706][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.621827][ T6174] Call Trace: [ 281.625113][ T6174] [ 281.628032][ T6174] dump_stack_lvl+0x188/0x24e [ 281.632713][ T6174] ? read_lock_is_recursive+0x10/0x10 [ 281.638095][ T6174] ? show_regs_print_info+0x12/0x12 [ 281.643314][ T6174] ? load_image+0x410/0x410 [ 281.647809][ T6174] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 281.653266][ T6174] ? __virt_addr_valid+0x188/0x540 [ 281.658411][ T6174] ? __virt_addr_valid+0x467/0x540 [ 281.663533][ T6174] ? dvb_device_open+0xc5/0x360 [ 281.668375][ T6174] print_report+0xa8/0x210 [ 281.672783][ T6174] kasan_report+0x10b/0x140 [ 281.677293][ T6174] ? dvb_device_open+0xc5/0x360 [ 281.682195][ T6174] dvb_device_open+0xc5/0x360 [ 281.686899][ T6174] chrdev_open+0x585/0x5f0 [ 281.691310][ T6174] ? cd_forget+0x160/0x160 [ 281.695728][ T6174] ? fsnotify_perm+0x39b/0x550 [ 281.700494][ T6174] ? cd_forget+0x160/0x160 [ 281.704906][ T6174] do_dentry_open+0x7dd/0x10b0 [ 281.709687][ T6174] path_openat+0x2674/0x2f10 [ 281.714277][ T6174] ? finish_task_switch+0x262/0x8e0 [ 281.719507][ T6174] ? __schedule+0x1087/0x4030 [ 281.724196][ T6174] ? do_filp_open+0x420/0x420 [ 281.728890][ T6174] do_filp_open+0x1ee/0x420 [ 281.733391][ T6174] ? vfs_tmpfile+0x470/0x470 [ 281.737977][ T6174] ? _raw_spin_unlock+0x36/0x40 [ 281.742823][ T6174] ? alloc_fd+0x590/0x640 [ 281.747152][ T6174] do_sys_openat2+0x14b/0x4f0 [ 281.751848][ T6174] ? do_sys_open+0xe0/0xe0 [ 281.756253][ T6174] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 281.762233][ T6174] ? lock_chain_count+0x20/0x20 [ 281.767074][ T6174] __x64_sys_openat+0x135/0x160 [ 281.771921][ T6174] do_syscall_64+0x4c/0xa0 [ 281.776370][ T6174] ? clear_bhb_loop+0x60/0xb0 [ 281.781055][ T6174] ? clear_bhb_loop+0x60/0xb0 [ 281.785732][ T6174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.791629][ T6174] RIP: 0033:0x7fb486d5e98e [ 281.796039][ T6174] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.815637][ T6174] RSP: 002b:00007fb487cd4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.824037][ T6174] RAX: ffffffffffffffda RBX: 00007fb487cd56c0 RCX: 00007fb486d5e98e [ 281.831995][ T6174] RDX: 0000000000000400 RSI: 00007fb487cd4c00 RDI: ffffffffffffff9c [ 281.839958][ T6174] RBP: 00007fb487cd4c00 R08: 0000000000000000 R09: 0000000000000000 [ 281.847917][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 281.855901][ T6174] R13: 00007fb487026128 R14: 00007fb487026090 R15: 00007ffee141f1c8 [ 281.863868][ T6174] [ 281.866871][ T6174] [ 281.869189][ T6174] Allocated by task 6026: [ 281.873673][ T6174] kasan_set_track+0x4b/0x70 [ 281.878274][ T6174] __kasan_kmalloc+0x8e/0xa0 [ 281.882859][ T6174] siw_cm_alloc_work+0xbf/0x3b0 [ 281.887697][ T6174] siw_create_listen+0x507/0xe20 [ 281.892619][ T6174] iw_cm_listen+0x15f/0x220 [ 281.897108][ T6174] rdma_listen+0xafd/0xe50 [ 281.901521][ T6174] cma_listen_on_dev+0x3f5/0x720 [ 281.906448][ T6174] cma_add_one+0x638/0xa90 [ 281.910853][ T6174] add_client_context+0x375/0x7a0 [ 281.915870][ T6174] enable_device_and_get+0x195/0x3d0 [ 281.921164][ T6174] ib_register_device+0x1088/0x1350 [ 281.926369][ T6174] siw_newlink+0x9cf/0xe60 [ 281.930773][ T6174] nldev_newlink+0x58f/0x610 [ 281.935346][ T6174] rdma_nl_rcv+0x6e7/0xa20 [ 281.939743][ T6174] netlink_unicast+0x7ad/0x920 [ 281.944497][ T6174] netlink_sendmsg+0x8ad/0xbd0 [ 281.949241][ T6174] ____sys_sendmsg+0x5ed/0x9a0 [ 281.953994][ T6174] ___sys_sendmsg+0x2a2/0x360 [ 281.958765][ T6174] __se_sys_sendmsg+0x1c3/0x2b0 [ 281.963623][ T6174] do_syscall_64+0x4c/0xa0 [ 281.968031][ T6174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.973905][ T6174] [ 281.976229][ T6174] Freed by task 6026: [ 281.980208][ T6174] kasan_set_track+0x4b/0x70 [ 281.984791][ T6174] kasan_save_free_info+0x27/0x40 [ 281.989803][ T6174] ____kasan_slab_free+0x126/0x1f0 [ 281.994897][ T6174] slab_free_freelist_hook+0x133/0x1b0 [ 282.000337][ T6174] __kmem_cache_free+0xb6/0x200 [ 282.005177][ T6174] siw_cep_put+0x263/0x4c0 [ 282.009589][ T6174] siw_destroy_listen+0x496/0x670 [ 282.014597][ T6174] destroy_cm_id+0x3aa/0x6c0 [ 282.019176][ T6174] iw_destroy_cm_id+0x14/0x90 [ 282.023842][ T6174] _destroy_id+0x817/0x1170 [ 282.028327][ T6174] cma_process_remove+0x65e/0xc40 [ 282.033338][ T6174] cma_add_one+0x7da/0xa90 [ 282.037747][ T6174] add_client_context+0x375/0x7a0 [ 282.042765][ T6174] enable_device_and_get+0x195/0x3d0 [ 282.048050][ T6174] ib_register_device+0x1088/0x1350 [ 282.053240][ T6174] siw_newlink+0x9cf/0xe60 [ 282.057644][ T6174] nldev_newlink+0x58f/0x610 [ 282.062213][ T6174] rdma_nl_rcv+0x6e7/0xa20 [ 282.066613][ T6174] netlink_unicast+0x7ad/0x920 [ 282.071379][ T6174] netlink_sendmsg+0x8ad/0xbd0 [ 282.076187][ T6174] ____sys_sendmsg+0x5ed/0x9a0 [ 282.080965][ T6174] ___sys_sendmsg+0x2a2/0x360 [ 282.085637][ T6174] __se_sys_sendmsg+0x1c3/0x2b0 [ 282.090475][ T6174] do_syscall_64+0x4c/0xa0 [ 282.094880][ T6174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.100757][ T6174] [ 282.103071][ T6174] Last potentially related work creation: [ 282.108772][ T6174] kasan_save_stack+0x3a/0x60 [ 282.113434][ T6174] __kasan_record_aux_stack+0xb2/0xc0 [ 282.118788][ T6174] kvfree_call_rcu+0x103/0x890 [ 282.123538][ T6174] drop_sysctl_table+0x359/0x4e0 [ 282.128460][ T6174] drop_sysctl_table+0x348/0x4e0 [ 282.133383][ T6174] unregister_sysctl_table+0x85/0x130 [ 282.138764][ T6174] neigh_sysctl_unregister+0x74/0x90 [ 282.144033][ T6174] addrconf_ifdown+0x173d/0x1a30 [ 282.148952][ T6174] addrconf_notify+0x405/0xf60 [ 282.153710][ T6174] raw_notifier_call_chain+0xcb/0x160 [ 282.159067][ T6174] unregister_netdevice_many_notify+0x10b1/0x1990 [ 282.165490][ T6174] unregister_netdev+0x14c/0x1c0 [ 282.170420][ T6174] gprs_attach+0x466/0x520 [ 282.174821][ T6174] pep_setsockopt+0x35a/0x530 [ 282.179485][ T6174] __sys_setsockopt+0x2bf/0x3d0 [ 282.184323][ T6174] __x64_sys_setsockopt+0xb1/0xc0 [ 282.189330][ T6174] do_syscall_64+0x4c/0xa0 [ 282.193731][ T6174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.199606][ T6174] [ 282.201919][ T6174] The buggy address belongs to the object at ffff8880299c6200 [ 282.201919][ T6174] which belongs to the cache kmalloc-256 of size 256 [ 282.215955][ T6174] The buggy address is located 24 bytes inside of [ 282.215955][ T6174] 256-byte region [ffff8880299c6200, ffff8880299c6300) [ 282.229131][ T6174] [ 282.231443][ T6174] The buggy address belongs to the physical page: [ 282.237854][ T6174] page:ffffea0000a67180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x299c6 [ 282.248094][ T6174] head:ffffea0000a67180 order:1 compound_mapcount:0 compound_pincount:0 [ 282.256400][ T6174] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 282.264417][ T6174] raw: 00fff00000010200 ffffea0000c20180 dead000000000002 ffff888017441b40 [ 282.273084][ T6174] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 282.281649][ T6174] page dumped because: kasan: bad access detected [ 282.288051][ T6174] page_owner tracks the page as allocated [ 282.293759][ T6174] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12110423649, free_ts 0 [ 282.313451][ T6174] post_alloc_hook+0x173/0x1a0 [ 282.318217][ T6174] get_page_from_freelist+0x206b/0x2180 [ 282.323761][ T6174] __alloc_pages+0x1ec/0x4f0 [ 282.328341][ T6174] alloc_page_interleave+0x24/0x1e0 [ 282.333528][ T6174] alloc_slab_page+0x5d/0x180 [ 282.338192][ T6174] new_slab+0x87/0x2d0 [ 282.342252][ T6174] ___slab_alloc+0xbc5/0x1240 [ 282.346919][ T6174] __kmem_cache_alloc_node+0x126/0x270 [ 282.352361][ T6174] kmalloc_trace+0x26/0xe0 [ 