last executing test programs: 17m36.999165191s ago: executing program 32 (id=12): socket$inet_icmp(0x2, 0x2, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) signalfd(r2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff400, 0x0, 0x0, 0x0, 0x9}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x17}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000011, 0x2000, 0x2f93) 17m15.824668515s ago: executing program 33 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) pread64(r4, &(0x7f0000000640)=""/230, 0xc6, 0x0) read$FUSE(r4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_get$pid(0x1, r0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x0) syz_open_dev$sndpcmp(0x0, 0x1, 0x2) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 17m9.163972024s ago: executing program 34 (id=38): inotify_init() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6(0xa, 0x2, 0x3) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000340)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@data_err_abort}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x180) listen(r0, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000380)={[{@nobarrier}, {@nls={'nls', 0x3d, 'ascii'}}, {@part}, {@force}, {@gid}, {@nobarrier}, {@gid}]}, 0x44, 0x72f, &(0x7f0000000d00)="$eJzs3U9sHFcZAPBvdtcbbyq52yZpC0KK1YgIGkhsLyVBQsJUFfKhgkhcejWJ01hZu8F2kRMh4gCFI5xQDj0UIXPoCfWAVMShopyRkLgi3yP1XvXAopmd2eyu7d11Hdup+/tJs/Nm5v355vPM2/U40QbwhTX3eoxtRBJzF15bT7e3NhvNrc3GUlGOiBMRUYqotFeRLEckH0XMRnuJL6U78+6S3cZ5+eEH75x/8F6jvVXJl6x+aVC7R1oDRtjIl5iMiHK+jvE9ZaKyW3/X4pV2f13u7anrpBN3mrBzReLgqLU6kry8sZfmI9y3wJPuXkR5bIf99YiT+Vtp+jkg8tmhdMjhPXZ7muUAAADgyVQeVuHpiCTWY+JwwgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjIWl/Z2CSL6WiPBlJ8f3/1Xxfqlo94ngH+8aQ42/fOKRAAAAAAAAAAOBAvJ//4f7sJ/FJrMdEsb+VZH/zfzHbOJ29PhVvxWosxEpcjPWYj7VYi5WYjhib6Oqwuj6/trYyvb3lHyJt2Wq17uUtZyKivq3lzC6Blh7ziQMAAAAAAADA8fTLmIuJow4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6JRHl9ipbThflepQqETEeEdW03kbE34vy59mHRx0AAAAAHLxavp5I/tcutJLsd/7nst/7x+OtWI61WIy1aMZCXM+eBbR/6y/9e6PR3NpsLKXL9o6///Ge4sh6jIhy3N9l5KmsxplOi7n4Qfw4LsRkXI2VWIyfxXysxUJMRi09iZiPJOq19tOLehHnzvHO9mxd7ZRa7bM92xfrC2kklVrciMUstotxrRrtxybZOaRjvtA12l+rEX0j3k+zk3wvN2KOrnf9vH6fP5cpIn16xD4ORj0787FORqbS3OfZeGZw7gdeJz8dOtJ0lDrPoE7nI3y4tZlu9o9U5Pwne8n5yfZqPH35TW/OH7cBj9LGdtjXn4mZKOVXX8RzvTm//dUHz/Y2/vp//nH1Zmn51s0bqxcO8JT2Y3JYhU5S+jPR6MrE84OvvjwTzTQTGyNlYjZ2+nmMj9DyEFTzbGRT0Yiz5atZaT5e7LoE34zrsRCXYyqm40pMxXdiJhqdKyxdzvTktdJY6s1Jdq+Vts9vtQHBn/taV6XfDql8uNK8PNOV1+6Zrp4dy/fM/i6muq6+Zwdfffc/fvVH7dKIM1I6/pfzcjrGrzrvOE+Cnkzkc3MR3anBmfhjK31dbS7fWrk5f3vE8c7n6/S2fbt3bv7T6FH3v7vvRxFBer2kM24l28pyUiuul/TYqU7d3nxV87+4tNvl19mpR8fOdI7VYyIW44e73qnV/DNcT0/5+0R67PnuY/99NHNW8883xbGeTznxZjSzTyF9hk7VAByyky+drNYe1v5Ve7f269rN2mvjr5y4cuIr1Rj7Z+Vv5b+U/lz6bvJSvBu/iImjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6D1Tt3b803mwsrnUKM9+/pKpR2P7R7obrrWIMLURpaZ/Op0TqMesTgsZK8UP0MJ3jMCrXo21N8v9F+e34/IrJCuSj01KnuO/hk6DVWin0OkebhseS51WonNdvTKu+heaVotXOdSqyOx635pNJ3x33aarVOdO6C8exH8Gmr1V2nFl23DHDMXVpbun1p9c7dby4uzb+x8MbC8syVy1cuN749/a1LNxabC1Pt16OOEjgIq3fulnfYvdM3DwMAAAAAAAAAAABPiPxf/6995v/MUBlSp7qyuvPIZw/7VAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPqbnXY2wjkpieujiVbm9tNprpElHvrlYqVtVIfh6RfBQxG+2lp2Ky2zgvP/zgnfMP3mu0tyr5ktUvDWo3mo18icmIKOfr4U7s0M32/q519bfR16LVGmWcpHOGacLOFYmDo/b/AAAA//8ZrPOn") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, &(0x7f0000000200)=""/166}, 0x20) 13m58.897926575s ago: executing program 35 (id=175): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', 0x0, &(0x7f0000000500), 0x20040c1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000610000/0x3000)=nil, 0x3000, 0x3000012, 0x4c10a0703446b531, r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 13m40.881217239s ago: executing program 36 (id=197): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000800000000029500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) 13m31.209961826s ago: executing program 37 (id=208): shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x20004010) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0021040000000000000000003b49166f34af7201", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) close(0x3) 12m12.0596191s ago: executing program 38 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8010) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) fsync(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) 12m9.209657147s ago: executing program 7 (id=269): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000480)=0x4000000) read$dsp(r5, &(0x7f0000000280)=""/189, 0xbd) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 11m54.752850117s ago: executing program 7 (id=287): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x48001) socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x89e1, &(0x7f00000000c0)='lapb0') syz_clone3(&(0x7f0000003ac0)={0x20000, 0x0, &(0x7f0000000100), &(0x7f00000003c0), {0x16}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000001980)=""/46, &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(0xffffffffffffffff, 0x0) 11m37.039434594s ago: executing program 39 (id=299): syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x0, 0x3}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 11m36.863082798s ago: executing program 40 (id=287): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x48001) socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x89e1, &(0x7f00000000c0)='lapb0') syz_clone3(&(0x7f0000003ac0)={0x20000, 0x0, &(0x7f0000000100), &(0x7f00000003c0), {0x16}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000001980)=""/46, &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(0xffffffffffffffff, 0x0) 10m7.466931571s ago: executing program 41 (id=336): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$unix(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x20004044}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000011, 0x2000, 0x2f93) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 10m7.240801546s ago: executing program 42 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='rd_pages=6', 0xa) 10m5.477026378s ago: executing program 43 (id=360): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f00000009c0)="080008001b07245b30d807000000007e7fde7b6ba78eed2713e5b42efa488d33afa5890bd927c14f402557965e7f089e132a769d8c14743ba7980bd3b5936a5dd7bc996d9d8ed491292bb6d915717246dcbc2d912556ebe45bdd05dd53f0d85f650947005f7d5f8c61d4bf755aa941ddb7f32643682cb4b2200369686cf561673c0908a4e3bb29aba455a8883b98ae97376cccd17b7b1ba16e9cf2829d335207e0528f5762a05cd50fc6833d1716ed26382209a28d4bebb7b9c4c0e25259bcb7ad661475ca2be8b5a6bb926a5aeca5022fa1293d3af01cf24cb381c496840fdca730c273727890cf395d1bca9b41d3fb021ad9e3dde4595494d075bec58ed9675606d2673f19a3ec9206ddba1970d35094850e9079c62913ff72dd7b07e7ae4961e8dced66ce1c2244fd48bd87413712f22e020cf6a8a96e9ca2f090e47a4310bcee801d4585da2472c23b97dd55533d18cf0e402c17cc77d49b876b26dd478ffe79dbc7eefb138f261c857b34686b5199b13953e3502fccadb2f6d24df0a26f6cc795c51e85eba040f67eec0eae28c1eb2b9a62ba3482f013d21fcdba7789f8e15010655a35920e91e58282994529ea1f6144464c22e0123c986a5467d9e21cdfea65a3634b781e52d003e8ea6afd18b04dadae69b0ff58587b384aa6a4d0285cd97c678e17a09a19793f7bcbf6c9a6e93be1fb3371aa19ee32e5", 0x1fb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000480), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f0000000580)='MSFT100\n\x00', 0x8) close(r2) write(0xffffffffffffffff, &(0x7f00000006c0)='WINNCM\n\x00', 0x8) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='dummy_udc.0', 0xb) close(r3) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) lsetxattr$security_ima(&(0x7f0000000000)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB="0411e5438f32a5e9cffcdfddc429b5"], 0x11, 0x3) 8m19.554011484s ago: executing program 44 (id=407): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000b00), 0x1000400, &(0x7f0000000580)={[{@redirect_dir_on}, {@workdir}], [{@euid_gt={'euid>', r2}}, {@flag='posixacl'}, {@dont_appraise}, {@measure}]}) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0xf84, 0x10000, 0x6, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca56, 0x200, 0x1002000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x20, 0x0, 0x358}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367, 0x800, 0x0, 0x8003e3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0xffffffff, 0x241}}], 0x1, &(0x7f0000000500)={0x2e, 0x55, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000030000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000", @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x40000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 8m17.971299853s ago: executing program 45 (id=408): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = getpgrp(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x4387fe34834ef5c5, 0x58de4a6fa5deed3c, 0x1, 0x10, r2}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r5, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r5, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) openat$uinput(0xffffffffffffff9c, 0x0, 0xc03, 0x0) setsockopt(r5, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 8m13.321178637s ago: executing program 46 (id=410): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCSPGRP(r5, 0x8902, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[], 0x30}, 0x4004000) 7m24.184503499s ago: executing program 47 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610c", 0x25, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x2, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x80000001, 0x1}], "409b7c"}, @typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @fwd={0x1}, @fwd={0x5}]}}, 0x0, 0x5a, 0x0, 0x1, 0x80, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_gettime(0x0, &(0x7f0000000180)) futex$unlock_wake_list32(0x0, 0x60a, 0x85, 0x0, &(0x7f00000002c0)=0x9, 0x401) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4c42bb4f92, 0x0) shutdown(0xffffffffffffffff, 0x0) 7m1.880805178s ago: executing program 9 (id=475): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) 7m0.660041199s ago: executing program 9 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='rd_pages=6', 0xa) 6m42.300773841s ago: executing program 9 (id=487): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r5) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x2ddc, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xe, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x264, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x238, 0x2, [@m_connmark={0x13c, 0x13, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x4d, 0x6, 0x1, 0x3ff}, 0x80}}]}, {0xed, 0x6, "f6f50e4f1209659002552e754117d02f6a15ff482c3c396f14a1f4ac27144e0c93e17a1024f3b75c46594d18f8d55845f2172099bba57e57aa1bfd7a277fc130e4bd9b6e419a497e4332ece0da1f0f4a2f2b270dd69379e6e706dd97c6343857be0c8a8de492f828efb2f6dcce47bbc145b1707da9f1fb56830774252588a187ecef0c9e7657235fc43a5eea9754bd2907977e13f7b6506311824636ba267c23556ec56793c72708a1ced9ed89e9e5b4830fdb2b84b25c28d60b3e42179d07e8c7c135e3ca7067087d65fe82416dc1b22141cc48d4ecbb67957af7432a61d87a8ba725e4251424a709"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xf8, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0xcd, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91f782136cdc0714b85775a04918ee4cc6888787bef8a7ea2ff8719f6ea958d1c3bf43b9dab1460884c3fd5343c0ff92e083c9c4643b86542ab19d54d274212f9a29de4e77dbd8df27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2b14, 0x2, [@TCA_CGROUP_ACT={0x2b10, 0x1, [@m_pedit={0x2b0c, 0xb, 0x0, 0x0, {{0xa}, {0x2ae0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x97c, 0x1, 0x6, 0x200}, 0x8a, 0x80, [{0x8, 0x5875f981, 0x6, 0x4, 0xa, 0x8}]}, [{0x8, 0xac1f, 0x100, 0xfffffff0, 0x2, 0x7}, {0xfffff000, 0x7, 0x80000000, 0x7, 0x200, 0x8}, {0x1800, 0x9, 0x6, 0xfffffff7, 0xffff, 0x7}, {0x4, 0xd5, 0x8, 0x0, 0x4447, 0x5}, {0x4, 0xc63f, 0x1, 0x1, 0xed1, 0x2}, {0xffffffff, 0xe8, 0x800, 0x83b, 0x8, 0x6}, {0xc, 0xffff7fff, 0x3, 0x5, 0x7f, 0xfffffffb}, {0xb, 0x9, 0x408, 0x80, 0x6, 0x768}, {0xffff8bff, 0x8, 0x3c27, 0x3, 0xc, 0x75ef2317}, {0x5, 0x8, 0x1, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x80000000, 0x7, 0x0, 0x10}, {0xfff, 0x8, 0x80000000, 0x80, 0x6, 0x5}, {0xa0, 0x101, 0x6, 0x3, 0x0, 0xdf}, {0x4, 0x5, 0x2, 0x3, 0xfffff000, 0xaa6}, {0x7, 0x80000000, 0x8, 0xfffffff4, 0xfe6, 0x75}, {0x3, 0xa6, 0x0, 0x2, 0x40, 0x8}, {0x4, 0x9d3, 0x6, 0x5, 0xd, 0x4}, {0xfd3afc0, 0x3, 0x5, 0x2, 0xff, 0xfffffabf}, {0x5, 0x2, 0xfff, 0x2, 0x2, 0x81}, {0xcb09, 0xb, 0x3ff, 0x6, 0xa, 0x3}, {0x1000, 0x1, 0x200, 0x2, 0x5, 0xff}, {0x4a6, 0xd3, 0x0, 0x8, 0x4, 0x9}, {0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0xe921}, {0x6, 0x4, 0x7fff, 0xc16, 0x9, 0x8}, {0xffff, 0x7, 0x7, 0x10000, 0xffffffff, 0xffff8001}, {0x6, 0xb, 0x28dc, 0x6, 0x7fff, 0x9}, {0x4, 0x8001, 0x1000, 0x1, 0x1, 0x1}, {0x5, 0x1, 0x4, 0xffff7fff, 0xe4c, 0x7cc28a0b}, {0x9, 0x8, 0x200020, 0xdb78, 0x4, 0x7}, {0x80, 0xffffffff, 0x4, 0x400, 0xffff5956, 0x8}, {0x1, 0x1000, 0xffffffff, 0x4, 0xffffffff}, {0x6, 0x7fff, 0x3, 0x27a8, 0x9a3, 0x7}, {0x4, 0x80, 0x1ff, 0xffffffff, 0x5, 0x5}, {0x2, 0x62, 0x6e, 0x1000, 0x3, 0xff}, {0x7, 0x8, 0x2, 0xffffffff, 0x400, 0x10001}, {0x0, 0x7ff, 0x8, 0x7, 0xff, 0x69c}, {0x7, 0x7, 0x3, 0x2, 0x1, 0x2}, {0xd1b4, 0x2, 0x0, 0x2, 0x3ff, 0x6}, {0x636cf16a, 0x7fffffff, 0x80000000, 0x3, 0x7f, 0x660b}, {0x4, 0xb3, 0xc2c, 0x2, 0x5, 0x4}, {0xffff3de5, 0x5, 0x3, 0x6, 0x4b7, 0x7fffffff}, {0x10c3, 0x4, 0x4, 0xfffff1ce, 0x800, 0x4}, {0x750, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x7, 0xff, 0x1bdf, 0x5, 0x7ff, 0x5}, {0xff, 0x1206f6e2, 0x0, 0x800, 0x2, 0x200}, {0x5, 0x1a, 0x400, 0x3, 0x608b, 0x9}, {0x2, 0x2, 0x2, 0x4, 0x9, 0x2}, {0x200, 0x8, 0xfffffffe, 0x6, 0x11f7, 0x7}, {0xffff, 0x2, 0x200, 0x9, 0xffff, 0x100}, {0x0, 0xffff8000, 0x6, 0xfff, 0xb1e, 0xc33}, {0x8, 0x76f, 0x5, 0x7, 0xffffffff, 0x9}, {0x80000001, 0x9, 0x3, 0x7, 0x80, 0xd}, {0x5, 0x80000001, 0x9, 0x3, 0xb5f, 0x3}, {0x4, 0xcfb, 0x7, 0x1, 0x2, 0x80000000}, {0x7fff, 0x8, 0x165, 0xb59c, 0x7, 0x2}, {0x14, 0x4, 0x527, 0x8, 0x10000}, {0xac1, 0x5, 0x2, 0x7, 0x4, 0xd3}, {0x1, 0xc7, 0x15, 0xb, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x7, 0x5, 0x7fffffff}, {0x102, 0x5, 0x2, 0x1, 0x1a3f9ae0, 0xc}, {0x9, 0x8, 0x6, 0xd1, 0x9, 0x7}, {0x6, 0x334, 0xe7cf, 0x8000, 0x3a0, 0x9}, {0x67, 0x0, 0xc, 0x4, 0x400, 0x86c}, {0x3, 0x0, 0xfffffff6, 0x80000000, 0x3}, {0x0, 0xb6, 0x2, 0x6e52, 0x2, 0x3}, {0x4, 0x4, 0x81, 0x8, 0x8, 0x7}, {0xfffffffc, 0x9, 0x2, 0x0, 0x1, 0x7fff}, {0x1, 0x7fffffff, 0xffffffff, 0xe5d, 0x5, 0x7de7}, {0x1, 0x5a, 0x0, 0xfffffff9, 0x3, 0x7b}, {0x369f, 0x0, 0x1c18, 0x401, 0x3, 0x931}, {0xfff, 0x12fc, 0x7, 0x67d, 0x8001, 0x10}, {0x4, 0x7f, 0x9, 0x81, 0x101, 0x5}, {0x2, 0x8001, 0x925, 0x8, 0x7, 0xfffffff8}, {0xf2d, 0x7ee, 0x80000000, 0x988, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x120000, 0x0, 0x9a}, {0x100, 0xfffffffe, 0x1ff, 0x5, 0x8, 0xfffffffb}, {0xfffffff8, 0x9, 0x7ff, 0x70, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8, 0x1, 0x80}, {0x81, 0x8, 0x5, 0x5, 0x1000, 0x800}, {0xd, 0x3, 0x3, 0x3, 0x21, 0x728e357b}, {0x0, 0x1, 0x9, 0x4, 0x2, 0xb}, {0xfffffffa, 0x80, 0x7, 0x10001, 0x6, 0x4}, {0x5afba23, 0xfffff43e, 0x9, 0xfffffff9, 0x3, 0x4}, {0x5, 0x40, 0x81, 0x6, 0x400, 0x2c000000}, {0x0, 0x1, 0x9, 0x200, 0x4, 0x100000}, {0x1, 0x400, 0xf, 0x9, 0x0, 0x40}, {0x5, 0x4361, 0x7, 0x5f, 0x3, 0x8}, {0x1, 0xcb46, 0x7f, 0x4, 0x7f, 0x2}, {0x401, 0x10000, 0x2, 0x2, 0x2, 0xfffff74e}, {0x8000, 0x1, 0x0, 0xfffffffd, 0x2, 0x6}, {0x9, 0x10, 0x2, 0x1, 0x3, 0xfc}, {0x7, 0x7, 0x5, 0x1, 0x8ca4, 0x6}, {0x8, 0x9a9, 0xffffffff, 0x8, 0xffffffbd, 0xfffffff9}, {0x1, 0x2, 0x452111f6, 0xfffffffb, 0x6, 0x9}, {0x5, 0x4, 0x7, 0x2, 0x9, 0x9}, {0x4, 0x8000, 0x9, 0xf, 0xd3be, 0xffffffff}, {0x5, 0x6, 0x8, 0x2, 0x3, 0x2}, {0x5, 0x8, 0x10000, 0x10001, 0xfffffffe, 0x6}, {0x7, 0x90, 0x1, 0x2, 0x6, 0x9}, {0x0, 0x6, 0xfff, 0x2, 0x1, 0x80000001}, {0x5, 0x9, 0xc, 0x6, 0x964, 0xffffffff}, {0xb, 0x4, 0x8, 0x81, 0xf513, 0x343}, {0x0, 0x1, 0xfffff801, 0x319, 0x2800000, 0x40}, {0x6, 0x8, 0x40, 0x7, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x8, 0x10001, 0x2}, {0x2, 0x4, 0x7, 0x8, 0x400, 0x2}, {0x100, 0x8, 0x7fffffff, 0x0, 0x6, 0x9}, {0x8, 0x10, 0x7afb, 0x6, 0x1923f85c, 0x5}, {0x3, 0x9, 0x2, 0x3, 0x6, 0x7}, {0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0x1c000000}, {0x1, 0xfffffffe, 0x3ff, 0x7fffffff, 0x1ff, 0x6}, {0x8000, 0xffff73df, 0xb, 0x66f3, 0x8001, 0x2}, {0x80, 0x521b6b31, 0x7, 0x3, 0x3, 0x6}, {0x6, 0x3, 0x0, 0x7, 0xfffffff7, 0x8}, {0x401, 0xe, 0xc, 0x7, 0x5f51, 0xbee}, {0x5, 0xb, 0x6, 0x3800, 0x8, 0x9}, {0x3, 0x4, 0x8, 0x6, 0x3, 0x4}, {0x1a70, 0x2, 0x8, 0x400, 0xe05, 0x7}, {0xffff, 0xc4, 0x684e, 0x9, 0x81, 0x93c}, {0x2, 0x3, 0x2, 0xffff, 0x80000001, 0x101}, {0x4, 0x12ef, 0x8001, 0x1b, 0x2, 0xf1d00}, {0xfffffff2, 0xb82, 0x101, 0x6, 0x3, 0xff}, {0x4, 0x816f, 0xbee, 0x4, 0x0, 0x3}, {0xb, 0x10, 0x0, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x3, 0x81, 0x9}, {0xfff, 0x1, 0x6, 0x7, 0x4, 0x4a}, {0xb8b, 0x1, 0xb, 0xc, 0x40}, {0x4, 0xf1e0, 0x6ba2, 0x8001, 0x7, 0x416d}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0xa46238420b1f4f47}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x4}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x42b87ee76b9da29f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xd0, 0x572, 0x3}, 0x7f, 0x2, [{0xfffffff6, 0x5, 0x7, 0x9, 0x2, 0xd}]}, [{0x8001, 0x3, 0x4, 0x6, 0x9, 0x5}, {0x0, 0x2, 0x40, 0x7e2, 0xfffffffd, 0x7fffffff}, {0x8, 0x1, 0x8, 0x2, 0xb348, 0x400}, {0x101, 0x7, 0x8, 0x2, 0xfffffffa}, {0x6, 0x1, 0x414587ef, 0x8, 0xffffffff, 0x6}, {0x6, 0x9, 0x7fff, 0x9, 0x2, 0x8}, {0x7, 0x9, 0x6, 0x2, 0x1ff, 0x4}, {0xc, 0x5, 0x6, 0xffff, 0x1, 0x2}, {0x0, 0x1b4, 0xf, 0xf8b, 0x7, 0xca}, {0xb, 0x1, 0x5, 0x71, 0xc}, {0x0, 0x0, 0x7, 0x80, 0x66}, {0x8, 0xe4ee, 0x7, 0x6, 0x97, 0x1000}, {0x38ef, 0x6, 0x900000, 0x7, 0x0, 0x4}, {0x0, 0x5, 0xfffe00, 0xe2, 0xffffff00, 0x8}, {0x2, 0xe000, 0x7, 0x1, 0xffffff01, 0x80}, {0xd, 0x7fff, 0x15e, 0x1, 0x3, 0x7}, {0x6, 0xffffffff, 0x6, 0x1ff, 0x7, 0x3}, {0x7f, 0xfff, 0x8, 0xf4, 0x6c0, 0x2}, {0x5, 0x0, 0x8, 0x4, 0xffffffff, 0x5}, {0x400, 0x5, 0x0, 0x7, 0x1, 0x3}, {0x2, 0x8, 0x6a, 0x4, 0x36, 0x8001}, {0x3ff, 0x1, 0x0, 0xffffffff, 0x7, 0x6}, {0x2, 0x8fe, 0x123, 0xd, 0x5, 0x4}, {0xfffffff8, 0x2, 0x6, 0x2, 0x3, 0x6d2}, {0x7, 0xbee6, 0x6, 0x8000, 0x4, 0x1000}, {0x9, 0x9, 0x1, 0x2, 0x0, 0x1000}, {0x0, 0x5, 0xfffffe00, 0x5, 0x8, 0x5}, {0x784, 0x3, 0xfff, 0xfc, 0x200, 0x7fffffff}, {0x9, 0xfffff801, 0x7, 0x686, 0x80000001, 0x9}, {0xc, 0xc597214, 0x9, 0x170e, 0x23, 0x6}, {0x80000000, 0x0, 0x7, 0x3, 0x3, 0xffff}, {0x7fffffff, 0x3, 0x9, 0x6c1, 0xdb, 0xff}, {0x1, 0x8, 0x8001, 0xb, 0x7, 0x3}, {0x10001, 0x2, 0xf, 0x7, 0x100, 0x7}, {0x9, 0x7, 0x0, 0x8, 0x5a40, 0x4}, {0x7fff, 0x39, 0x3, 0x9, 0x236, 0x8}, {0x4, 0xfff, 0x0, 0x8001, 0x40, 0x8}, {0x101, 0x8000, 0x6, 0x1, 0xc57f, 0x1}, {0x1, 0x8903, 0x4, 0x8, 0x1c98}, {0x518e31c, 0x5, 0x1000, 0x2, 0x5, 0x4}, {0x7, 0x2, 0xfd, 0x6, 0x5, 0x1}, {0x800, 0x7fffffff, 0x3, 0xfffff800, 0x10000, 0x8}, {0xc, 0x1, 0x401, 0x3, 0x6d, 0x978c}, {0xa1, 0x9a, 0x44d, 0x9, 0x194, 0x5}, {0x7, 0x0, 0x9, 0xc, 0x6e, 0x7}, {0x5, 0x5, 0x9, 0x101, 0x4, 0x5}, {0x4, 0x0, 0xfffff697, 0x6, 0x6, 0x3}, {0xe, 0x10001, 0xc637, 0x5, 0x7ff, 0x2}, {0x5, 0x0, 0x3, 0x1, 0xf, 0x87}, {0x2, 0x3, 0x7, 0xa, 0x80000000, 0x9}, {0xfffff461, 0x7ffbffff, 0x71, 0x2, 0x80000001, 0xc}, {0x3, 0x3, 0x8000, 0x7f, 0x9, 0x2}, {0x8, 0x3, 0xffff, 0xe220, 0x9, 0x96}, {0x3, 0x9, 0xffffcaec, 0x6, 0x8, 0xfffffffe}, {0x1, 0x7f, 0x1, 0xffffc3a6, 0x401, 0x9}, {0x40000000, 0x6, 0xffff, 0x7, 0x7, 0x2}, {0xbab7, 0x5, 0x6, 0x1a, 0x5, 0x2}, {0x0, 0xfffffffa, 0x1, 0x80000001, 0x28c, 0x40}, {0xebb, 0x8001, 0x4, 0xa, 0x4, 0x3}, {0x2, 0x35a, 0x2, 0x4, 0x4, 0x3}, {0x2, 0x2, 0x5, 0x3, 0x5, 0x8}, {0x2, 0x4, 0x4, 0xf3, 0x9, 0x3}, {0x2, 0xc51, 0x4, 0x4, 0x3ff, 0x7}, {0xf, 0x0, 0x8, 0x6, 0x1cc, 0x2}, {0x1, 0x5, 0x1, 0x9, 0x100}, {0x5, 0x3, 0x5, 0x8, 0x9, 0x6}, {0x4, 0x4, 0x2, 0x9356, 0x9, 0x392}, {0x400, 0x5ba5, 0x5, 0x3, 0x0, 0x9}, {0xffff1b0f, 0x8001, 0xffffdb93, 0x81, 0xffff, 0x2}, {0x9, 0x5, 0x7, 0x1, 0x8, 0xf}, {0x9, 0x4, 0x80000001, 0x2, 0xfaca, 0x28e}, {0x2, 0x4, 0x3, 0x9, 0x4, 0x37}, {0xdd, 0xb7a0, 0x7f, 0x7, 0x1ff, 0xff}, {0xb, 0x9, 0x1, 0x3, 0x100, 0xf4}, {0x2, 0x6, 0xc1, 0x9, 0x1000, 0x2}, {0x8, 0x3, 0x9, 0x0, 0x0, 0x9e}, {0x8, 0x10001, 0x40ee, 0x7, 0x3, 0x7f}, {0x7, 0x8, 0x4, 0x7f, 0x6a79, 0x4}, {0x487d, 0x0, 0x10000, 0x2a, 0x100, 0x64c4686e}, {0x8, 0xce7a, 0xb, 0x23c9036d, 0x7, 0x10}, {0xff, 0xcfb, 0x80000000, 0x1, 0xe, 0x4d4}, {0x31e0e21f, 0x6, 0x7bd, 0x5, 0x1000, 0x8}, {0xe, 0xb667, 0x610, 0x8, 0x8, 0xd2c5}, {0x80000000, 0x7, 0x7, 0x1ff, 0xa694, 0x4}, {0x2, 0x9, 0x1a1, 0x200, 0xf072, 0xfffff72e}, {0x7, 0x8000, 0x5, 0x4, 0x7, 0x1}, {0x8d56, 0x3, 0xb9, 0x9, 0x10001, 0xfffffffd}, {0xc, 0x4, 0x7, 0xafb6, 0x3a48, 0x8}, {0xf, 0x6, 0x2, 0xa638, 0xffffffff, 0x6}, {0x1, 0x80, 0x200, 0x1ff, 0x3, 0x4}, {0x4, 0x22b4, 0x3, 0x3, 0x9, 0x3a}, {0xe, 0x800, 0x9, 0x6, 0x92, 0x800}, {0xb, 0x4, 0x8, 0x7, 0xed70, 0x2}, {0x1, 0x6ef, 0x80000000, 0x10000, 0x80, 0x5}, {0x8, 0x7fffffff, 0xe5f9, 0x5, 0x80000001, 0x8}, {0x1, 0x10000, 0xb, 0x8000, 0x2, 0xc7}, {0x0, 0x5, 0x8, 0x1f31, 0x61}, {0x7ff, 0xd292, 0x8, 0xfffffffc, 0x3, 0x8}, {0x0, 0x2, 0x1000, 0xffffff98, 0x4800000}, {0x401, 0x9, 0x4, 0x4, 0x4, 0x10001}, {0x5, 0x9, 0xfffffff9, 0x7, 0x9}, {0xe, 0xd94, 0x4, 0x2, 0x4, 0x9}, {0x3ff, 0x3, 0x7, 0xf0f0, 0x7, 0x10}, {0x80, 0xff, 0x101, 0x4, 0x6, 0x8001}, {0x120000, 0x4, 0x7, 0x73a, 0xf48e, 0x1}, {0x10, 0x7, 0x3, 0x0, 0x1, 0xfffffff7}, {0x3ff, 0x9, 0x9e, 0x8, 0x5, 0x7}, {0xa4, 0x2, 0xffff, 0x9, 0x7}, {0xb, 0x9, 0x40, 0xd8, 0x1, 0x3400000}, {0x2, 0x8e, 0x68fc, 0xff, 0x6, 0x5}, {0x2, 0x0, 0x3, 0x9, 0x275, 0x2}, {0x6, 0x1ff, 0x10, 0x5, 0x400, 0xfff}, {0x4, 0x0, 0xffffff80, 0x80000001, 0x1, 0x6}, {0x4, 0x6, 0x0, 0x1000, 0x7feb, 0x4}, {0x4, 0x520c, 0x618, 0x3, 0x6, 0xa}, {0x3, 0x81, 0x0, 0x9, 0x5, 0xffffffff}, {0x7, 0x7, 0x3, 0x0, 0x80, 0x1}, {0x40, 0x3, 0x3, 0x101, 0x0, 0x31}, {0x2, 0xfffffff8, 0x9, 0xf, 0x1, 0x1}, {0xfffffff9, 0x5, 0xb, 0x1, 0x8, 0x1}, {0xfffffff9, 0x7, 0xff, 0x7, 0x8, 0x6}, {0x5, 0xffffffff, 0x7f80000, 0x8001, 0x1000100, 0x4}, {0x5, 0x8, 0x5, 0x5, 0x4, 0xfffffff7}, {0x0, 0xffffff9e, 0x6, 0x5, 0x4, 0x40}, {0x4, 0x0, 0x4, 0x7, 0x47, 0x4}, {0x8, 0x6, 0x81, 0x5, 0x8e6c, 0x6}, {0x8, 0x9, 0xd, 0x7, 0xfffffffd, 0x3}, {0xc9f, 0x1, 0x3, 0x2, 0x5, 