last executing test programs: 29m3.57023518s ago: executing program 32 (id=1): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100000000090400000103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x2710}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) poll(0x0, 0x0, 0x4b0) close(r3) poll(0x0, 0x0, 0x4b0) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000700)="01", 0x2d, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 28m11.518087941s ago: executing program 33 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x401, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = syz_io_uring_setup(0xf2d, &(0x7f0000000180)={0x0, 0xb5d2, 0x8, 0x1, 0x33a}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000300)) r7 = eventfd(0x26) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r7, 0x1) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x80b2, 0x110101, 0x3, 0x55}, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030062"], 0xc041) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000254}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x252, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 25m56.236197718s ago: executing program 34 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = msgget$private(0x0, 0x208) msgsnd(r1, &(0x7f0000002880)={0x1}, 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, 0x0, 0x0) msgrcv(r1, &(0x7f00000001c0)={0x0, ""/18}, 0x1a, 0x1, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xb5, 0x800) ftruncate(0xffffffffffffffff, 0xb66f) sendmsg$inet(r0, 0x0, 0x4004045) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) sendto$inet(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) 25m52.069568516s ago: executing program 35 (id=175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a}) 25m51.865617658s ago: executing program 36 (id=176): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 24m40.515277895s ago: executing program 37 (id=222): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d37", 0x20) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="2c6772ba6d705fe9643d5eef3353f79dbb39df286506369b195489b78fec604f2fcbcb26c053c22daf93ce4be6f9faabfb32e0dcb5eaac8267a125bc62fcbd05b16ad4d8a49a30f95764270f02a8ee4a1e56d10d3b3218a6dbf853b506f014d414a69b972e615aaed5a293f89e62ec6c242602fafad88ba1", @ANYBLOB]) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}], 0x10, 0x40040}], 0x1, 0x8040) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) 24m14.31727166s ago: executing program 38 (id=240): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x3}]}, @func={0x10, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x5}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x0, 0x2e, 0x61]}}, &(0x7f0000000940)=""/19, 0x5c, 0x13, 0x1, 0x38}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0x2, 0x7, 0x4, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) unshare(0x8000400) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000ac0)=""/247, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xbf, 0x84, 0x7, 0x17, 0x0, "e758cae9ffed10000000b24000", "39e8000000001e00"}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x7, 0x15, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x624f9bdfb876db43, 0xf908, 0x7, 0xc000}}) unshare(0x26020480) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001800800010005b60000260002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r4 = socket(0xa, 0x5, 0x0) sendto$inet6(r4, &(0x7f0000000680)="9f", 0x2a000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5d}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3}}, 0x2, 0x1000}, &(0x7f0000000200)=0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 23m8.105643379s ago: executing program 39 (id=298): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r1, 0x111, 0x3, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000c00)="1c0000001e005f0214bb7afffffffff807000000b800e6ff0d0000", 0x1b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r7, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r8, 0x80045626, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r9, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x1, 0x40000032, r3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) 20m15.238383596s ago: executing program 40 (id=383): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 20m2.696738261s ago: executing program 41 (id=395): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002080)=""/108, 0x6c, 0x100000000000055) pselect6(0x40, &(0x7f0000000040)={0x8, 0x6, 0x0, 0x5, 0x6, 0x0, 0x5, 0x2}, &(0x7f0000000080)={0x8, 0x2, 0x100000000, 0x6, 0x1ff, 0x4, 0x4000000000, 0x9}, &(0x7f00000000c0)={0x7, 0x401, 0x2, 0x6, 0x6, 0xfffff00000000000, 0xd, 0x9}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4064840) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) 19m52.760668337s ago: executing program 42 (id=403): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[], [{@appraise_type}, {@smackfsdef}]}) timerfd_gettime(r2, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0x20) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x840) 16m58.307306497s ago: executing program 43 (id=531): socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='127.0.0.1', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='7', 0x1) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='0', 0x1) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='1', 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x0, 0xfdb7, 0x100000, 0x9, {}, {0x4, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x6, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r8}) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14m16.01530217s ago: executing program 44 (id=671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f004f187f18b418c41f6fb5e8d1d7129133d1329a645e249be67871578514d243e21de7b093e600dacc8a4cd313aee1400d1b926a5208b730c316aacb56fd955fd5d404004d13b24b83581d0befb710a96cd8aef2fdec6e08f2a31d175ce25a67820239c3d01db07a01dc261f5bc1fa99d2a34c49e102d6c3d02c5fab067a2e293224d0e505415e772f67ef00feb20e83ddc3480d04000000000000000236f9c69cac825d598a9501985cad8dc149f129fc"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300040000000a881fc10c10a428219c00000000e1fb31cfa897", @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000000100"/22], 