282.356765][ T6174] bus_add_driver+0xdc/0x5d0 [ 282.361336][ T6174] driver_register+0x32d/0x430 [ 282.366083][ T6174] usb_register_driver+0x201/0x3c0 [ 282.371188][ T6174] pvr_init+0x7e/0x133 [ 282.375253][ T6174] do_one_initcall+0x257/0x800 [ 282.380031][ T6174] do_initcall_level+0x13d/0x1ed [ 282.384954][ T6174] do_initcalls+0x4b/0x8a [ 282.389272][ T6174] page_owner free stack trace missing [ 282.394618][ T6174] [ 282.396920][ T6174] Memory state around the buggy address: [ 282.402528][ T6174] ffff8880299c6100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.410571][ T6174] ffff8880299c6180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.418617][ T6174] >ffff8880299c6200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.426692][ T6174] ^ [ 282.431520][ T6174] ffff8880299c6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.439567][ T6174] ffff8880299c6300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.447607][ T6174] ================================================================== [ 282.507302][ T6174] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 282.514534][ T6174] CPU: 1 PID: 6174 Comm: syz.1.361 Not tainted syzkaller #0 [ 282.521829][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.531900][ T6174] Call Trace: [ 282.535192][ T6174] [ 282.538131][ T6174] dump_stack_lvl+0x188/0x24e [ 282.542832][ T6174] ? memcpy+0x3c/0x60 [ 282.546822][ T6174] ? show_regs_print_info+0x12/0x12 [ 282.552039][ T6174] ? load_image+0x410/0x410 [ 282.556560][ T6174] panic+0x2d3/0x710 [ 282.560474][ T6174] ? bpf_jit_dump+0xd0/0xd0 [ 282.564995][ T6174] ? check_panic_on_warn+0x6c/0xa0 [ 282.570127][ T6174] check_panic_on_warn+0x80/0xa0 [ 282.575079][ T6174] ? dvb_device_open+0xc5/0x360 [ 282.579947][ T6174] end_report+0x66/0x110 [ 282.584206][ T6174] kasan_report+0x118/0x140 [ 282.588730][ T6174] ? dvb_device_open+0xc5/0x360 [ 282.593680][ T6174] dvb_device_open+0xc5/0x360 [ 282.598385][ T6174] chrdev_open+0x585/0x5f0 [ 282.602825][ T6174] ? cd_forget+0x160/0x160 [ 282.607259][ T6174] ? fsnotify_perm+0x39b/0x550 [ 282.612048][ T6174] ? cd_forget+0x160/0x160 [ 282.616514][ T6174] do_dentry_open+0x7dd/0x10b0 [ 282.621310][ T6174] path_openat+0x2674/0x2f10 [ 282.625928][ T6174] ? finish_task_switch+0x262/0x8e0 [ 282.631156][ T6174] ? __schedule+0x1087/0x4030 [ 282.635860][ T6174] ? do_filp_open+0x420/0x420 [ 282.640564][ T6174] do_filp_open+0x1ee/0x420 [ 282.645084][ T6174] ? vfs_tmpfile+0x470/0x470 [ 282.649869][ T6174] ? _raw_spin_unlock+0x36/0x40 [ 282.654736][ T6174] ? alloc_fd+0x590/0x640 [ 282.659091][ T6174] do_sys_openat2+0x14b/0x4f0 [ 282.663788][ T6174] ? do_sys_open+0xe0/0xe0 [ 282.668217][ T6174] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 282.674230][ T6174] ? lock_chain_count+0x20/0x20 [ 282.679113][ T6174] __x64_sys_openat+0x135/0x160 [ 282.683989][ T6174] do_syscall_64+0x4c/0xa0 [ 282.688431][ T6174] ? clear_bhb_loop+0x60/0xb0 [ 282.693129][ T6174] ? clear_bhb_loop+0x60/0xb0 [ 282.697825][ T6174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.703739][ T6174] RIP: 0033:0x7fb486d5e98e [ 282.708178][ T6174] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 282.727804][ T6174] RSP: 002b:00007fb487cd4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.736253][ T6174] RAX: ffffffffffffffda RBX: 00007fb487cd56c0 RCX: 00007fb486d5e98e [ 282.744236][ T6174] RDX: 0000000000000400 RSI: 00007fb487cd4c00 RDI: ffffffffffffff9c [ 282.752226][ T6174] RBP: 00007fb487cd4c00 R08: 0000000000000000 R09: 0000000000000000 [ 282.760217][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 282.768204][ T6174] R13: 00007fb487026128 R14: 00007fb487026090 R15: 00007ffee141f1c8 [ 282.776199][ T6174] [ 282.779497][ T6174] Kernel Offset: disabled [ 282.783898][ T6174] Rebooting in 86400 seconds..