0x271}], [{0x3, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x9a2bdb8565d0b58f, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x38776387de302820}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x2dbe85d22b710ec5}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xfff, 0x5, 0x7, 0x10, 0x4}, 0xe, 0x8, [{0x5, 0x7, 0x3, 0xb5b, 0x8, 0x3}, {0x7ee, 0xa1, 0xffffff7f, 0x4, 0x2, 0xfff}, {0xffffffff, 0x2, 0x2, 0x9, 0x4, 0x3ff}]}, [{0x6, 0x4e98, 0x7c159ba2, 0x9, 0xd9, 0x80}, {0x7f, 0x9, 0x9, 0xfffffffb, 0x100, 0x6}, {0x4, 0x8, 0x4, 0x2, 0x80000001, 0x5}, {0xfe, 0x7fffffff, 0x100, 0x1, 0x0, 0x9d}, {0x0, 0x2e, 0x6, 0x8, 0xba48, 0x1ff}, {0x1, 0xb5, 0x5, 0x2, 0x7, 0xfffffff7}, {0x9, 0x5, 0xf69, 0x8, 0x401, 0x9}, {0x39086aa7, 0xe0, 0x6, 0x1, 0x95, 0x4}, {0x5, 0x8, 0x2, 0x81, 0x4, 0x7}, {0x7, 0x7fffffff, 0x7fff, 0x0, 0x1, 0x1}, {0x8851, 0x8, 0xffff, 0x5, 0x5, 0x2}, {0x0, 0xffff, 0x8, 0x9, 0x6, 0x5246}, {0x7, 0x7fff, 0x9, 0x7d, 0xb8e, 0x2}, {0xca43, 0x311, 0x800, 0x7fffffff, 0x8001, 0xdf}, {0x698100, 0x5, 0x9, 0x1, 0x800, 0x4}, {0x10000, 0x5, 0x5, 0xc01e, 0x7, 0x400}, {0x5, 0xeb4, 0x4, 0x0, 0x4, 0x5286}, {0x1, 0x9, 0x5, 0x2, 0x0, 0x55}, {0xe9, 0x101, 0x5, 0x2, 0x8, 0x85}, {0x0, 0x2, 0x10001, 0x3ff, 0x99, 0x7}, {0x0, 0x2, 0x1, 0x3, 0x8, 0x9}, {0x6, 0x2, 0x10, 0x9eb, 0x8, 0x949f}, {0x7, 0x7, 0x9, 0x7, 0x40, 0x7}, {0x5, 0x0, 0x4716, 0x4, 0x1, 0x1}, {0x0, 0x7bd, 0x7fff, 0x180a, 0x7fff, 0x7}, {0x45, 0xb, 0x4, 0xb, 0xcb7, 0x6}, {0x7, 0x2374, 0x10, 0x7, 0x9, 0x7}, {0x6, 0x0, 0x8001, 0xff, 0x3, 0x8}, {0x1, 0x8, 0x7, 0xe35, 0x8, 0x7f}, {0x5, 0x6, 0x7, 0xffffffff, 0x401, 0x8}, {0x2, 0x2a0a, 0xea6e, 0x1, 0x8, 0x80}, {0xffffffff, 0x3ff, 0x1, 0x9, 0xf, 0xff}, {0xda, 0x66bf, 0x7, 0xd4, 0x7, 0x5}, {0x8, 0x80, 0x40, 0x10001, 0x0, 0x7ff}, {0x0, 0x0, 0x8, 0x6, 0x5, 0x6}, {0x4, 0x1, 0x9, 0x5, 0x5, 0x3e}, {0x80000001, 0x8, 0x38e, 0xac74, 0x7, 0x10000}, {0x7, 0x3, 0x7, 0x9, 0x49, 0x7fffffff}, {0x3, 0x401, 0x9, 0x0, 0x0, 0x5}, {0x9, 0x6, 0x3, 0x80000001, 0x4, 0x1}, {0x5, 0x0, 0x6, 0x8, 0x80000000, 0x7}, {0x584, 0x7fffffff, 0x5, 0x8000, 0xfffffffc, 0x4}, {0x4, 0x8, 0x3ff, 0x3, 0x1, 0x8}, {0x8001, 0x8, 0xff, 0x5, 0x7f, 0x80000001}, {0x2, 0xc, 0x101, 0x7, 0x6, 0x7}, {0x1, 0x5, 0x101, 0x1, 0x94e, 0x4}, {0xfe, 0x6, 0x5f2, 0x3, 0xfffff000}, {0x9de2, 0x4, 0x80000001, 0x2, 0x6, 0x3}, {0x9, 0x3, 0x5, 0x0, 0x70, 0x4}, {0x213a, 0x8, 0x2, 0x5, 0x7, 0xb2}, {0xfffffff7, 0x1, 0xf9ec, 0x2, 0x7ff, 0x40000000}, {0x7, 0x10001, 0x7, 0x1ff, 0x3, 0x2}, {0x6, 0x2, 0x80000001, 0x0, 0xd, 0x7ff}, {0x4, 0xc, 0x3, 0x6, 0x7, 0x3}, {0x9, 0x0, 0x5254, 0x58, 0x4, 0x927}, {0xffffff74, 0x100, 0x2, 0xfa, 0x81}, {0x9, 0x3, 0x79000000, 0x3, 0x8, 0xfffffffc}, {0x200, 0x9, 0x8d2c, 0xfffffffc, 0x2, 0x10000000}, {0xa, 0x2, 0x40, 0x5, 0xffffffaa, 0x18}, {0x0, 0x3, 0x5, 0x6, 0x0, 0x9515}, {0xd, 0x4, 0x2, 0x7, 0x80, 0xdc}, {0x6, 0x1, 0x1, 0x9, 0x7f, 0x3}, {0x54, 0x3, 0x1, 0x5, 0x800, 0xb}, {0xfffffff7, 0x6, 0x8, 0xffffffff, 0xa, 0x7}, {0x7, 0x9, 0x1, 0x8c, 0xff, 0x795000}, {0x6, 0x80, 0x1, 0x4, 0x7ff, 0x74}, {0x3, 0x7, 0x9, 0x6, 0x4, 0x800}, {0x1, 0x3, 0x8, 0x0, 0x8, 0x8000}, {0xfff, 0x5b, 0x6, 0x8, 0xffffffff, 0x1}, {0x0, 0x0, 0x3, 0x9, 0xb, 0x400}, {0x5, 0x4, 0x3, 0x4f3, 0x9, 0x1ff}, {0x7, 0x401, 0x5, 0x3, 0x6, 0x3}, {0x6, 0x2, 0x4, 0x0, 0x100, 0x6}, {0x35e, 0xd, 0x9, 0x800, 0x4, 0x3}, {0x4, 0x4, 0x10, 0x5, 0xff, 0x3}, {0x2, 0x0, 0xa, 0x80, 0x7f, 0x3}, {0xd110, 0x200, 0x7, 0x8, 0x2d, 0x3}, {0x6, 0x2, 0xda843d7, 0x0, 0x188316d3, 0x8}, {0xb, 0x2, 0x1977, 0xdbe, 0x4, 0x9}, {0xfffffffa, 0x5, 0x1, 0x1, 0x6, 0x7}, {0x7fff, 0x8000, 0x101, 0x4, 0x1, 0x8}, {0x3, 0x10001, 0x9, 0x4, 0x8, 0xffff}, {0x7fffffff, 0x7d79, 0x1, 0x8, 0x9, 0xc}, {0x2, 0x9, 0xb1f4, 0x3, 0x20000000, 0x1fa6}, {0x81, 0x4, 0x80000001, 0x6, 0xc, 0x800}, {0x80, 0x100, 0x0, 0x0, 0x0, 0xfff}, {0x4, 0x8, 0x8, 0x1, 0x5, 0x5}, {0x3, 0x1, 0x5, 0x9, 0x30e6, 0xa}, {0x8, 0x10, 0x5, 0x2, 0x6, 0x8}, {0x83df, 0x4, 0x9, 0x25f1, 0x1, 0x100}, {0x9, 0x3ff, 0x3, 0x6, 0x5, 0x3}, {0x9, 0x80, 0x1, 0x4, 0x6}, {0x0, 0x4270, 0x9, 0x9, 0x9, 0x2}, {0x5, 0x6d5, 0x8, 0xc0, 0x6, 0x3}, {0x40, 0x5, 0x7ff8, 0x4, 0x4, 0xfffffffc}, {0x8, 0x200, 0x5, 0x9, 0x200, 0x8001}, {0x5, 0x80, 0x100, 0x5, 0x7, 0x5d2}, {0x3, 0x8, 0x5, 0xfffffe00, 0x200}, {0xd, 0x1, 0xbb, 0x4, 0x4, 0x2a7}, {0x1, 0x1c000, 0x3, 0x0, 0x4ba2, 0x3}, {0x80000001, 0x8, 0x1000, 0x1, 0x5, 0x6}, {0x6, 0x6000000, 0x80000000, 0x2, 0xfffffff9, 0x7}, {0x2, 0x233, 0x6, 0x134, 0xff, 0x7}, {0x0, 0x7, 0xffffffff, 0xff, 0x2, 0x5}, {0x4, 0x10000, 0x2, 0x0, 0x20ffff, 0x4}, {0x2, 0x7f, 0xffffffff, 0x1, 0x7, 0x80000001}, {0x2, 0x10, 0x8, 0x1fb, 0xee, 0x4}, {0xfffff8b3, 0xff, 0xe, 0x9, 0x1, 0x9}, {0xb, 0x3, 0x7, 0x8, 0x8, 0x800}, {0x4, 0x0, 0x1, 0x1, 0x8000, 0x1}, {0x0, 0x7fffffff, 0x4, 0x800, 0x4, 0x7a9b}, {0x3, 0x6, 0xffff3c3c, 0xaf5a, 0x2, 0xbe0}, {0xec, 0x4f, 0x6, 0x2000, 0x8, 0x1}, {0x3, 0x2, 0x90000000, 0x411, 0x1}, {0x1, 0x1ff, 0x4, 0x7, 0x9, 0x5}, {0x2, 0xe, 0x2, 0x9, 0x9, 0x6}, {0x88ac, 0x401, 0x40, 0x6, 0x9, 0x4}, {0x7fff, 0x1a, 0x8, 0xe468000, 0x400, 0x518}, {0x8, 0x2, 0x74, 0x7, 0x64d6, 0x8000}, {0x3, 0x8, 0x7, 0x1, 0x10001, 0x401}, {0x8, 0x3, 0x464, 0x2, 0x9, 0x81}, {0xa2, 0x3, 0x2, 0x7f, 0x5, 0x7}, {0x2, 0x2bec41ce, 0x0, 0x5, 0x1000, 0x401}, {0x10001, 0x6, 0x2, 0x7, 0x1, 0xe}, {0x1, 0x6, 0xfff, 0xd, 0x0, 0x90}, {0x5, 0x0, 0x1, 0x9, 0x2, 0x2}, {0x4, 0x3, 0x9, 0xe, 0xbf, 0xfffffff8}, {0x9, 0x6, 0x7, 0xd1, 0x81, 0x9}], [{0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x353c1e9c68583be0}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {0x7}, {0x2}, {0x2, 0x1}, {0x1}, {}, {}, {}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x22bf1690da1ec7cf}, {0x6}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0xf}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x4}, {}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x4}, {0xe, 0x1}, {0x3, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x2ddc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) 6m38.630078367s ago: executing program 9 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res(&(0x7f00000001c0), 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x90001) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18d0010}) io_uring_enter(0xffffffffffffffff, 0x0, 0x15ef, 0x4d, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1832c1, 0x9c37611dc13d0da6) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) sendto$inet6(r6, &(0x7f0000001c80)="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", 0x700, 0x4000000, 0x0, 0x0) 6m36.116322189s ago: executing program 9 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCSPGRP(r5, 0x8902, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[], 0x30}, 0x4004000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x2000, 0x42) preadv(r7, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) 6m30.773647713s ago: executing program 9 (id=488): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x149a82, 0x40) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x0) write$tcp_congestion(r3, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 6m29.49166668s ago: executing program 7 (id=418): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x48001) socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_clone3(&(0x7f0000003ac0)={0x20000, 0x0, &(0x7f0000000100), &(0x7f00000003c0), {0x16}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000001980)=""/46, &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r3, 0x0) 6m25.562791948s ago: executing program 7 (id=493): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) socket$inet6_sctp(0xa, 0x5, 0x84) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) set_mempolicy(0x3, &(0x7f0000000140)=0x2, 0x4) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x8000000000080000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x81}, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003540)={0x2020}, 0x2020) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, 0x0, 0x4000000) 6m21.01749062s ago: executing program 7 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0xdecb0e7b592b9954) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000200)}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r6, 0x49) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) shutdown(0xffffffffffffffff, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r8 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r8, 0xb) 6m17.305204137s ago: executing program 7 (id=499): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x80) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x400000000010, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r9, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x9, 0x3c, 0x0, 0x3, 0x1002ba, 0x5, 0x6, 0x80, 0x7fffffff, 0x50000000, 0x1000, 0x1002, 0x10001, 0x6, 0x1, 0x19, {0x7, 0x3}, 0xfb, 0xd}}) 6m9.217192053s ago: executing program 48 (id=488): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x149a82, 0x40) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x0) write$tcp_congestion(r3, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 5m59.122208384s ago: executing program 49 (id=499): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x80) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x400000000010, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r9, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x9, 0x3c, 0x0, 0x3, 0x1002ba, 0x5, 0x6, 0x80, 0x7fffffff, 0x50000000, 0x1000, 0x1002, 0x10001, 0x6, 0x1, 0x19, {0x7, 0x3}, 0xfb, 0xd}}) 5m59.064549055s ago: executing program 0 (id=517): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r2, 0x0, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r3, r3, 0x0, 0x8000000f3aa6ea) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x1, @local}, 0x4a, {0x2, 0x0, @local}}) 5m57.033698229s ago: executing program 0 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md0\n', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='none\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='raid1\n', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='2\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='1:0\n', 0x4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='active\n', 0x7) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000001300)='1:1\n', 0x4) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) close(r8) 5m52.149555646s ago: executing program 0 (id=524): syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x0, 0x3}, 0x0, &(0x7f0000000140), 0x0) socket$inet6(0xa, 0x805, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5m48.853246843s ago: executing program 0 (id=527): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(0x0, 0x80) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='hpfs\x00', 0x20920d1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) r4 = open(&(0x7f0000000000)='./file0\x00', 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x50, 0x3, 0x8, @private0, @private0, 0x7800, 0x20, 0x7bed, 0x588}}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000840)) 5m47.107564667s ago: executing program 0 (id=528): syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffffffffffeb3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() keyctl$setperm(0x5, 0x0, 0x280104) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x2fe7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x5}, 0x4) r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000500)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x200c0050}, 0x0) 5m44.858394482s ago: executing program 0 (id=530): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone3(&(0x7f0000003ac0)={0x20000, 0x0, &(0x7f0000000100), &(0x7f00000003c0), {0x16}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000001980)=""/46, &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 5m27.554502202s ago: executing program 50 (id=530): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone3(&(0x7f0000003ac0)={0x20000, 0x0, &(0x7f0000000100), &(0x7f00000003c0), {0x16}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000001980)=""/46, &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 4m18.31511961s ago: executing program 2 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400c631", @ANYRES16=r1, @ANYBLOB="0100ffffffff0000400001000000"], 0x14}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r5, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{}, [@printk={@lx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x2, 0x5, 0x400, 0xb8, 0xd30048, r3}) 4m5.385566878s ago: executing program 2 (id=615): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = io_uring_setup(0x5923, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0xffffffffffffffff, 0x42) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x43f7, 0x6, 0xfffffffe, 0x87, 0xffffffff, 0x40}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r2, 0x5608, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='auto', 0x4) r7 = syz_io_uring_setup(0x1f38, &(0x7f00000005c0)={0x0, 0xdf7d, 0x800, 0x0, 0x8000002a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x6516, 0x6993, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) writev(r2, &(0x7f0000000000), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1d, @local}, 0x10) 4m1.168499801s ago: executing program 2 (id=605): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)}, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x41) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000240)={{}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x15d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) unshare(0x24020400) fcntl$notify(r5, 0x402, 0x40000029) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac14"], 0x1c) 3m59.448631693s ago: executing program 2 (id=606): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x80000) epoll_pwait2(r4, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, &(0x7f0000000540), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffdfff, 0xffffffff, 0x0, 0x4000001, 0xffffff7f, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x402, 0x0, 0xfffffffe, 0xffffffff, 0xffffffff, 0x4, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x5, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x3, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0xc0844123, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r7, 0x0, &(0x7f0000001300)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 3m56.244884165s ago: executing program 2 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) capset(0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 3m54.221885513s ago: executing program 2 (id=609): socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7ff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x1aa2, 0x2, 0xe, 0x8], 0x0, 0x0}, 0x78) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x100, 0x8, 0x277}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) bind(r0, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc}, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 3m43.250871691s ago: executing program 5 (id=625): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r6, &(0x7f0000000280)='1', 0x1) 3m40.146017671s ago: executing program 5 (id=627): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) connect$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x1e) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) 3m37.16577262s ago: executing program 51 (id=609): socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7ff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x1aa2, 0x2, 0xe, 0x8], 0x0, 0x0}, 0x78) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x100, 0x8, 0x277}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) bind(r0, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc}, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 3m31.953431051s ago: executing program 5 (id=632): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x2c, 0x5f, 0x333, 0x1, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x5}, {0x2, 0x2}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d0000080002000000000008000900e8"], 0x38}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000041000500020000000000000003010000e8030000140009000102030405060708090a0b0c0d0e0f10"], 0x2c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r9, &(0x7f00000022c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f0000002280)="9c", 0x1}], 0x2) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r8, 0x0, 0xfffffeb2) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, 0x0, 0x0) bind$tipc(r7, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) shutdown(r0, 0x0) 3m27.637370808s ago: executing program 5 (id=635): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}, "00000000c00000d2"}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f000000d2c0)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009b80)=""/4096, 0x1000}, 0x7}], 0x2, 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000c14010025bd7000fcdbdf2508003d0036ad9e05a90000000008003d00000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_robust_list(&(0x7f0000000400)={0x0, 0x4}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000400)) connect$bt_sco(r2, &(0x7f0000000100), 0x8) 3m23.369574865s ago: executing program 5 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) capset(0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 3m19.538380956s ago: executing program 5 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, &(0x7f0000000700)='bind', 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r3, 0x80000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) shutdown(r5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) 3m2.4796566s ago: executing program 52 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, &(0x7f0000000700)='bind', 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r3, 0x80000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) shutdown(r5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) 53.477139315s ago: executing program 8 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="060000001000"}) clock_gettime(0x9, &(0x7f0000000280)) r6 = socket$inet(0x2, 0x2, 0xfffffffd) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000740)='dummy_udc.0', 0xb) write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x10000007, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0xf, 0x8, 0x800, 0x6, 0x401, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x8000001, 0x5, 0x1, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x3, 0x9, 0x2, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x805, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x9, 0x3, 0x7, 0x39b7c38a, 0x80000015, 0x12, 0x802, 0xc, 0x0, 0x2329, 0x9, 0x3, 0x7, 0x6, 0x8, 0x24a, 0x2, 0xfffffff7, 0xfffffffb, 0x3, 0x8, 0x8, 0x80, 0x6, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x2, 0x200, 0x9a, 0xffffff00, 0x100007ff, 0x6, 0x1, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x3, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x4, 0x40000, 0xfffffffc, 0x5, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x20001, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x408b5, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x3, 0x6, 0x8007c12, 0x2, 0x1, 0x0, 0x5, 0xe, 0x3, 0x4, 0x8, 0xfff, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x10008, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0xc, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfffffffd, 0x2, 0x66608000, 0x7, 0x7fb, 0x8, 0x0, 0x8, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x11, 0x1000, 0xffffffff, 0x100, 0x3, 0x20000000, 0x8, 0x3f15, 0xffff, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 51.168181194s ago: executing program 8 (id=749): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) fsopen(&(0x7f0000000140)='erofs\x00', 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TIOCSBRK(r3, 0x5427) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x5, 0x0, 0x19, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x19}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x402, 0x1, 0x5, 0xdb}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0xff, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x7, 0x8, {0x7, 0x25, 0x1, 0xc, 0x3, 0xfffd}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=@updpolicy={0x190, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0x1}, [@algo_crypt={0xd8, 0x2, {{'ctr-cast5-avx\x00'}, 0x480, "2d076e948ebabbad72063224b9bef9305c68df7e3a68fdbb47ac9e8fe6775cf9ddd7766a7e1e42dd2b1d9f2d3203126c0ec4f2f839eade5791325ee4c852be50eaaa65f3d5b71d4f1dab75eb3306ce9e372dfc4f4712c785961d6fbc6fadf33d425ab40528b2e24507817e4dd78d65fdbb4716077f2da0c08ba85ad892cd16416e660541a01ca782245d77490630a179"}}]}, 0x190}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) 43.683659145s ago: executing program 8 (id=755): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 41.286218385s ago: executing program 8 (id=761): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000ff01", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000000000000009220c84689b645a6b2c0c66df5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x929b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x1d8, 0xfffffffffffffffd) close(r4) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) accept4$unix(r5, &(0x7f00000010c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000005c0)={0x0, 0xfffffffffffffd98, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r12, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x8d0) socket$inet6_sctp(0xa, 0x1, 0x84) 39.232642591s ago: executing program 8 (id=765): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{0x0}], 0x1) sendfile(r5, r6, 0x0, 0x201f00) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 36.160729617s ago: executing program 8 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x138) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0xabd7ae39f84e0bf8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e008d2a0000010000", @ANYRES32=0x0, @ANYBLOB="0000000003d48aa1c310fff51bac49e02c451decf40f000000ceabf1e97c2d4205ed7e7b4f2d5ff6727445d7efb159e8bb04b7b8df41dd29036d6729ef6acfd0ca8287c80fec1c5b35103119be17cf1dd1f33f007aaad0389862a2394f7da4c52a68c7d4d5b17133"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0), 0x0) migrate_pages(0x0, 0x3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="44000000410001000300000000000000030100002a0000002c", 0x19) 24.437667247s ago: executing program 4 (id=780): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x212, 0xffffffff, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "ee6a4130f0506500"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r7, 0x2000000008, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18.934735783s ago: executing program 53 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x138) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0xabd7ae39f84e0bf8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e008d2a0000010000", @ANYRES32=0x0, @ANYBLOB="0000000003d48aa1c310fff51bac49e02c451decf40f000000ceabf1e97c2d4205ed7e7b4f2d5ff6727445d7efb159e8bb04b7b8df41dd29036d6729ef6acfd0ca8287c80fec1c5b35103119be17cf1dd1f33f007aaad0389862a2394f7da4c52a68c7d4d5b17133"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0), 0x0) migrate_pages(0x0, 0x3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="44000000410001000300000000000000030100002a0000002c", 0x19) 18.81180715s ago: executing program 4 (id=785): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000020601080000000000000000000000001400078008001100050005190a0000000000000000"], 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, 0x0, 0x56592a445bc89e6d) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_pidfd_open(0x0, 0x0) 17.5540181s ago: executing program 6 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x138) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0xabd7ae39f84e0bf8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e008d2a0000010000", @ANYRES32=0x0, @ANYBLOB="0000000003d48aa1c310fff51bac49e02c451decf40f000000ceabf1e97c2d4205ed7e7b4f2d5ff6727445d7efb159e8bb04b7b8df41dd29036d6729ef6acfd0ca8287c80fec1c5b35103119be17cf1dd1f33f007aaad0389862a2394f7da4c52a68c7d4d5b17133"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) write(r8, &(0x7f0000000000)="44000000410001000300000000000000030100002a0000002c", 0x19) 16.050709562s ago: executing program 6 (id=788): syz_open_dev$loop(0x0, 0x4, 0x901) 15.993622641s ago: executing program 3 (id=789): io_setup(0x2278, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xb00}}}}}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 15.100797871s ago: executing program 6 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x138) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0xabd7ae39f84e0bf8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e008d2a0000010000", @ANYRES32=0x0, @ANYBLOB="0000000003d48aa1c310fff51bac49e02c451decf40f000000ceabf1e97c2d4205ed7e7b4f2d5ff6727445d7efb159e8bb04b7b8df41dd29036d6729ef6acfd0ca8287c80fec1c5b35103119be17cf1dd1f33f007aaad0389862a2394f7da4c52a68c7d4d5b17133"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) migrate_pages(0x0, 0x3, 0x0, 0x0) 14.999665575s ago: executing program 1 (id=791): setns(0xc9, 0x0) 13.756047243s ago: executing program 6 (id=792): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x156, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x2, 0x51}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd=r1, 0xffffffffffff8001, 0x0, 0x2, 0x4, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005000200e000"], 0x24}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r8 = mq_open(&(0x7f0000000000)='@+\\\x00', 0x40, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x7, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @initial, {0x5, 0x9}}, 0x1004, 0x2d, @random=0xffff, @val={0x1, 0x3, [{0x2, 0x1}, {0x4}, {0x12}]}, @void, [{0xdd, 0xe5, "020431af9d7723c8f3332ff1c3e02b87f91c08bbf08b0a59a1596ea6133a20101462c86133b46b3c49a1a47f87b721d86fd540c514856f33dafa91ee8d559307fef1e5c0eb19f7ab94cd050583c17b6210551a0ffbaf7f794aa501f29f614ff7aee04696b816da893cec70fe97f79e30edeab7d0a7e3365e36051955e3b3d3de1948e65d1384ae9ef3dbc0a84c1a7a6a3d20853c51e831eaac02d25b8294cd57773d829fdaa82dd44d4581389ed99f8d55e811ed0d739302cb81f823b4394d246b9d234bb5ec2a8a4c1c1bf80a762ffd5759635201baa5dcfad705596b10c0a42ac10eb703"}]}, 0x10a) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r9 = getpid() r10 = syz_open_procfs(r9, &(0x7f0000000040)='net/dev\x00') lseek(r10, 0x47ea, 0x667ffca8cf06c461) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0x3c, 0x32, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}}, 0x40041) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r12, &(0x7f0000000040)={0x23, 0x4, 0x3, 0xcc}, 0x10) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r13, &(0x7f0000000040)={0x23, 0x14}, 0x10) close_range(r11, 0xffffffffffffffff, 0x0) 13.743489588s ago: executing program 1 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCSPGRP(r4, 0x8902, 0x0) capset(0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[], 0x30}, 0x4004000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x2000, 0x42) preadv(r6, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) 11.412032457s ago: executing program 1 (id=794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000084000000060a010400000000000000000200000008000b40000000005c000480580001800a000100696e6e65720000004800028008000240000000810800034000000001080004400000003a080001400000000024000580090001006d6574610000000028000280080001400000000c08000240000000010900010073797a30"], 0x10c}}, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='/dev/nullb1', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) close(r5) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) 10.455605838s ago: executing program 3 (id=795): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x8d25b44dcc0592a6, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) listen(r8, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f0000002c00)=ANY=[@ANYBLOB="980d00002900000427bd7000fddbdf251c00000021023c8004000600df01a780040006009300ba0037f07affb2f4ea7ad2f7ec13653f8f6d1a0f01ab51ead40f25a354cc44bb83a1597d78489cefd09bfca9135937b68a74d6635fac033c0ebe949af6c4a37456c9541ec76a65abf5286d649e87dec9b580d235e856663ff16b503716f54153b04b1aefb8568f5f7e41c81dea15910b68c46530fec1b3109d8ce38da3363d1e6c794e0c85fea8c910a12463fc010351c6007eea3b5191019f74f3a4267f6cb972024f814de1d068d7ebe6b24ea0257931766cfecd470cf06af68d96b0b76ea76c1d13b7503495f0e88dd98714e2736141281dc0b0ea658faa28ce122756964539358b5e13e4f902a40f979db248de488f51cab7928727b49842361fcd923fb94856d9ad5ea186757f5f126886d21ceacda18150be80af36e18976e57f36fb1bcbf569e98a0745103f40d93fd368cbda5c0145a05925acbca69e2298759cfd23bb106c10d116e7aa927ff71e488b59614951128a7a4fac50d41b5c6d7c58b06f7434c29f0719966528160fd811e6075fce2d6d0bd2701d410700e4027ac9bc159343d04356c253a4d41f9d8b95fee130f2e3d633c0852c6aba50dfe4f17755d4afe3c9f70bac9f03df1e222ac7a4239b42fd57866856fbec70d88a759b2731146d96587eab31d2ebce71080a0be1d5c6876fc44f640007557ed3051dc8d8af9f30574a367b992a3d5fb2ff4433dee49a25e61a996328950400d580080004000180000008003600", @ANYRES32=0x0, @ANYBLOB="040036800000000800ab00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0xd98}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r11, 0x0) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000540)={{r0}, "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"}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r1, 0x3b90, &(0x7f0000000500)="2800000000000000efbeadde0300000005") close_range(r0, 0xffffffffffffffff, 0x0) 9.359091878s ago: executing program 3 (id=796): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r5 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) r6 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r7, &(0x7f0000000240)='1', 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000003142b0c2bbd7000ffdbdf250900020073797a300000000008004100727865001400330076657468315f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 8.955326718s ago: executing program 1 (id=797): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x13, 0x80000001, 0x76, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x40, 0x10, 0xfffffe01, 0x1}}) r1 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x83) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x200) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000040)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x20000, 0xb) fcntl$notify(r6, 0x402, 0x80000002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}}, 0x65) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 8.144211605s ago: executing program 3 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x2e9, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r3, &(0x7f0000000300)="89", 0x3f80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x4, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x80040, 0x0) read(r6, &(0x7f0000000240)=""/93, 0x24) 8.127708781s ago: executing program 6 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCSPGRP(r4, 0x8902, 0x0) capset(0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[], 0x30}, 0x4004000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x2000, 0x42) preadv(r6, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) 6.447170354s ago: executing program 6 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) syz_open_dev$loop(0x0, 0x4, 0x901) timer_create(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000003900), 0x0, 0x102, 0x0) unshare(0x20000600) r5 = userfaultfd(0x80001) setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48) signalfd4(r6, &(0x7f0000000100)={[0xc35]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) epoll_create(0x8) unshare(0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.250115981s ago: executing program 4 (id=801): syz_open_dev$loop(0x0, 0x4, 0x901) 5.061066199s ago: executing program 3 (id=802): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00007cb000/0x2000)=nil, 0x2000}, 0x2}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r1 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x2, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @remote}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0xfff1, 0xa}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000890) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x10, 0x1, 0x8000000) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r9, &(0x7f0000000000)=""/34, 0x22) getdents(r9, 0xffffffffffffffff, 0x5a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r5, 0x4, 0xfe, 0x53, 0x7, 0x58, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0x1}}) 4.759860014s ago: executing program 4 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x138) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0xabd7ae39f84e0bf8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e008d2a0000010000", @ANYRES32=0x0, @ANYBLOB="0000000003d48aa1c310fff51bac49e02c451decf40f000000ceabf1e97c2d4205ed7e7b4f2d5ff6727445d7efb159e8bb04b7b8df41dd29036d6729ef6acfd0ca8287c80fec1c5b35103119be17cf1dd1f33f007aaad0389862a2394f7da4c52a68c7d4d5b17133"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) migrate_pages(0x0, 0x3, 0x0, 0x0) 4.631056969s ago: executing program 1 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCSPGRP(r4, 0x8902, 0x0) capset(0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[], 0x30}, 0x4004000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x2000, 0x42) preadv(r6, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) 2.38632498s ago: executing program 1 (id=805): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)="257f61ceeb5d130d3509ed32f1b0d4e5e1fd1f96dd006e646220c1149bbfe04df93f2f3339f9b69854cbbf311a020441e1b4e2dd7f918459a85a8df6cb35505144e0f7dce1fb46", 0x47) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000005c0)={0x3, &(0x7f0000000240)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f0000000b40)={r6, 0x2}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000980)={'wg1\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000180)="325981539deaf7b87be39432908c146c2adb58ddaca3ddf6a37e611e4783f7b3b3085dab858ce3b490409d079f25b1ac00292535abb2236db29884c296", 0x3d}, {&(0x7f00000002c0)="14f4bb7f26044baa041fb3eda3c1b3606dd11c27c2421a1d04bf8777b5c5b19ef057edc6eb23b55898a88f2a25683e8ebd9a90db06e0eb5353d06782894dceb29acee682a22ce979a82e0f1ffd4c39e392115c51f96a953989d133d51ffe3c7ed40a750da78f6c2a494203c1c6ffb5a39d9d73ac40cf0ec5f601ee4a109100ff778950a0d79db1219729816ffca5237759629f6831c05915ad2eba19f978e7d929ba273b50ab8bff790983bc24ad14d99c", 0xb1}, {&(0x7f00000003c0)="1b41de1699c6a1094eda8c0fe1bced695b9bc8c71e39ea1b40422c0afff1bb6426c114c33e4a7fcea1de365f43f97e120735da2386d4c99b0f633a6e655d73ace9dcb98ab911aedfcd5f83f1d22cf706394c5bfc803578761e87643f2f140862e26d849c4a3b92cc3d0a3daff987d136ce5795dc4b52457814ec86b0e0b349f6fc6c4e0d6a8dd164b384705cc9e33c610717bb98266804707a567682027a519254103e47aac931b35a55a27138a9825948779844c9d0ef6e541ba1325e978ade2aef4f71079a0a3f0b836a3826b3174cf6a0afa410a6fa09f885c4e4eec6", 0xde}, {&(0x7f0000000500)="f90b81fab3a13e9846f2066fa15eff24122f4ce7c285f480feecb12bbf1389b1d21e451a09f9572d95dc77d035c48652e5d4046d0a9a03d1d43532d683c653c4600864b9b42fb1af44ed7294548c15e649d296d3453a0b11e4c840e8c2e064d999566ddeb21ef2db5bb9bec183b2f2599be868317ccb1ee1aa341808d7347414c5fa143d6a9ac96fc8a08f0e8b38d6dab1fd8faa712df7165f849981fe8f", 0x9e}, {&(0x7f00000006c0)="3ce390791ce22e0ee909313b31d317f47f767501cb97b03ad36a47c78a059f7ba5ef3e16386685df689303bf870312eaaafef05912d471dec3da11e875d8dcc588e11320a853a857c55f6c5c754f89e69ef4a9fcd52c3bffa16074a7c8ce5f340766b9af7ce8d8b46e5e26b2b04b6dfd1809781286e93ba9eee881e80706a92ca93606ec813822b3943cb7a05951fa57995057c67905c93ce0714b88965e1d53276c9a8045e483c2639b5e998d64aafda46abdfb5e973a1c0a43c7aa11b89aa2a6a3ecac691b7f1be290f184d39672f6edf60ae90663c10ff3e219e91003a99f4e2d220d1c03be1ee36d80583755329808fd10", 0xf3}], 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c00000000000000000000000800000001781f65633f0bfd89a121c13d9aac067e1377bc4b2fd5a5f22d69b42acf8cfb001d3bbc300c5b21d7f51e9b10c32152fa26f83d0dd97ff7d5", @ANYBLOB="0a010102ffffffff000000001c00", @ANYRES32=r7, @ANYBLOB="e0000001ac1e000100000000140000000000000000000000010000006e4000000000000014000000000000000000000002000000060200000000000054000000000000000000000007000000861f000000020511c489b47123b88f51b57fa778bb861207084f1f690f5edd8923ecac1e0101ac1e010164010101ac14141de0000001ac1e08010a010100e00000010000000000001400000000000000000000000200000002000000000000001400"/183], 0x128}}], 0x1, 0x600c0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e", 0x82}, {0x0}], 0x2}}], 0x2, 0x0) personality(0x10) 1.187468974s ago: executing program 4 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) syz_open_dev$loop(0x0, 0x4, 0x901) timer_create(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000003900), 0x0, 0x102, 0x0) unshare(0x20000600) r5 = userfaultfd(0x80001) setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48) signalfd4(r6, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) epoll_create(0x8) 988.391719ms ago: executing program 3 (id=807): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000007fc0), 0x1fcc, 0x80) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000500)=""/23) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000000c0)=""/230, &(0x7f00000001c0)=0xe6) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./sys\x00', 0x0, 0x42) write(r3, 0x0, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='0x1', 0x3) r5 = openat(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write(r5, &(0x7f0000000b00), 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 0s ago: executing program 4 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) syz_open_dev$loop(0x0, 0x4, 0x901) timer_create(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000003900), 0x0, 0x102, 0x0) unshare(0x20000600) r5 = userfaultfd(0x80001) setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48) signalfd4(r6, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) epoll_create(0x8) kernel console output (not intermixed with test programs): ily 0 port 6081 - 0 [ 766.095107][ T5626] Bluetooth: hci4: command tx timeout [ 766.095227][ T5626] Bluetooth: hci1: command tx timeout [ 766.812865][ T8600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 766.840679][ T8600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 766.849092][ T8600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 766.864961][ T8600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 766.865835][ T8600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 767.848674][ T9840] loop2: detected capacity change from 0 to 1024 [ 768.342968][ T5626] Bluetooth: hci1: command tx timeout [ 768.343123][ T8600] Bluetooth: hci4: command tx timeout [ 769.114053][ T8600] Bluetooth: hci5: command tx timeout [ 770.589646][ T8600] Bluetooth: hci4: command tx timeout [ 770.589718][ T8600] Bluetooth: hci1: command tx timeout [ 770.830883][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.831161][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.831548][ T9700] bridge_slave_0: entered allmulticast mode [ 770.890220][ T9700] bridge_slave_0: entered promiscuous mode [ 770.894748][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.894889][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.895112][ T9700] bridge_slave_1: entered allmulticast mode [ 770.900373][ T9700] bridge_slave_1: entered promiscuous mode [ 770.986204][ T5865] bridge_slave_1: left allmulticast mode [ 770.986277][ T5865] bridge_slave_1: left promiscuous mode [ 770.986913][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.052791][ T5865] bridge_slave_0: left allmulticast mode [ 771.052838][ T5865] bridge_slave_0: left promiscuous mode [ 771.053066][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.150213][ T5865] bridge_slave_1: left allmulticast mode [ 771.150263][ T5865] bridge_slave_1: left promiscuous mode [ 771.150520][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.188874][ T5865] bridge_slave_0: left allmulticast mode [ 771.189402][ T5865] bridge_slave_0: left promiscuous mode [ 771.191248][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.325912][ T5626] Bluetooth: hci5: command tx timeout [ 772.714216][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.730909][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.733522][ T5865] bond0 (unregistering): Released all slaves [ 772.801323][ T5626] Bluetooth: hci1: command tx timeout [ 773.014195][ T9874] ip_tables: iptables: counters copy to user failed while replacing table [ 773.550012][ T5626] Bluetooth: hci5: command tx timeout [ 773.559611][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.584740][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.586909][ T5865] bond0 (unregistering): Released all slaves [ 775.772998][ T5626] Bluetooth: hci5: command tx timeout [ 777.391901][ T9700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.492071][ T9700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.963863][ T9700] team0: Port device team_slave_0 added [ 778.068138][ T9700] team0: Port device team_slave_1 added [ 778.355582][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.355616][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.355673][ T9700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.447952][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.447980][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.448044][ T9700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.553739][ T5865] hsr_slave_0: left promiscuous mode [ 778.557437][ T5865] hsr_slave_1: left promiscuous mode [ 778.558519][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.558551][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.560712][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.560741][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.618143][ T5865] hsr_slave_0: left promiscuous mode [ 778.620491][ T5865] hsr_slave_1: left promiscuous mode [ 778.621543][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.621573][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.625607][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.625646][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.697908][ T5865] veth1_macvtap: left promiscuous mode [ 778.701068][ T5865] veth0_macvtap: left promiscuous mode [ 778.701218][ T5865] veth1_vlan: left promiscuous mode [ 778.701337][ T5865] veth0_vlan: left promiscuous mode [ 778.755146][ T5865] veth1_macvtap: left promiscuous mode [ 778.755211][ T5865] veth0_macvtap: left promiscuous mode [ 778.755378][ T5865] veth1_vlan: left promiscuous mode [ 778.775806][ T5865] veth0_vlan: left promiscuous mode [ 779.131796][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 779.150864][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 779.463498][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 779.480308][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 779.804084][ T9700] hsr_slave_0: entered promiscuous mode [ 779.805382][ T9700] hsr_slave_1: entered promiscuous mode [ 779.806284][ T9700] debugfs: 'hsr0' already exists in 'hsr' [ 779.806316][ T9700] Cannot create hsr debugfs directory [ 780.013384][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.013590][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.013772][ T9771] bridge_slave_0: entered allmulticast mode [ 780.019483][ T9771] bridge_slave_0: entered promiscuous mode [ 780.115848][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.116651][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.116825][ T9771] bridge_slave_1: entered allmulticast mode [ 780.119657][ T9771] bridge_slave_1: entered promiscuous mode [ 780.357549][ T9771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.366550][ T9771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.548859][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.549349][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.549537][ T9797] bridge_slave_0: entered allmulticast mode [ 780.552748][ T9797] bridge_slave_0: entered promiscuous mode [ 780.602530][ T9771] team0: Port device team_slave_0 added [ 780.655576][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.655820][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.656025][ T9797] bridge_slave_1: entered allmulticast mode [ 780.664843][ T9797] bridge_slave_1: entered promiscuous mode [ 780.700189][ T9771] team0: Port device team_slave_1 added [ 780.779809][ T9797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.877453][ T9797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.894800][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.894826][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.894875][ T9771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.899624][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.899648][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.899697][ T9771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.987868][ T9797] team0: Port device team_slave_0 added [ 780.992190][ T9797] team0: Port device team_slave_1 added [ 781.014831][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.015053][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.015232][ T9827] bridge_slave_0: entered allmulticast mode [ 781.019493][ T9827] bridge_slave_0: entered promiscuous mode [ 781.202275][ T5865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.243539][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.243669][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.243859][ T9827] bridge_slave_1: entered allmulticast mode [ 781.246165][ T9827] bridge_slave_1: entered promiscuous mode [ 781.299313][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.299346][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.299393][ T9797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.461678][ T9771] hsr_slave_0: entered promiscuous mode [ 781.473411][ T9771] hsr_slave_1: entered promiscuous mode [ 781.474346][ T9771] debugfs: 'hsr0' already exists in 'hsr' [ 781.474377][ T9771] Cannot create hsr debugfs directory [ 781.479292][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.479315][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.479364][ T9797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.495363][ T9827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.499355][ T9827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.595098][ T5865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.673729][ T9827] team0: Port device team_slave_0 added [ 781.709075][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 781.768167][ T9827] team0: Port device team_slave_1 added [ 781.875692][ T5865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.922783][ T9797] hsr_slave_0: entered promiscuous mode [ 781.924094][ T9797] hsr_slave_1: entered promiscuous mode [ 781.924975][ T9797] debugfs: 'hsr0' already exists in 'hsr' [ 781.925011][ T9797] Cannot create hsr debugfs directory [ 782.000879][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.000911][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.000959][ T9827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.085990][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.086041][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.086093][ T9827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.159508][ T5865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.506816][ T9827] hsr_slave_0: entered promiscuous mode [ 782.509134][ T9827] hsr_slave_1: entered promiscuous mode [ 782.509981][ T9827] debugfs: 'hsr0' already exists in 'hsr' [ 782.510011][ T9827] Cannot create hsr debugfs directory [ 782.641069][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 782.891365][ T5865] bridge_slave_1: left allmulticast mode [ 782.891412][ T5865] bridge_slave_1: left promiscuous mode [ 782.891687][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.919331][ T5865] bridge_slave_0: left allmulticast mode [ 782.919377][ T5865] bridge_slave_0: left promiscuous mode [ 782.919652][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.945692][ T5865] bridge_slave_1: left allmulticast mode [ 782.945728][ T5865] bridge_slave_1: left promiscuous mode [ 782.945947][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.975286][ T5865] bridge_slave_0: left allmulticast mode [ 782.975330][ T5865] bridge_slave_0: left promiscuous mode [ 782.975566][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.998725][ T5865] bridge_slave_1: left allmulticast mode [ 782.998756][ T5865] bridge_slave_1: left promiscuous mode [ 782.998956][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.019463][ T5865] bridge_slave_0: left allmulticast mode [ 783.019499][ T5865] bridge_slave_0: left promiscuous mode [ 783.019733][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.049577][ T5865] bridge_slave_1: left allmulticast mode [ 783.049622][ T5865] bridge_slave_1: left promiscuous mode [ 783.049891][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.072774][ T5865] bridge_slave_0: left allmulticast mode [ 783.072821][ T5865] bridge_slave_0: left promiscuous mode [ 783.073101][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.295966][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.308453][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.321480][ T5865] bond0 (unregistering): Released all slaves [ 783.454616][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.457913][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.461673][ T5865] bond0 (unregistering): Released all slaves [ 783.589361][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.591964][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.593588][ T5865] bond0 (unregistering): Released all slaves [ 783.777017][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.779750][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.809220][ T5865] bond0 (unregistering): Released all slaves [ 783.829957][ T9700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 783.842276][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.866230][ T9700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 783.887830][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 783.966596][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13 [ 784.022877][ T9700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 784.030046][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.031796][ T9700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 784.075624][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 784.653985][ T9771] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 784.677017][ T9771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.696467][ T5865] hsr_slave_0: left promiscuous mode [ 784.697335][ T5865] hsr_slave_1: left promiscuous mode [ 784.698327][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.720450][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.735880][ T5865] hsr_slave_0: left promiscuous mode [ 784.736780][ T5865] hsr_slave_1: left promiscuous mode [ 784.737834][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.738665][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.760107][ T5865] hsr_slave_0: left promiscuous mode [ 784.768698][ T5865] hsr_slave_1: left promiscuous mode [ 784.769721][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.776642][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.800724][ T5865] hsr_slave_0: left promiscuous mode [ 784.801675][ T5865] hsr_slave_1: left promiscuous mode [ 784.802723][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.802755][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.803959][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.803987][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.844284][ T5865] veth1_macvtap: left promiscuous mode [ 784.844358][ T5865] veth0_macvtap: left promiscuous mode [ 784.844524][ T5865] veth1_vlan: left promiscuous mode [ 784.846285][ T5865] veth0_vlan: left promiscuous mode [ 785.214923][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 785.236577][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 785.669674][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 785.699916][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 786.157059][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 786.183459][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 786.308773][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.308867][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 786.704513][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 786.728157][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 786.947525][ T9771] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 786.953587][ T9771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.058346][ T9771] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 787.091159][ T9771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.092602][ T9771] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 787.115691][ T9771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.284570][ T9827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 787.315641][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.316944][ T9827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 787.339966][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.444932][ T9827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 787.479531][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.488502][ T9700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.630613][ T9827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 787.646206][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.031776][ T9700] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.117367][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.117490][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.137291][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.137399][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.192173][ T9797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 788.203153][ T9797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.230750][ T9797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 788.236524][ T9797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.287890][ T9797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 788.296685][ T9797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.300869][ T9797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 788.312032][ T9797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.322009][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.524208][ T5626] Bluetooth: hci7: command 0x0406 tx timeout [ 788.524311][ T5626] Bluetooth: hci8: command 0x0406 tx timeout [ 788.616008][ T9771] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.747060][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.747164][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.771811][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.771940][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.979722][ T9827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.157276][ T9827] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.273329][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.273469][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.335532][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.335683][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.502906][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.614446][ T9797] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.750932][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.751077][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.798352][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.798495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.472044][ T9700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.742966][ T9700] veth0_vlan: entered promiscuous mode [ 790.797925][ T9700] veth1_vlan: entered promiscuous mode [ 791.023657][ T9700] veth0_macvtap: entered promiscuous mode [ 791.059048][ T9700] veth1_macvtap: entered promiscuous mode [ 791.112937][ T9700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.149340][ T9700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.189751][ T5891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.419309][ T3016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.419414][ T3016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.419476][ T3016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.459238][ T9771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.603081][ T9827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.741983][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.742024][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.899720][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.899761][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.036160][ T6118] IPVS: starting estimator thread 0... [ 793.270866][T10157] IPVS: using max 26 ests per chain, 62400 per kthread [ 793.823973][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.634311][ T9797] veth0_vlan: entered promiscuous mode [ 795.677411][ T9797] veth1_vlan: entered promiscuous mode [ 796.144214][T10168] loop9: detected capacity change from 0 to 32768 [ 796.145743][T10168] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 796.176586][T10168] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.480 (10168) [ 796.199075][T10168] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 796.199141][T10168] BTRFS info (device loop9): using crc32c checksum algorithm [ 796.828704][ T9827] veth0_vlan: entered promiscuous mode [ 796.892771][T10168] BTRFS info (device loop9): rebuilding free space tree [ 796.931367][T10168] BTRFS info (device loop9): disabling free space tree [ 796.931457][T10168] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 796.931498][T10168] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 796.938358][T10168] BTRFS info (device loop9): enabling ssd optimizations [ 796.938400][T10168] BTRFS info (device loop9): turning on async discard [ 796.938429][T10168] BTRFS info (device loop9): force clearing of disk cache [ 796.938460][T10168] BTRFS info (device loop9): use zstd compression, level 3 [ 797.206748][ T9827] veth1_vlan: entered promiscuous mode [ 797.305347][ T9797] veth0_macvtap: entered promiscuous mode [ 797.496290][ T9797] veth1_macvtap: entered promiscuous mode [ 798.005147][ T9771] veth0_vlan: entered promiscuous mode [ 798.151235][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.234585][ T9771] veth1_vlan: entered promiscuous mode [ 798.298578][ T9827] veth0_macvtap: entered promiscuous mode [ 798.350698][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.434091][ T9827] veth1_macvtap: entered promiscuous mode [ 798.527345][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.527573][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.527650][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.527712][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.545548][ T9024] BTRFS info (device loop9): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 799.365269][T10202] loop2: detected capacity change from 0 to 1024 [ 799.419692][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.490601][ T9771] veth0_macvtap: entered promiscuous mode [ 799.516375][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.569267][ T5865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.578268][ T5865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.579379][ T5865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.579593][ T5865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.736028][ T9771] veth1_macvtap: entered promiscuous mode [ 800.184214][ T5865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.184253][ T5865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.225893][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.375021][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.500309][ T6118] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.500410][ T6118] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.500488][ T6118] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.500558][ T6118] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.562554][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.562598][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.401556][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.401603][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.892767][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.892806][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.032240][ T980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.032280][ T980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.300980][ T6161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.301023][ T6161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.713136][T10233] input: syz0 as /devices/virtual/input/input16 [ 813.484493][T10286] loop1: detected capacity change from 0 to 1024 [ 814.420940][T10294] genirq: Flags mismatch irq 2. 00200000 (pcl818) vs. 00200000 (pcl812) [ 816.381944][ T31] audit: type=1800 audit(2000000159.962:25): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.498" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 822.534563][T10312] netlink: 328 bytes leftover after parsing attributes in process `syz.4.503'. [ 823.354943][T10315] 9pnet_fd: p9_fd_create_tcp (10315): problem connecting socket to 127.0.0.1 [ 825.265482][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 828.514711][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 828.642106][T10332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 828.657135][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 828.667647][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 828.668972][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 828.689945][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 828.690723][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 828.726253][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 828.726294][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 828.780868][T10335] netlink: 'syz.0.509': attribute type 10 has an invalid length. [ 828.885823][T10332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.938907][T10332] bond1: (slave bond0): Enslaving as an active interface with an up link [ 829.093627][T10335] syz_tun: entered promiscuous mode [ 829.308269][T10335] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 829.425723][T10348] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 829.449382][T10344] IPVS: stopping backup sync thread 10348 ... [ 830.936617][ T5629] Bluetooth: hci0: command tx timeout [ 834.750809][ T31] audit: type=1800 audit(2000000177.127:26): pid=10372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.513" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 834.773370][ T5629] Bluetooth: hci0: command tx timeout [ 835.783443][ T50] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.055956][ T5629] Bluetooth: hci0: command tx timeout [ 837.167668][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.181523][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.186159][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.189586][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.190543][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 837.529582][ T50] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.960884][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 839.251993][ T8600] Bluetooth: hci0: command tx timeout [ 839.266401][ T50] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.403612][ T8600] Bluetooth: hci2: command tx timeout [ 839.966874][T10428] loop2: detected capacity change from 0 to 8 [ 840.775696][T10427] SQUASHFS error: Failed to read block 0x4de: -5 [ 840.775969][T10427] SQUASHFS error: Failed to read block 0x4de: -5 [ 840.776350][ T31] audit: type=1800 audit(2000000183.824:27): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.522" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 841.201111][T10401] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 841.298031][ T50] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.692989][ T8600] Bluetooth: hci2: command tx timeout [ 844.113963][ T8600] Bluetooth: hci2: command tx timeout [ 845.475031][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 846.331241][ T5629] Bluetooth: hci2: command tx timeout [ 847.309431][T10466] loop1: detected capacity change from 0 to 1024 [ 850.368647][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.368863][T10336] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.369031][T10336] bridge_slave_0: entered allmulticast mode [ 850.377616][T10336] bridge_slave_0: entered promiscuous mode [ 850.453307][T10478] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 850.782567][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.787760][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.840957][T10336] bridge_slave_1: entered allmulticast mode [ 851.045806][T10336] bridge_slave_1: entered promiscuous mode [ 851.331937][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 851.561412][T10336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.701876][ T50] bridge_slave_1: left allmulticast mode [ 851.701929][ T50] bridge_slave_1: left promiscuous mode [ 851.702242][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.738834][ T50] bridge_slave_0: left allmulticast mode [ 851.809751][ T50] bridge_slave_0: left promiscuous mode [ 851.809999][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.934923][T10489] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 852.609119][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 852.609213][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.656238][T10490] loop1: detected capacity change from 0 to 8 [ 852.775358][T10490] SQUASHFS error: lzo decompression failed, data probably corrupt [ 852.775596][T10490] SQUASHFS error: Failed to read block 0x91: -5 [ 852.775659][T10490] SQUASHFS error: Unable to read metadata cache entry [8f] [ 852.775712][T10490] SQUASHFS error: Unable to read inode 0x11f [ 853.911731][T10496] No source specified [ 853.986676][T10496] loop4: detected capacity change from 0 to 256 [ 854.558293][T10498] loop1: detected capacity change from 0 to 8 [ 854.904227][T10498] SQUASHFS error: Failed to read block 0x4de: -5 [ 854.904517][T10498] SQUASHFS error: Failed to read block 0x4de: -5 [ 854.904950][ T31] audit: type=1800 audit(2000000197.042:28): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.534" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 854.952215][T10496] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 855.214537][T10496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.792999][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.853467][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.871221][ T50] bond0 (unregistering): Released all slaves [ 858.973513][ T31] audit: type=1800 audit(2000000200.821:29): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.537" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 859.916392][T10336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.297825][T10336] team0: Port device team_slave_0 added [ 860.373047][T10336] team0: Port device team_slave_1 added [ 863.212460][T10336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.212506][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.212566][T10336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.239815][T10336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.239845][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.239893][T10336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.914210][ T50] hsr_slave_0: left promiscuous mode [ 866.950457][ T50] hsr_slave_1: left promiscuous mode [ 866.951900][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.951934][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.988141][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.988185][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.197127][ T50] veth1_macvtap: left promiscuous mode [ 867.197193][ T50] veth0_macvtap: left promiscuous mode [ 867.197358][ T50] veth1_vlan: left promiscuous mode [ 867.197453][ T50] veth0_vlan: left promiscuous mode [ 868.375988][ T8600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 868.409777][ T8600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 868.425333][ T8600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 868.445828][ T8600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 868.446699][ T8600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.699053][ T50] team0 (unregistering): Port device team_slave_1 removed [ 870.713433][ T8600] Bluetooth: hci4: command tx timeout [ 870.774094][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 870.804328][ T50] team0 (unregistering): Port device team_slave_0 removed [ 870.942294][ T25] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 870.944580][ T25] usb 1-1: Dual-Role OTG device on HNP port [ 870.944999][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.918035][T10592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.000502][ T8600] Bluetooth: hci4: command tx timeout [ 873.073132][ T25] gspca_main: spca501-2.14.0 probing 0000:0000 [ 873.092199][ T25] gspca_spca501: reg write: error -32 [ 873.092225][ T25] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 873.092417][ T25] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 873.120839][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 874.209672][ T9797] bond0: (slave syz_tun): Releasing backup interface [ 874.466165][T10336] hsr_slave_0: entered promiscuous mode [ 874.467424][T10336] hsr_slave_1: entered promiscuous mode [ 874.652827][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 874.759069][T10604] netlink: 60 bytes leftover after parsing attributes in process `syz.1.551'. [ 875.195635][ T8600] Bluetooth: hci4: command tx timeout [ 877.376863][ T8600] Bluetooth: hci4: command tx timeout [ 877.551013][ T50] IPVS: stop unused estimator thread 0... [ 877.783093][T10632] No source specified [ 877.862283][T10632] loop1: detected capacity change from 0 to 256 [ 878.316322][T10632] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 878.482406][T10629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.952061][ T31] audit: type=1800 audit(2000000220.913:30): pid=10646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.556" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 881.952373][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 885.526738][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.565711][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.448049][T10687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 887.991761][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.247445][T10569] udevd[10569]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 888.276745][T10567] udevd[10567]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 888.442463][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.451372][T10391] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.451597][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.469661][T10391] bridge_slave_0: entered allmulticast mode [ 888.472467][T10391] bridge_slave_0: entered promiscuous mode [ 888.522450][T10391] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.522582][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.522819][T10391] bridge_slave_1: entered allmulticast mode [ 888.529037][T10391] bridge_slave_1: entered promiscuous mode [ 888.662479][T10391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.687386][T10391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.924916][T10391] team0: Port device team_slave_0 added [ 888.974224][T10391] team0: Port device team_slave_1 added [ 889.134735][T10391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.134769][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.134817][T10391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.298481][T10391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.298515][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.298565][T10391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.770866][ T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.828310][T10391] hsr_slave_0: entered promiscuous mode [ 889.829715][T10391] hsr_slave_1: entered promiscuous mode [ 889.830805][T10391] debugfs: 'hsr0' already exists in 'hsr' [ 889.830836][T10391] Cannot create hsr debugfs directory [ 890.071449][ T50] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.237924][T10336] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 890.276338][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 890.364250][T10732] netlink: 328 bytes leftover after parsing attributes in process `syz.1.570'. [ 891.240202][T10737] 9pnet_fd: p9_fd_create_tcp (10737): problem connecting socket to 127.0.0.1 [ 892.953197][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.035127][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.035690][T10566] bridge_slave_0: entered allmulticast mode [ 893.057917][T10566] bridge_slave_0: entered promiscuous mode [ 894.143945][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 894.149259][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 894.165175][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 894.187827][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 894.202509][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 894.524477][T10754] jffs2: notice: (10754) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 894.661897][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 895.164660][ T50] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.306122][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.306228][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.306420][T10566] bridge_slave_1: entered allmulticast mode [ 895.311694][T10566] bridge_slave_1: entered promiscuous mode [ 896.084126][T10773] No source specified [ 896.755347][ T5626] Bluetooth: hci1: command tx timeout [ 899.072844][ T8600] Bluetooth: hci1: command tx timeout [ 899.072947][ T8600] Bluetooth: hci5: command 0x0406 tx timeout [ 900.650394][ T50] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.078035][ T31] audit: type=1800 audit(2000000240.201:31): pid=10793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.571" name="syzkaller0" dev="sda1" ino=2108 res=0 errno=0 [ 901.774359][ T5629] Bluetooth: hci1: command tx timeout [ 902.686069][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.737594][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 902.759284][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 902.764065][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 902.765386][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 902.823434][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 904.408325][ T5626] Bluetooth: hci1: command tx timeout [ 905.695335][ T5626] Bluetooth: hci0: command tx timeout [ 905.902491][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.112561][T10566] team0: Port device team_slave_0 added [ 906.129041][T10566] team0: Port device team_slave_1 added [ 906.430717][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.430752][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.430801][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.451707][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.451739][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.451790][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.569050][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'. [ 907.249727][T10566] hsr_slave_0: entered promiscuous mode [ 907.312717][T10566] hsr_slave_1: entered promiscuous mode [ 907.378000][T10566] debugfs: 'hsr0' already exists in 'hsr' [ 907.395745][T10566] Cannot create hsr debugfs directory [ 907.908860][ T5626] Bluetooth: hci0: command tx timeout [ 911.140875][ T5629] Bluetooth: hci0: command tx timeout [ 912.832951][ T50] bridge_slave_1: left allmulticast mode [ 912.833003][ T50] bridge_slave_1: left promiscuous mode [ 912.833314][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.896790][ T50] bridge_slave_0: left allmulticast mode [ 912.896851][ T50] bridge_slave_0: left promiscuous mode [ 912.897217][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.970116][ T50] bridge_slave_1: left allmulticast mode [ 912.970171][ T50] bridge_slave_1: left promiscuous mode [ 912.970470][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.009903][ T50] bridge_slave_0: left allmulticast mode [ 913.009984][ T50] bridge_slave_0: left promiscuous mode [ 913.010330][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.296935][ T5626] Bluetooth: hci0: command tx timeout [ 917.330519][ T50] bond1 (unregistering): (slave bond0): Releasing backup interface [ 917.387282][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.413663][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.419997][ T50] bond0 (unregistering): Released all slaves [ 917.468910][ T50] bond1 (unregistering): Released all slaves [ 917.556005][T10871] jffs2: notice: (10871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 917.667601][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 917.667692][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 917.812399][T10875] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 917.814201][T10875] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 917.816983][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.864124][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.430001][ T50] bond0 (unregistering): Released all slaves [ 924.551728][T10916] overlayfs: failed to resolve './file0': -2 [ 924.639961][T10916] jffs2: notice: (10916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 931.141873][T10937] loop4: detected capacity change from 0 to 8 [ 931.646320][T10937] SQUASHFS error: Failed to read block 0x4de: -5 [ 931.648697][T10937] SQUASHFS error: Failed to read block 0x4de: -5 [ 931.742775][ T31] audit: type=1800 audit(2000000268.824:32): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.595" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 932.587522][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 932.592834][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 932.864266][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.095509][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.306670][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.493369][ T50] hsr_slave_0: left promiscuous mode [ 933.527348][ T50] hsr_slave_1: left promiscuous mode [ 933.528439][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.528470][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.556499][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.556521][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.595034][ T50] hsr_slave_0: left promiscuous mode [ 933.606005][ T50] hsr_slave_1: left promiscuous mode [ 933.606802][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.606826][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.615686][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.615713][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.664680][T10953] loop4: detected capacity change from 0 to 1024 [ 933.796870][ T50] veth1_macvtap: left promiscuous mode [ 933.796931][ T50] veth0_macvtap: left promiscuous mode [ 933.797060][ T50] veth1_vlan: left promiscuous mode [ 933.797157][ T50] veth0_vlan: left promiscuous mode [ 933.842094][ T50] veth1_macvtap: left promiscuous mode [ 933.842153][ T50] veth0_macvtap: left promiscuous mode [ 933.842286][ T50] veth1_vlan: left promiscuous mode [ 933.842391][ T50] veth0_vlan: left promiscuous mode [ 935.542188][ T5626] Bluetooth: hci2: command tx timeout [ 937.889128][ T5626] Bluetooth: hci2: command tx timeout [ 938.346347][ T50] team0 (unregistering): Port device team_slave_1 removed [ 938.376108][ T50] team0 (unregistering): Port device team_slave_0 removed [ 938.758808][ T50] team0 (unregistering): Port device team_slave_1 removed [ 938.776969][ T50] team0 (unregistering): Port device team_slave_0 removed [ 938.945995][T10738] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.946183][T10738] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.946321][T10738] bridge_slave_0: entered allmulticast mode [ 938.948287][T10738] bridge_slave_0: entered promiscuous mode [ 938.987911][T10738] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.988046][T10738] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.988204][T10738] bridge_slave_1: entered allmulticast mode [ 938.993266][T10738] bridge_slave_1: entered promiscuous mode [ 939.213610][T10738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.219776][T10738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.407467][T10738] team0: Port device team_slave_0 added [ 939.429104][T10738] team0: Port device team_slave_1 added [ 939.568651][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.568779][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.568988][T10797] bridge_slave_0: entered allmulticast mode [ 939.571401][T10797] bridge_slave_0: entered promiscuous mode [ 939.643547][T10738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.643578][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.643621][T10738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.646883][T10738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.646912][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.646955][T10738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.759209][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.759335][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.759586][T10797] bridge_slave_1: entered allmulticast mode [ 939.762320][T10797] bridge_slave_1: entered promiscuous mode [ 939.972677][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.984856][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.084991][ T5626] Bluetooth: hci2: command tx timeout [ 940.185567][T10797] team0: Port device team_slave_0 added [ 940.253967][T10738] hsr_slave_0: entered promiscuous mode [ 940.257254][T10738] hsr_slave_1: entered promiscuous mode [ 940.258112][T10738] debugfs: 'hsr0' already exists in 'hsr' [ 940.258143][T10738] Cannot create hsr debugfs directory [ 940.303754][T10797] team0: Port device team_slave_1 added [ 940.345020][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.345053][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.345103][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.516525][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.516553][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.516591][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.679175][T10797] hsr_slave_0: entered promiscuous mode [ 940.680205][T10797] hsr_slave_1: entered promiscuous mode [ 940.680892][T10797] debugfs: 'hsr0' already exists in 'hsr' [ 940.680927][T10797] Cannot create hsr debugfs directory [ 941.256963][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.257142][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.257350][T10946] bridge_slave_0: entered allmulticast mode [ 941.259481][T10946] bridge_slave_0: entered promiscuous mode [ 941.264465][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.264688][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.265195][T10946] bridge_slave_1: entered allmulticast mode [ 941.267474][T10946] bridge_slave_1: entered promiscuous mode [ 941.396594][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.401808][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.551706][T10946] team0: Port device team_slave_0 added [ 941.556835][T10946] team0: Port device team_slave_1 added [ 941.609672][ T50] bridge_slave_1: left allmulticast mode [ 941.609723][ T50] bridge_slave_1: left promiscuous mode [ 941.610017][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.614298][ T50] bridge_slave_0: left allmulticast mode [ 941.614340][ T50] bridge_slave_0: left promiscuous mode [ 941.614618][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.647099][ T50] bridge_slave_1: left allmulticast mode [ 941.647160][ T50] bridge_slave_1: left promiscuous mode [ 941.647489][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.662483][ T50] bridge_slave_0: left allmulticast mode [ 941.662583][ T50] bridge_slave_0: left promiscuous mode [ 941.662910][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.695974][ T50] bridge_slave_1: left allmulticast mode [ 941.696020][ T50] bridge_slave_1: left promiscuous mode [ 941.696297][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.700585][ T50] bridge_slave_0: left allmulticast mode [ 941.700619][ T50] bridge_slave_0: left promiscuous mode [ 941.700825][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.829357][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.850867][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.861461][ T50] bond0 (unregistering): Released all slaves [ 941.945507][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.957229][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.962260][ T50] bond0 (unregistering): Released all slaves [ 942.040746][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.043494][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.064209][ T50] bond0 (unregistering): Released all slaves [ 942.101920][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.101954][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.102000][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.107230][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.107259][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.107306][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.296306][ T5626] Bluetooth: hci2: command tx timeout [ 942.523959][T10946] hsr_slave_0: entered promiscuous mode [ 942.540086][T10946] hsr_slave_1: entered promiscuous mode [ 942.540833][T10946] debugfs: 'hsr0' already exists in 'hsr' [ 942.540864][T10946] Cannot create hsr debugfs directory [ 942.614304][ T50] hsr_slave_0: left promiscuous mode [ 942.615015][ T50] hsr_slave_1: left promiscuous mode [ 942.615850][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.616523][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.619821][ T50] hsr_slave_0: left promiscuous mode [ 942.622880][ T50] hsr_slave_1: left promiscuous mode [ 942.624067][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.629282][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.677093][ T50] hsr_slave_0: left promiscuous mode [ 942.677820][ T50] hsr_slave_1: left promiscuous mode [ 942.678633][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.679270][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.859895][ T50] team0 (unregistering): Port device team_slave_1 removed [ 942.897339][ T50] team0 (unregistering): Port device team_slave_0 removed [ 943.174069][ T50] team0 (unregistering): Port device team_slave_1 removed [ 943.187929][ T50] team0 (unregistering): Port device team_slave_0 removed [ 943.506604][ T50] team0 (unregistering): Port device team_slave_1 removed [ 943.528210][ T50] team0 (unregistering): Port device team_slave_0 removed [ 944.687263][T10738] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 944.694002][T10738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 944.695851][T10738] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 944.728573][T10738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 944.729872][T10738] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 944.749784][T10738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 944.756350][T10738] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 944.800967][T10738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 945.175529][T10738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.209197][T10738] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.237167][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.237299][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.274374][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.274492][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.599426][T10946] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 945.615698][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.623972][T10946] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 945.651098][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 945.652532][T10946] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 945.679967][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 945.721920][T10946] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 945.736479][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.222780][T10797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 946.237469][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.239624][T10797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 946.269482][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.274037][T10797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 946.289866][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.296419][T10797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 946.312909][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.474646][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.530901][T10946] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.565854][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.566102][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.622009][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.622182][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.821447][T10797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.933478][T10797] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.961094][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.961246][ T5866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.965922][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.966053][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.087123][T10738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.072317][T10738] veth0_vlan: entered promiscuous mode [ 948.139055][T10738] veth1_vlan: entered promiscuous mode [ 948.183233][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.278870][T10738] veth0_macvtap: entered promiscuous mode [ 948.316275][T10738] veth1_macvtap: entered promiscuous mode [ 948.419140][T10738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.455589][T10738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.515478][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.515808][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.577042][ T5866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.577127][ T5866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.745422][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.745462][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.783296][T10797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.818505][ T5866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.818560][ T5866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.781274][T11128] warning: `syz.1.614' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 952.738408][T10946] veth0_vlan: entered promiscuous mode [ 952.780862][T10946] veth1_vlan: entered promiscuous mode [ 952.912144][T10946] veth0_macvtap: entered promiscuous mode [ 952.923026][T10946] veth1_macvtap: entered promiscuous mode [ 953.010499][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.071693][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.110406][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.111615][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.111686][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.111748][ T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.940201][ T980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.941249][ T980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.107537][ T5866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.107577][ T5866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.132632][T10797] veth0_vlan: entered promiscuous mode [ 958.306383][T10797] veth1_vlan: entered promiscuous mode [ 960.104656][T11168] loop4: detected capacity change from 0 to 32768 [ 960.105997][T11168] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 960.135417][T11168] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.608 (11168) [ 960.185475][T11168] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 960.185541][T11168] BTRFS info (device loop4): using crc32c checksum algorithm [ 960.329528][T10797] veth0_macvtap: entered promiscuous mode [ 960.398412][T10797] veth1_macvtap: entered promiscuous mode [ 960.439275][T10797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.519894][T11168] BTRFS info (device loop4): rebuilding free space tree [ 960.540483][T10797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.541108][T11168] BTRFS info (device loop4): disabling free space tree [ 960.541200][T11168] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 960.541240][T11168] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 960.576383][T11168] BTRFS info (device loop4): enabling ssd optimizations [ 960.576432][T11168] BTRFS info (device loop4): turning on async discard [ 960.576463][T11168] BTRFS info (device loop4): force clearing of disk cache [ 960.576493][T11168] BTRFS info (device loop4): use zstd compression, level 3 [ 960.872778][ T9489] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.967011][ T9489] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.085988][ T1505] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.093285][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.093317][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.250574][ T9489] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.684771][ T9827] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 963.955750][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.955809][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.789586][T11229] overlayfs: failed to resolve './file0': -2 [ 969.955479][T11230] jffs2: notice: (11230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 970.518436][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.523243][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.533875][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.577592][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.619543][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 973.745329][ T5626] Bluetooth: hci4: command tx timeout [ 976.981468][ T5626] Bluetooth: hci4: command tx timeout [ 977.127132][ T6161] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.574341][ T6161] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.003606][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 978.017006][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 978.036105][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 978.037301][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 978.038095][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 978.171874][ T6161] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.672293][T11295] null_blk: nullb1: using native zone append [ 979.205561][ T5626] Bluetooth: hci4: command tx timeout [ 979.577541][T11295] null_blk: disk nullb1 created [ 980.761828][T11309] binder: 11305:11309 ioctl c0306201 0 returned -14 [ 982.137247][ T5626] Bluetooth: hci0: command tx timeout [ 982.139577][ T5629] Bluetooth: hci4: command tx timeout [ 982.673162][ T6161] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.956106][T11312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 983.973413][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 983.973516][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 984.283692][ T5626] Bluetooth: hci0: command tx timeout [ 986.399771][T11327] ovs-system: entered promiscuous mode [ 986.506293][ T5626] Bluetooth: hci0: command tx timeout [ 987.382281][T11351] No source specified [ 988.031843][ T9009] bridge0: port 3(syz_tun) entered disabled state [ 988.130906][ T9009] syz_tun (unregistering): left allmulticast mode [ 988.130956][ T9009] syz_tun (unregistering): left promiscuous mode [ 988.131188][ T9009] bridge0: port 3(syz_tun) entered disabled state [ 988.254392][T11353] 9pnet_virtio: no channels available for device syz [ 988.296949][T11353] overlayfs: missing 'lowerdir' [ 988.729854][ T5626] Bluetooth: hci0: command tx timeout [ 993.182617][ T6161] bridge_slave_1: left allmulticast mode [ 993.182663][ T6161] bridge_slave_1: left promiscuous mode [ 993.182920][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.192016][ T6161] bridge_slave_0: left allmulticast mode [ 993.192047][ T6161] bridge_slave_0: left promiscuous mode [ 993.192279][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.949137][ T6161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.230783][ T6161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.263359][ T6161] bond0 (unregistering): Released all slaves [ 995.346064][T11390] No source specified [ 996.024975][T11390] loop8: detected capacity change from 0 to 256 [ 996.215875][T11391] 9pnet_virtio: no channels available for device syz [ 996.278359][T11390] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 996.387231][T11390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.427166][T11391] overlayfs: missing 'lowerdir' [ 998.485754][T11400] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1006.838392][ T6161] hsr_slave_0: left promiscuous mode [ 1006.859830][ T6161] hsr_slave_1: left promiscuous mode [ 1006.915959][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.939628][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.064034][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.064691][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.573452][ T6161] veth1_macvtap: left promiscuous mode [ 1009.573515][ T6161] veth0_macvtap: left promiscuous mode [ 1009.573647][ T6161] veth1_vlan: left promiscuous mode [ 1009.573741][ T6161] veth0_vlan: left promiscuous mode [ 1010.827323][T11447] CacheFiles: No cache directory specified [ 1012.422721][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1012.460792][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1012.462656][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1012.483722][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1012.491509][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1012.884384][ T6161] team0 (unregistering): Port device team_slave_1 removed [ 1012.957243][ T6161] team0 (unregistering): Port device team_slave_0 removed [ 1013.763969][T11236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.764720][T11236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.764987][T11236] bridge_slave_0: entered allmulticast mode [ 1013.771237][T11236] bridge_slave_0: entered promiscuous mode [ 1013.778143][T11236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.780302][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.780502][T11236] bridge_slave_1: entered allmulticast mode [ 1013.785663][T11236] bridge_slave_1: entered promiscuous mode [ 1014.012486][T11481] nvmet: adding nsid 1 to subsystem testsubsys [ 1014.729788][ T5629] Bluetooth: hci6: command tx timeout [ 1014.954828][T11236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.992835][T11236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.142904][T11236] team0: Port device team_slave_0 added [ 1015.179169][T11236] team0: Port device team_slave_1 added [ 1015.372862][T11236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.372896][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.372945][T11236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.375751][T11236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.375778][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.375826][T11236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.948225][T11236] hsr_slave_0: entered promiscuous mode [ 1015.949603][T11236] hsr_slave_1: entered promiscuous mode [ 1016.305468][T11503] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1016.953414][ T5629] Bluetooth: hci6: command tx timeout [ 1017.716410][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1019.177295][ T5629] Bluetooth: hci6: command tx timeout [ 1021.400628][ T5629] Bluetooth: hci6: command tx timeout [ 1023.620087][ T6161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.808548][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.808680][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.808895][T11289] bridge_slave_0: entered allmulticast mode [ 1026.837874][T11289] bridge_slave_0: entered promiscuous mode [ 1027.069601][ T6161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.232799][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.232944][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.233200][T11289] bridge_slave_1: entered allmulticast mode [ 1027.271526][T11289] bridge_slave_1: entered promiscuous mode [ 1027.329287][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1028.562100][ T6161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.771751][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.996386][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.024700][T11289] team0: Port device team_slave_0 added [ 1032.033913][T11289] team0: Port device team_slave_1 added [ 1032.369963][ T6161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.458437][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1032.495506][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1032.505273][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1032.512437][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1032.513287][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1033.128415][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.128449][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.128496][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.211002][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.211037][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.211087][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.543616][T11614] sctp: [Deprecated]: syz.8.673 (pid 11614) Use of int in maxseg socket option. [ 1033.543616][T11614] Use struct sctp_assoc_value instead [ 1033.594853][T11614] netlink: 'syz.8.673': attribute type 39 has an invalid length. [ 1034.718978][T11622] xt_hashlimit: size too large, truncated to 1048576 [ 1034.748132][ T5626] Bluetooth: hci1: command tx timeout [ 1034.854463][T11289] hsr_slave_0: entered promiscuous mode [ 1034.866703][T11289] hsr_slave_1: entered promiscuous mode [ 1034.867745][T11289] debugfs: 'hsr0' already exists in 'hsr' [ 1034.867774][T11289] Cannot create hsr debugfs directory [ 1036.378740][ T5275] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1036.976607][ T5626] Bluetooth: hci1: command tx timeout [ 1038.278269][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.278399][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.278577][T11458] bridge_slave_0: entered allmulticast mode [ 1038.284959][T11458] bridge_slave_0: entered promiscuous mode [ 1039.211161][ T5626] Bluetooth: hci1: command tx timeout [ 1039.641310][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.641438][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.641618][T11458] bridge_slave_1: entered allmulticast mode [ 1039.678439][T11458] bridge_slave_1: entered promiscuous mode [ 1041.861102][ T5626] Bluetooth: hci1: command tx timeout [ 1044.463171][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.889625][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1045.900944][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1045.924385][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1045.969813][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1045.977590][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1046.707045][ T6161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.293238][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.894843][ T5275] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1048.276780][ T5629] Bluetooth: hci4: command tx timeout [ 1049.028818][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.028913][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.630228][ T6161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.693470][T11458] team0: Port device team_slave_0 added [ 1049.780781][T11458] team0: Port device team_slave_1 added [ 1050.506617][ T5629] Bluetooth: hci4: command tx timeout [ 1050.961078][ T6161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.476069][ T5744] libceph: connect (1)[c::]:6789 error -101 [ 1052.486911][ T5744] libceph: mon0 (1)[c::]:6789 connect error [ 1052.585459][T11716] ceph: No mds server is up or the cluster is laggy [ 1052.644577][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.644614][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.644665][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.887745][ T5629] Bluetooth: hci4: command tx timeout [ 1053.013918][ T5744] libceph: connect (1)[c::]:6789 error -101 [ 1053.014267][ T5744] libceph: mon0 (1)[c::]:6789 connect error [ 1053.391513][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.391537][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.391575][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.563019][ T5744] libceph: connect (1)[c::]:6789 error -101 [ 1053.563259][ T5744] libceph: mon0 (1)[c::]:6789 connect error [ 1057.433891][ T5629] Bluetooth: hci4: command tx timeout [ 1057.496701][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 1057.496939][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 1057.771333][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1057.771573][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1057.781994][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1057.782222][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1058.070912][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1058.071167][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1058.768568][ T5744] libceph: connect (1)[c::]:6789 error -101 [ 1058.768963][ T5744] libceph: mon0 (1)[c::]:6789 connect error [ 1060.182491][ T6161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.837281][T11750] netlink: 328 bytes leftover after parsing attributes in process `syz.4.693'. [ 1061.958974][T11753] 9pnet_fd: p9_fd_create_tcp (11753): problem connecting socket to 127.0.0.1 [ 1063.823436][T11458] hsr_slave_0: entered promiscuous mode [ 1063.842640][T11458] hsr_slave_1: entered promiscuous mode [ 1063.843496][T11458] debugfs: 'hsr0' already exists in 'hsr' [ 1063.851895][T11458] Cannot create hsr debugfs directory [ 1064.122190][T11756] loop4: detected capacity change from 0 to 2048 [ 1066.615723][ T5275] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1067.928559][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 1069.337717][T11775] overlayfs: failed to resolve './file0': -2 [ 1069.424552][T11775] jffs2: notice: (11775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1070.574716][T11792] 9p: Bad value for 'rfdno' [ 1074.912786][ T6161] bridge_slave_1: left allmulticast mode [ 1074.912836][ T6161] bridge_slave_1: left promiscuous mode [ 1074.913221][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.986361][ T6161] bridge_slave_0: left allmulticast mode [ 1074.986426][ T6161] bridge_slave_0: left promiscuous mode [ 1074.986718][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.109323][T11811] input: syz1 as /devices/virtual/input/input17 [ 1075.147123][T11811] netlink: 168 bytes leftover after parsing attributes in process `syz.4.704'. [ 1075.168642][ T6161] bridge_slave_1: left allmulticast mode [ 1075.168688][ T6161] bridge_slave_1: left promiscuous mode [ 1075.168958][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.203737][ T6161] bridge_slave_0: left allmulticast mode [ 1075.203787][ T6161] bridge_slave_0: left promiscuous mode [ 1075.204069][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.368581][ T6161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.435007][ T6161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.457247][ T6161] bond0 (unregistering): Released all slaves [ 1078.049465][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.055065][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.056051][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.058412][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.059254][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1078.546588][ T6161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.610458][T11834] No source specified [ 1079.453268][ T6161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.455791][ T6161] bond0 (unregistering): Released all slaves [ 1079.506554][T11836] loop8: detected capacity change from 0 to 2048 [ 1080.334687][ T5629] Bluetooth: hci0: command tx timeout [ 1080.950601][ T5275] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1082.044271][ T6161] ovs-system: left promiscuous mode [ 1083.070145][T11849] autofs: Unknown parameter '00000000000000000000' [ 1083.074867][ T5629] Bluetooth: hci0: command tx timeout [ 1085.287855][ T5629] Bluetooth: hci0: command tx timeout [ 1087.628951][ T5629] Bluetooth: hci0: command tx timeout [ 1091.975869][T11601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.975988][T11601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.976204][T11601] bridge_slave_0: entered allmulticast mode [ 1092.009980][T11601] bridge_slave_0: entered promiscuous mode [ 1092.267660][T11940] loop8: detected capacity change from 0 to 32768 [ 1092.383130][T11940] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1093.806786][T11601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.806911][T11601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.807147][T11601] bridge_slave_1: entered allmulticast mode [ 1093.834007][T11601] bridge_slave_1: entered promiscuous mode [ 1095.055777][T11601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.120086][T10946] ocfs2: Unmounting device (7,8) on (node local) [ 1097.162603][T11970] autofs: Unknown parameter '00000000000000000000' [ 1097.771234][T11601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.658266][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1100.667401][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1100.668293][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1100.672824][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1100.674129][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1100.864052][T11976] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1102.620383][T12002] 9p: Bad value for 'rfdno' [ 1102.986076][ T5626] Bluetooth: hci7: command tx timeout [ 1103.664087][ T6161] hsr_slave_0: left promiscuous mode [ 1103.683232][ T6161] hsr_slave_1: left promiscuous mode [ 1103.684804][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.684836][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.715088][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.715126][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.748933][ T6161] hsr_slave_0: left promiscuous mode [ 1103.757685][ T6161] hsr_slave_1: left promiscuous mode [ 1103.758918][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.758954][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.941924][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.941968][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.127205][T12018] No source specified [ 1104.994325][ T6161] veth1_macvtap: left promiscuous mode [ 1104.994393][ T6161] veth0_macvtap: left promiscuous mode [ 1104.994585][ T6161] veth1_vlan: left promiscuous mode [ 1104.994685][ T6161] veth0_vlan: left promiscuous mode [ 1105.031732][ T6161] veth1_macvtap: left promiscuous mode [ 1105.031786][ T6161] veth0_macvtap: left promiscuous mode [ 1105.031927][ T6161] veth1_vlan: left promiscuous mode [ 1105.032028][ T6161] veth0_vlan: left promiscuous mode [ 1105.215207][ T5626] Bluetooth: hci7: command tx timeout [ 1105.802876][ T6161] team0 (unregistering): Port device team_slave_1 removed [ 1105.835363][ T6161] team0 (unregistering): Port device team_slave_0 removed [ 1106.661256][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1106.663014][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1106.664988][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1106.666279][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1106.667128][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1106.894043][ T6161] team0 (unregistering): Port device team_slave_1 removed [ 1106.940490][ T6161] team0 (unregistering): Port device team_slave_0 removed [ 1107.451944][ T5629] Bluetooth: hci7: command tx timeout [ 1107.480744][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1107.890014][T12037] overlayfs: failed to resolve './file0': -2 [ 1107.959012][T12038] overlayfs: failed to resolve './file0': -2 [ 1108.903556][ T5629] Bluetooth: hci1: command tx timeout [ 1109.662425][ T5629] Bluetooth: hci7: command tx timeout [ 1111.126776][ T5629] Bluetooth: hci1: command tx timeout [ 1113.425108][ T5629] Bluetooth: hci1: command tx timeout [ 1113.996293][T12062] overlayfs: failed to resolve './file0': -2 [ 1114.712240][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.712412][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.648793][ T5629] Bluetooth: hci1: command tx timeout [ 1117.914931][ T6161] bridge_slave_1: left allmulticast mode [ 1117.914983][ T6161] bridge_slave_1: left promiscuous mode [ 1117.929724][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.932847][ T6161] bridge_slave_0: left allmulticast mode [ 1117.932874][ T6161] bridge_slave_0: left promiscuous mode [ 1117.933067][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.058737][ T6161] bridge_slave_1: left allmulticast mode [ 1118.058790][ T6161] bridge_slave_1: left promiscuous mode [ 1118.059071][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.076179][T12090] loop4: detected capacity change from 0 to 512 [ 1118.097786][ T6161] bridge_slave_0: left allmulticast mode [ 1118.103795][ T6161] bridge_slave_0: left promiscuous mode [ 1118.104189][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.338828][ T6161] bridge_slave_1: left allmulticast mode [ 1118.338974][ T6161] bridge_slave_1: left promiscuous mode [ 1118.339679][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.480999][ T6161] bridge_slave_0: left allmulticast mode [ 1118.481134][ T6161] bridge_slave_0: left promiscuous mode [ 1118.484041][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.174581][ T5629] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1119.722292][T12098] 9p: Bad value for 'rfdno' [ 1120.854902][ T6161] bond0 (unregistering): Released all slaves [ 1122.788693][ T6161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.819634][ T6161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.820442][T12110] loop8: detected capacity change from 0 to 2048 [ 1122.834555][ T6161] bond0 (unregistering): Released all slaves [ 1122.933368][T12110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.079796][T12119] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1124.383241][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.740'. [ 1124.787698][T12122] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1124.790005][T12122] 9p: Bad value for 'rfdno' [ 1125.300878][ T6161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.326128][ T6161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.328810][ T6161] bond0 (unregistering): Released all slaves [ 1125.455371][ T6161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.458931][ T6161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.460967][ T6161] bond0 (unregistering): Released all slaves [ 1125.826870][T12114] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1126.059324][T10946] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.188557][T11822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.188721][T11822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.188959][T11822] bridge_slave_0: entered allmulticast mode [ 1126.191597][T11822] bridge_slave_0: entered promiscuous mode [ 1126.426923][ T6161] hsr_slave_0: left promiscuous mode [ 1127.658091][ T6161] hsr_slave_1: left promiscuous mode [ 1127.659770][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.937119][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.015863][T12137] overlayfs: failed to resolve './file0': -2 [ 1128.195854][ T6161] hsr_slave_0: left promiscuous mode [ 1128.247178][ T6161] hsr_slave_1: left promiscuous mode [ 1128.248311][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.250940][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.815203][T12155] overlayfs: failed to resolve './file0': -2 [ 1129.403519][ T6161] team0 (unregistering): Port device team_slave_1 removed [ 1129.691489][ T6161] team0 (unregistering): Port device team_slave_0 removed [ 1130.996656][T12164] autofs: Unknown parameter '00000000000000000000' [ 1131.504668][ T6161] team0 (unregistering): Port device team_slave_1 removed [ 1131.549211][ T6161] team0 (unregistering): Port device team_slave_0 removed [ 1131.813872][T11822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.814002][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.814169][T11822] bridge_slave_1: entered allmulticast mode [ 1131.816385][T11822] bridge_slave_1: entered promiscuous mode [ 1132.006302][T11822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.010046][T11822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.110670][T11980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.110912][T11980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.111165][T11980] bridge_slave_0: entered allmulticast mode [ 1132.115641][T11980] bridge_slave_0: entered promiscuous mode [ 1132.154356][T11822] team0: Port device team_slave_0 added [ 1132.154644][T11980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.154838][T11980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.164865][T11980] bridge_slave_1: entered allmulticast mode [ 1132.175580][T11980] bridge_slave_1: entered promiscuous mode [ 1132.275808][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1132.281855][T11822] team0: Port device team_slave_1 added [ 1132.310339][T11980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.331424][T11980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.432484][T11822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.432520][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.432564][T11822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.515941][T11822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.516010][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.516060][T11822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.562546][T11980] team0: Port device team_slave_0 added [ 1132.576434][T11980] team0: Port device team_slave_1 added [ 1132.754376][T11980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.754409][T11980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.754457][T11980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.758311][T11980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.758332][T11980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.758379][T11980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.876364][T11822] hsr_slave_0: entered promiscuous mode [ 1132.891898][T11822] hsr_slave_1: entered promiscuous mode [ 1133.059984][T11980] hsr_slave_0: entered promiscuous mode [ 1133.061291][T11980] hsr_slave_1: entered promiscuous mode [ 1133.062328][T11980] debugfs: 'hsr0' already exists in 'hsr' [ 1133.062359][T11980] Cannot create hsr debugfs directory [ 1133.587337][T12021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.587930][T12021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.588151][T12021] bridge_slave_0: entered allmulticast mode [ 1133.590629][T12021] bridge_slave_0: entered promiscuous mode [ 1133.615404][T12021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.615537][T12021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.615716][T12021] bridge_slave_1: entered allmulticast mode [ 1133.618230][T12021] bridge_slave_1: entered promiscuous mode [ 1133.819718][T12021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.839175][T12021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.916544][T12021] team0: Port device team_slave_0 added [ 1133.918612][ T6161] bridge_slave_1: left allmulticast mode [ 1133.918654][ T6161] bridge_slave_1: left promiscuous mode [ 1133.919001][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.945546][ T6161] bridge_slave_0: left allmulticast mode [ 1133.945592][ T6161] bridge_slave_0: left promiscuous mode [ 1133.945937][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.052780][ T6161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.055566][ T6161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.057260][ T6161] bond0 (unregistering): Released all slaves [ 1134.098147][T12021] team0: Port device team_slave_1 added [ 1134.280521][T12021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.280553][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.280601][T12021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.323865][ T5275] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1134.339138][T12021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.339169][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.339238][T12021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.401854][ T6161] hsr_slave_0: left promiscuous mode [ 1134.402714][ T6161] hsr_slave_1: left promiscuous mode [ 1134.403564][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.404250][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.566120][ T6161] team0 (unregistering): Port device team_slave_1 removed [ 1134.604861][ T6161] team0 (unregistering): Port device team_slave_0 removed [ 1134.955123][T12021] hsr_slave_0: entered promiscuous mode [ 1134.966650][T12021] hsr_slave_1: entered promiscuous mode [ 1134.970300][T12021] debugfs: 'hsr0' already exists in 'hsr' [ 1134.970333][T12021] Cannot create hsr debugfs directory [ 1134.974183][ T5275] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1135.276207][T11980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1135.285227][T11980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1135.286561][T11980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1135.320781][T11980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1135.386136][T11980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1135.398812][T11980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1135.464173][T11980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1135.478312][T11980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1135.806988][T11822] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1135.818701][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1135.819947][T11822] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1135.838744][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1135.869757][T11822] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1135.874582][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1135.963753][T11822] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1135.968907][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1136.088945][T11980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.332044][T11980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.483657][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.483820][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.524712][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.524858][ T6118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.671834][T11822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.691391][T11980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1136.770828][T11822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.812169][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.812314][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.895903][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.896101][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.112216][T12021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1137.130685][T12021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.132043][T12021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1137.161602][T12021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.178507][T12021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1137.202731][T12021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1137.204050][T12021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1137.208045][T12021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1137.574109][T12021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.635444][T12021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.662973][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.663104][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.690489][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.690622][ T6161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.378880][T11980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.950368][T11822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.229154][T12021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.429296][T12021] veth0_vlan: entered promiscuous mode [ 1139.437238][T11980] veth0_vlan: entered promiscuous mode [ 1139.456041][T12021] veth1_vlan: entered promiscuous mode [ 1139.462542][T11980] veth1_vlan: entered promiscuous mode [ 1139.581694][T11980] veth0_macvtap: entered promiscuous mode [ 1139.595511][T12021] veth0_macvtap: entered promiscuous mode [ 1139.622854][T11980] veth1_macvtap: entered promiscuous mode [ 1139.633484][T12021] veth1_macvtap: entered promiscuous mode [ 1139.739720][T11980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.761632][T12021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.784383][T11980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.819730][T12021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.902405][ T5868] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.960090][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.961769][ T7357] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.961843][ T7357] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.961905][ T7357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.961964][ T7357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.962025][ T7357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.962087][ T7357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.292811][T11822] veth0_vlan: entered promiscuous mode [ 1140.299958][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.299997][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.351306][T11822] veth1_vlan: entered promiscuous mode [ 1140.439162][ T5891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.439203][ T5891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.555466][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.555507][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.582685][T11822] veth0_macvtap: entered promiscuous mode [ 1140.618961][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.618998][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.638757][T11822] veth1_macvtap: entered promiscuous mode [ 1140.721204][T11822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.773280][T11822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.868805][ T5868] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.868893][ T5868] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.868973][ T5868] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.869033][ T5868] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.459334][T12334] loop1: detected capacity change from 0 to 32768 [ 1142.574743][T12334] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1142.699247][T12333] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 1144.779168][T12356] loop8: detected capacity change from 0 to 512 [ 1145.293411][T12367] 9p: Bad value for 'rfdno' [ 1145.920501][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1145.938176][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1145.941240][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1145.963420][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1145.972471][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1146.115054][T12356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.115320][T12356] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.301742][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 1146.405334][T12356] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.476869][ T9700] ocfs2: Unmounting device (7,1) on (node local) [ 1148.236895][ T5629] Bluetooth: hci4: command tx timeout [ 1148.351630][T12381] overlayfs: failed to resolve './file0': -2 [ 1148.461438][T12394] jffs2: notice: (12394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1150.473729][ T5629] Bluetooth: hci4: command tx timeout [ 1151.424165][T12404] loop6: detected capacity change from 0 to 2048 [ 1153.018543][ T5629] Bluetooth: hci4: command tx timeout [ 1153.271429][T12404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1153.390285][ T59] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.520735][T12434] overlayfs: failed to resolve './file0': -2 [ 1153.631560][T12436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.719233][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.814965][T11980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.175184][ T5629] Bluetooth: hci4: command tx timeout [ 1155.806781][ T59] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.537724][T12460] loop6: detected capacity change from 0 to 32768 [ 1159.773544][T12460] JBD2: journal reset failed [ 1159.773590][T12460] (syz.6.764,12460,1):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1159.773636][T12460] (syz.6.764,12460,1):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 1160.526679][T12492] overlayfs: failed to resolve './file0': -2 [ 1160.873721][T12492] jffs2: notice: (12492) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1161.726411][T12490] ceph: No mds server is up or the cluster is laggy [ 1163.116877][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1163.117197][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1164.154413][ T7708] libceph: connect (1)[c::]:6789 error -101 [ 1164.154742][ T7708] libceph: mon0 (1)[c::]:6789 connect error [ 1164.304590][ T59] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.710397][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 1164.711093][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 1166.292635][ T59] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.986773][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 1168.439822][T12510] overlayfs: failed to resolve './file0': -2 [ 1168.877327][ T5785] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1170.000934][T12518] bond0: Unable to set down delay as MII monitoring is disabled [ 1175.275668][ T5785] usb 2-1: device descriptor read/all, error -71 [ 1176.458877][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 1176.761684][T12553] gtp0: entered allmulticast mode [ 1176.863965][ T31] audit: type=1800 audit(2000000498.194:33): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.782" name="/usb_gadget/g1/functions/ncm.usb0" dev="configfs" ino=45830 res=0 errno=0 [ 1177.002276][ T31] audit: type=1400 audit(2000000498.324:34): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12552 comm="syz.3.784" [ 1177.299839][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1177.311560][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1177.314807][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1177.324729][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1177.327842][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1178.348125][T12575] netlink: 72 bytes leftover after parsing attributes in process `syz.1.787'. [ 1178.536998][T12577] loop1: detected capacity change from 0 to 1024 [ 1179.310655][ T59] bridge_slave_1: left allmulticast mode [ 1179.310703][ T59] bridge_slave_1: left promiscuous mode [ 1179.310989][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.369275][ T59] bridge_slave_0: left allmulticast mode [ 1179.369324][ T59] bridge_slave_0: left promiscuous mode [ 1179.369636][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.063073][ T5629] Bluetooth: hci0: command tx timeout [ 1180.395916][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.396030][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.909535][ T5629] Bluetooth: hci0: command tx timeout [ 1183.252278][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.314835][T12602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.338130][ T31] audit: type=1800 audit(2000000504.255:35): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.785" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1183.440978][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.450212][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.479980][ T59] bond0 (unregistering): Released all slaves [ 1183.836903][ T59] hsr_slave_0: left promiscuous mode [ 1183.843321][ T59] hsr_slave_1: left promiscuous mode [ 1183.845530][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.845564][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.851531][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.851566][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.946937][ T59] veth1_macvtap: left promiscuous mode [ 1183.947010][ T59] veth0_macvtap: left promiscuous mode [ 1183.947230][ T59] veth1_vlan: left promiscuous mode [ 1183.947330][ T59] veth0_vlan: left promiscuous mode [ 1184.909276][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1184.954438][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1184.955539][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'. [ 1185.096185][ T5626] Bluetooth: hci0: command tx timeout [ 1186.264824][T12606] netlink: 'syz.4.785': attribute type 29 has an invalid length. [ 1187.859612][ T5626] Bluetooth: hci0: command tx timeout [ 1188.347796][T12656] FAULT_INJECTION: forcing a failure. [ 1188.347796][T12656] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.347986][T12656] CPU: 0 UID: 0 PID: 12656 Comm: syz.3.798 Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.348044][T12656] Tainted: [L]=SOFTLOCKUP [ 1188.348060][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1188.348096][T12656] Call Trace: [ 1188.348119][T12656] [ 1188.348134][T12656] dump_stack_lvl+0x100/0x190 [ 1188.348213][T12656] should_fail_ex.cold+0x5/0xa [ 1188.348261][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.348321][T12656] should_failslab+0xc2/0x120 [ 1188.348410][T12656] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1188.348482][T12656] ? __alloc_skb+0x140/0x710 [ 1188.348582][T12656] __alloc_skb+0x140/0x710 [ 1188.348644][T12656] ? __alloc_skb+0x5b7/0x710 [ 1188.348707][T12656] ? __pfx___alloc_skb+0x10/0x10 [ 1188.348776][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.348825][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.348874][T12656] ? skb_zerocopy_clone+0x2d4/0x6c0 [ 1188.348913][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.348961][T12656] ? __asan_memcpy+0x3c/0x60 [ 1188.349048][T12656] skb_segment+0x9ab/0x4270 [ 1188.349141][T12656] __udp_gso_segment+0x14e0/0x2a50 [ 1188.349225][T12656] ? __pfx_sock_wfree+0x10/0x10 [ 1188.349316][T12656] udp4_ufo_fragment+0x52a/0x710 [ 1188.349371][T12656] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 1188.349423][T12656] inet_gso_segment+0x622/0x1260 [ 1188.349503][T12656] skb_mac_gso_segment+0x2a5/0x640 [ 1188.349640][T12656] ? __pfx_inet_gso_segment+0x10/0x10 [ 1188.349693][T12656] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 1188.349747][T12656] ? __ip_finish_output.part.0+0x444/0x6f0 [ 1188.349800][T12656] ? ip_mc_output+0x466/0xd70 [ 1188.349846][T12656] ? __pfx_netif_skb_features+0x10/0x10 [ 1188.349912][T12656] __skb_gso_segment+0x3f8/0x7a0 [ 1188.349972][T12656] validate_xmit_skb+0x9ab/0x16b0 [ 1188.350034][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.350082][T12656] ? __lock_acquire+0x5c0/0x1f40 [ 1188.350132][T12656] validate_xmit_skb_list+0xcd/0x160 [ 1188.350195][T12656] sch_direct_xmit+0x480/0xc70 [ 1188.350263][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.350311][T12656] ? lock_acquire+0x1d1/0x380 [ 1188.350353][T12656] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1188.350403][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.350453][T12656] ? do_raw_spin_lock+0x1b0/0x260 [ 1188.350520][T12656] __dev_queue_xmit+0x2812/0x4a40 [ 1188.350581][T12656] ? exit_tasks_rcu_finish+0x1f6/0x2d0 [ 1188.350651][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.350699][T12656] ? trace_sched_exit_tp+0x120/0x160 [ 1188.350803][T12656] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1188.350871][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.350929][T12656] ? __pfx___schedule+0x10/0x10 [ 1188.350988][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.351036][T12656] ? lock_acquire+0x1d1/0x380 [ 1188.351077][T12656] ? ip_finish_output2+0x851/0x2400 [ 1188.351122][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.351211][T12656] ? find_held_lock+0x2b/0x80 [ 1188.351275][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.351323][T12656] ? __asan_memcpy+0x3c/0x60 [ 1188.351384][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.351432][T12656] ? eth_header+0x120/0x1f0 [ 1188.351492][T12656] neigh_resolve_output+0x51f/0x8f0 [ 1188.351561][T12656] ip_finish_output2+0x851/0x2400 [ 1188.351619][T12656] ? __pfx_ip_finish_output2+0x10/0x10 [ 1188.351666][T12656] ? skb_gso_transport_seglen+0x1a5/0x3b0 [ 1188.351736][T12656] __ip_finish_output.part.0+0x444/0x6f0 [ 1188.351797][T12656] ip_mc_output+0x466/0xd70 [ 1188.351848][T12656] ? __pfx_ip_mc_output+0x10/0x10 [ 1188.351894][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.351941][T12656] ? ip_make_skb+0x1f4/0x310 [ 1188.351993][T12656] ? __pfx_ip_finish_output+0x10/0x10 [ 1188.352041][T12656] ? __pfx_ip_make_skb+0x10/0x10 [ 1188.352087][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.352136][T12656] ? csum_tcpudp_nofold+0x24/0x50 [ 1188.352194][T12656] ? __pfx_ip_mc_output+0x10/0x10 [ 1188.352244][T12656] ip_send_skb+0x24c/0x2a0 [ 1188.352295][T12656] udp_send_skb+0xa38/0xfc0 [ 1188.352349][T12656] udp_sendmsg+0x1760/0x2710 [ 1188.352404][T12656] ? __pfx_udp_sendmsg+0x10/0x10 [ 1188.352445][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.352494][T12656] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1188.352540][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.352615][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.352674][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.352722][T12656] ? __trace_trigger_soft_disabled+0x95/0x290 [ 1188.352794][T12656] ? lock_acquire+0x1d1/0x380 [ 1188.352835][T12656] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1188.352880][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.352928][T12656] ? find_held_lock+0x2b/0x80 [ 1188.352985][T12656] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1188.353037][T12656] udpv6_sendmsg+0x1420/0x2c20 [ 1188.353151][T12656] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1188.353195][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.353243][T12656] ? lockdep_hardirqs_on+0x7d/0x110 [ 1188.353311][T12656] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1188.353398][T12656] ? preempt_schedule_irq+0x79/0x90 [ 1188.353473][T12656] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1188.353533][T12656] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1188.353591][T12656] ? inet6_sendmsg+0x105/0x140 [ 1188.353645][T12656] inet6_sendmsg+0x105/0x140 [ 1188.353703][T12656] sock_write_iter+0x41a/0x5b0 [ 1188.353762][T12656] ? __pfx_sock_write_iter+0x10/0x10 [ 1188.353833][T12656] ? rw_verify_area+0x3ea/0x6d0 [ 1188.353953][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.354002][T12656] ? rw_verify_area+0xce/0x6d0 [ 1188.354063][T12656] vfs_write+0x6af/0x1050 [ 1188.354128][T12656] ? __pfx_sock_write_iter+0x10/0x10 [ 1188.354184][T12656] ? __pfx_vfs_write+0x10/0x10 [ 1188.354244][T12656] ? find_held_lock+0x2b/0x80 [ 1188.354332][T12656] ksys_write+0x1f8/0x250 [ 1188.354394][T12656] ? __pfx_ksys_write+0x10/0x10 [ 1188.354462][T12656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1188.354519][T12656] do_syscall_64+0x123/0x790 [ 1188.354579][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.354622][T12656] RIP: 0033:0x7fa20ff9e159 [ 1188.354663][T12656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.354704][T12656] RSP: 002b:00007fa210e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1188.354763][T12656] RAX: ffffffffffffffda RBX: 00007fa210226180 RCX: 00007fa20ff9e159 [ 1188.354788][T12656] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 1188.354815][T12656] RBP: 00007fa21003506b R08: 0000000000000000 R09: 0000000000000000 [ 1188.354841][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.354870][T12656] R13: 00007fa210226218 R14: 00007fa210226180 R15: 00007ffead26aa08 [ 1188.354923][T12656] [ 1188.788584][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.839854][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.840137][T12359] bridge_slave_0: entered allmulticast mode [ 1188.854789][T12359] bridge_slave_0: entered promiscuous mode [ 1188.918016][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.918143][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.918410][T12359] bridge_slave_1: entered allmulticast mode [ 1188.942819][T12359] bridge_slave_1: entered promiscuous mode [ 1189.573523][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.598541][T12647] debugfs: '!' already exists in 'ieee80211' [ 1189.622752][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.805084][T12359] team0: Port device team_slave_0 added [ 1189.826511][T12359] team0: Port device team_slave_1 added [ 1192.201487][T12663] veth0: entered promiscuous mode [ 1192.222386][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.222422][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.222472][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.298911][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.298938][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.365849][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.216377][T12663] veth0: left promiscuous mode [ 1193.334790][T12359] hsr_slave_0: entered promiscuous mode [ 1193.336271][T12359] hsr_slave_1: entered promiscuous mode [ 1194.470484][T12683] [ 1194.473089][T12683] ====================================================== [ 1194.480819][T12683] WARNING: possible circular locking dependency detected [ 1194.488547][T12683] syzkaller #0 Tainted: G L [ 1194.495120][T12683] ------------------------------------------------------ [ 1194.502831][T12683] syz.3.807/12683 is trying to acquire lock: [ 1194.509409][T12683] ffffffff90401ea8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 1194.521874][T12683] [ 1194.521874][T12683] but task is already holding lock: [ 1194.529970][T12683] ffff8880535a8ac0 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1194.541517][T12683] [ 1194.541517][T12683] which lock already depends on the new lock. [ 1194.541517][T12683] [ 1194.552952][T12683] [ 1194.552952][T12683] the existing dependency chain (in reverse order) is: [ 1194.562864][T12683] [ 1194.562864][T12683] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 1194.572474][T12683] lock_acquire+0x1d1/0x380 [ 1194.578023][T12683] down_write+0x8b/0x1f0 [ 1194.583302][T12683] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1194.590389][T12683] usbg_make_tpg+0x251/0x610 [ 1194.596097][T12683] target_fabric_make_tpg+0xab/0x8c0 [ 1194.602550][T12683] configfs_mkdir+0x525/0xd40 [ 1194.608281][T12683] vfs_mkdir+0x364/0x850 [ 1194.613591][T12683] filename_mkdirat+0x48b/0x5e0 [ 1194.619557][T12683] __x64_sys_mkdirat+0x89/0xc0 [ 1194.625388][T12683] do_syscall_64+0x123/0x790 [ 1194.631030][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.638099][T12683] [ 1194.638099][T12683] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1194.646826][T12683] lock_acquire+0x1d1/0x380 [ 1194.652376][T12683] __mutex_lock+0x1a4/0x1bd0 [ 1194.658026][T12683] tcm_alloc_inst+0x5f/0x1e0 [ 1194.663659][T12683] try_get_usb_function_instance+0x136/0x1f0 [ 1194.670885][T12683] usb_get_function_instance+0x16/0x70 [ 1194.677492][T12683] function_make+0x18c/0x3f0 [ 1194.683170][T12683] configfs_mkdir+0x525/0xd40 [ 1194.688900][T12683] vfs_mkdir+0x364/0x850 [ 1194.694171][T12683] filename_mkdirat+0x48b/0x5e0 [ 1194.700100][T12683] __x64_sys_mkdirat+0x89/0xc0 [ 1194.705934][T12683] do_syscall_64+0x123/0x790 [ 1194.711585][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.718657][T12683] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1194.718657][T12683] -> #1 (func_lock){+.+.}-{4:4}: [ 1194.726522][T12683] lock_acquire+0x1d1/0x380 [ 1194.732061][T12683] __mutex_lock+0x1a4/0x1bd0 [ 1194.737704][T12683] try_get_usb_function_instance+0x26/0x1f0 [ 1194.744783][T12683] usb_get_function_instance+0x16/0x70 [ 1194.751397][T12683] function_make+0x18c/0x3f0 [ 1194.757067][T12683] configfs_mkdir+0x525/0xd40 [ 1194.762797][T12683] vfs_mkdir+0x364/0x850 [ 1194.768073][T12683] filename_mkdirat+0x48b/0x5e0 [ 1194.774026][T12683] __x64_sys_mkdirat+0x89/0xc0 [ 1194.779879][T12683] do_syscall_64+0x123/0x790 [ 1194.785519][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.792656][T12683] [ 1194.792656][T12683] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1194.801762][T12683] check_prev_add+0xeb/0xe60 [ 1194.807394][T12683] __lock_acquire+0x1528/0x1f40 [ 1194.813348][T12683] lock_acquire+0x1d1/0x380 [ 1194.818891][T12683] __mutex_lock+0x1a4/0x1bd0 [ 1194.824539][T12683] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1194.832089][T12683] configfs_symlink+0x695/0x1340 [ 1194.838144][T12683] vfs_symlink+0x178/0x4d0 [ 1194.843714][T12683] filename_symlinkat+0x2a6/0x560 [ 1194.849835][T12683] __x64_sys_symlinkat+0x9c/0xe0 [ 1194.855867][T12683] do_syscall_64+0x123/0x790 [ 1194.861514][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.868580][T12683] [ 1194.868580][T12683] other info that might help us debug this: [ 1194.868580][T12683] [ 1194.879857][T12683] Chain exists of: [ 1194.879857][T12683] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#27 [ 1194.879857][T12683] [ 1194.896341][T12683] Possible unsafe locking scenario: [ 1194.896341][T12683] [ 1194.904559][T12683] CPU0 CPU1 [ 1194.910448][T12683] ---- ---- [ 1194.916347][T12683] lock(&sb->s_type->i_mutex_key#27); [ 1194.922378][T12683] lock(tpg_instances_lock); [ 1194.930299][T12683] lock(&sb->s_type->i_mutex_key#27); [ 1194.939103][T12683] lock(gadget_subsys.su_mutex); [ 1194.944640][T12683] [ 1194.944640][T12683] *** DEADLOCK *** [ 1194.944640][T12683] [ 1194.953591][T12683] locks held by syz.3.807/12683: 2, last CPU#1: [ 1194.960541][T12683] #0: ffff88801e3fc460 (sb_writers#18){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1194.971061][T12683] #1: ffff8880535a8ac0 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1194.983095][T12683] [ 1194.983095][T12683] stack backtrace: [ 1194.989573][T12683] CPU: 1 UID: 0 PID: 12683 Comm: syz.3.807 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.001535][T12683] Tainted: [L]=SOFTLOCKUP [ 1195.006290][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1195.017378][T12683] Call Trace: [ 1195.020978][T12683] [ 1195.024221][T12683] dump_stack_lvl+0x100/0x190 [ 1195.029447][T12683] print_circular_bug.cold+0x178/0x1be [ 1195.035526][T12683] check_noncircular+0x146/0x160 [ 1195.041011][T12683] check_prev_add+0xeb/0xe60 [ 1195.046108][T12683] ? stack_trace_save+0x8e/0xc0 [ 1195.051519][T12683] __lock_acquire+0x1528/0x1f40 [ 1195.056908][T12683] ? kasan_save_track+0x14/0x30 [ 1195.062291][T12683] ? kasan_save_free_info+0x3b/0x70 [ 1195.068069][T12683] lock_acquire+0x1d1/0x380 [ 1195.073079][T12683] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1195.080096][T12683] ? __pfx___might_resched+0x10/0x10 [ 1195.085995][T12683] __mutex_lock+0x1a4/0x1bd0 [ 1195.091113][T12683] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1195.098175][T12683] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1195.105189][T12683] ? __lock_acquire+0x5c0/0x1f40 [ 1195.110692][T12683] ? __pfx___mutex_lock+0x10/0x10 [ 1195.116309][T12683] ? make_vfsuid+0xec/0x140 [ 1195.121317][T12683] ? __pfx___might_resched+0x10/0x10 [ 1195.127194][T12683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.133457][T12683] ? make_vfsgid+0xf1/0x140 [ 1195.138463][T12683] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1195.145480][T12683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.151736][T12683] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1195.158652][T12683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.164905][T12683] ? inode_permission+0x374/0x620 [ 1195.170482][T12683] ? mntput_no_expire+0xe7/0x220 [ 1195.175943][T12683] configfs_symlink+0x695/0x1340 [ 1195.181435][T12683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.187667][T12683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.193897][T12683] ? security_inode_permission+0xbf/0x250 [ 1195.200229][T12683] ? __pfx_configfs_symlink+0x10/0x10 [ 1195.206180][T12683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.212419][T12683] vfs_symlink+0x178/0x4d0 [ 1195.217340][T12683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.223582][T12683] filename_symlinkat+0x2a6/0x560 [ 1195.229150][T12683] ? __pfx_filename_symlinkat+0x10/0x10 [ 1195.235292][T12683] ? strncpy_from_user+0x19d/0x2d0 [ 1195.240970][T12683] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1195.247202][T12683] ? do_getname+0x191/0x390 [ 1195.252197][T12683] __x64_sys_symlinkat+0x9c/0xe0 [ 1195.257672][T12683] do_syscall_64+0x123/0x790 [ 1195.262764][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.269301][T12683] RIP: 0033:0x7fa20ff9e159 [ 1195.274200][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.295802][T12683] RSP: 002b:00007fa210ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1195.305101][T12683] RAX: ffffffffffffffda RBX: 00007fa210225fa0 RCX: 00007fa20ff9e159 [ 1195.314010][T12683] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 1195.322801][T12683] RBP: 00007fa21003506b R08: 0000000000000000 R09: 0000000000000000 [ 1195.331604][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.340403][T12683] R13: 00007fa210226038 R14: 00007fa210225fa0 R15: 00007ffead26aa08 [ 1195.349208][T12683] [ 1196.420662][ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.880981][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.057006][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.238033][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.681822][ T50] bridge_slave_1: left allmulticast mode [ 1197.681866][ T50] bridge_slave_1: left promiscuous mode [ 1197.682082][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.688155][ T50] bridge_slave_0: left allmulticast mode [ 1197.688180][ T50] bridge_slave_0: left promiscuous mode [ 1197.688400][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.812702][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.814796][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.816214][ T50] bond0 (unregistering): Released all slaves [ 1198.073398][ T50] hsr_slave_0: left promiscuous mode [ 1198.075728][ T50] hsr_slave_1: left promiscuous mode [ 1198.076440][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.076485][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.077331][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.077356][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.133538][ T50] veth1_macvtap: left promiscuous mode [ 1198.133592][ T50] veth0_macvtap: left promiscuous mode [ 1198.133702][ T50] veth1_vlan: left promiscuous mode [ 1198.133783][ T50] veth0_vlan: left promiscuous mode [ 1198.533842][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1198.540828][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1198.932210][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.980902][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.056710][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.083181][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.200370][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.229688][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.290850][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.333285][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.462387][ T50] bridge_slave_1: left allmulticast mode [ 1199.462431][ T50] bridge_slave_1: left promiscuous mode [ 1199.462623][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.475956][ T50] bridge_slave_0: left allmulticast mode [ 1199.476017][ T50] bridge_slave_0: left promiscuous mode [ 1199.476199][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.511061][ T50] bridge_slave_1: left allmulticast mode [ 1199.518085][ T50] bridge_slave_1: left promiscuous mode [ 1199.518288][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.530078][ T50] bridge_slave_0: left allmulticast mode [ 1199.530116][ T50] bridge_slave_0: left promiscuous mode [ 1199.530298][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.558902][ T50] bridge_slave_1: left allmulticast mode [ 1199.558946][ T50] bridge_slave_1: left promiscuous mode [ 1199.559155][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.574465][ T50] bridge_slave_0: left allmulticast mode [ 1199.574506][ T50] bridge_slave_0: left promiscuous mode [ 1199.574694][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.731064][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.732906][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.734027][ T50] bond0 (unregistering): Released all slaves [ 1199.773162][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.776067][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.777477][ T50] bond0 (unregistering): Released all slaves [ 1199.844938][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.846796][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.856783][ T50] bond0 (unregistering): Released all slaves [ 1200.075098][ T50] rxrpc: Leaked peer 615 {1} 127.0.0.1:7003 [ 1200.492358][ T50] hsr_slave_0: left promiscuous mode [ 1200.493197][ T50] hsr_slave_1: left promiscuous mode [ 1200.493877][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.493907][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.494623][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.494648][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.497917][ T50] hsr_slave_0: left promiscuous mode [ 1200.498541][ T50] hsr_slave_1: left promiscuous mode [ 1200.499222][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.499786][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.580665][ T50] hsr_slave_0: left promiscuous mode [ 1200.581214][ T50] hsr_slave_1: left promiscuous mode [ 1200.581899][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.581929][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.582577][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.582602][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.635703][ T50] veth1_macvtap: left promiscuous mode [ 1200.635759][ T50] veth0_macvtap: left promiscuous mode [ 1200.635879][ T50] veth1_vlan: left promiscuous mode [ 1200.635953][ T50] veth0_vlan: left promiscuous mode [ 1200.637286][ T50] veth1_macvtap: left promiscuous mode [ 1200.637329][ T50] veth0_macvtap: left promiscuous mode [ 1200.637425][ T50] veth1_vlan: left promiscuous mode [ 1200.637513][ T50] veth0_vlan: left promiscuous mode [ 1200.905992][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1200.931116][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1201.061813][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1201.079452][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1201.224455][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1201.235873][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1201.309194][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1202.274187][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1202.736236][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1203.105050][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1203.465376][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13