0x48) sched_setscheduler(r1, 0x6, &(0x7f00000002c0)=0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/133}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) 11m52.802466967s ago: executing program 2 (id=799): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x58, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91705564e6f77c25"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) 11m47.303890829s ago: executing program 2 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000003c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000002a00)=""/15, 0xf}], 0x4}, 0xec}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x4080) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() unshare(0x40400) r2 = mq_open(&(0x7f0000001ec0)='#]#*\x00', 0x40, 0x2, 0x0) mq_getsetattr(r2, 0x0, &(0x7f0000001f80)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[], 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000080)=0x2, 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) 11m37.919733652s ago: executing program 2 (id=811): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x140841, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f0000000200), 0x0, &(0x7f00000001c0), 0x9d1400, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000000)={0x0, 0x2, 0x7, &(0x7f0000000240)={0x1d, "e922604a455494c905fd824393fe53e14fcab3d1eb00007456b15b0000000800"}}) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4008004}], 0x1, 0x20) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000100), 0x0, 0x24008094) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000500)=""/88, 0x58}, {&(0x7f0000000100)=""/27, 0x1b}], 0x3}, 0x10000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f0000000140)=[{0xffffffffffffffa1, 0xfffffffffffffff9}]}) 11m33.091049157s ago: executing program 2 (id=817): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x49, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x6, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x8000005, 0x6, 0x8, 0x4, 0x1, 0x40], [0x80000001, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e2, 0x3, 0xdd, 0xd, 0x2bf, 0x3, 0x9, 0x8, 0x3, 0x0, 0x7, 0x10000005, 0x32, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x8, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0xffff8000, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x3, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7ff, 0x6, 0xb, 0x48c93690, 0x2, 0xfb], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x25, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x8, 0x80, 0x3, 0x4, 0x80002, 0x401, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0x0, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x2000008, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) r4 = socket(0x8, 0x2, 0x0) getpid() getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x4204000c, 0x0, &(0x7f00000000c0)) 11m26.825260056s ago: executing program 2 (id=822): creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_open_dev$video(0x0, 0x2, 0x101000) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x42a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) close(0xffffffffffffffff) 11m18.914182176s ago: executing program 4 (id=828): socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) 11m17.360182396s ago: executing program 2 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 11m4.298729256s ago: executing program 4 (id=841): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0xa, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x4, 0xd, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) socket$nl_netfilter(0x10, 0x3, 0xc) 11m0.900884263s ago: executing program 45 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 11m0.83779038s ago: executing program 4 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x2, 0x0, 0x1, 0x3, 0x2, 0x2}, 0x20) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000202000000000000000000000903000000000000006100"], 0x0, 0x52}, 0x28) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) userfaultfd(0x801) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) setresuid(0x0, 0xee00, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 10m58.842056185s ago: executing program 4 (id=846): syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000140)={0xc, {0x7, "10ff000102005a"}}, 0xd) write$UHID_INPUT2(r5, &(0x7f0000000180), 0x6) write$UHID_INPUT2(r5, &(0x7f00000001c0)={0xc, {0x14, "11ff00110100"/20}}, 0x1a) write$UHID_CREATE2(r5, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x24, 0x5, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a10185107508950609018102090191028511750895130901810209019102c0"}}, 0x13c) read(r5, &(0x7f0000000800), 0x1000) write$UHID_INPUT2(r5, &(0x7f0000000340)={0xc, {0x7, "10ff000102005a"}}, 0xd) write$UHID_INPUT2(r5, &(0x7f0000000380)={0xc, {0x7, "10ff0011010000"}}, 0xd) write$UHID_INPUT2(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c000000140011ff00110000000000000000df00000000000000"], 0x1a) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') 10m44.589149641s ago: executing program 4 (id=859): creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_open_dev$video(0x0, 0x2, 0x101000) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x42a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) close(0xffffffffffffffff) 10m42.896866404s ago: executing program 4 (id=860): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) shutdown(r1, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r5, 0x0) accept(r5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000700)={"92703b5f0ad3acc536bed4be2b35ad99", 0x0, 0x0, {0x8, 0x7}, {0x3, 0x2}, 0x9, [0x7, 0x8a98, 0x7, 0x5, 0x6, 0x3, 0x10, 0x7fffffff, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x3ff, 0x8, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000980)={"2190620bbe63284f9af2567940412bb1", 0x0, r6, {0xf90, 0x4}, {0x95, 0x40}, 0x5, [0x5, 0x6, 0xe, 0x7, 0xc, 0xc, 0x1, 0x1, 0x2, 0x0, 0x5, 0x6, 0x3, 0xfff, 0x5, 0x445]}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/67) 10m27.757651245s ago: executing program 46 (id=860): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) shutdown(r1, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r5, 0x0) accept(r5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000700)={"92703b5f0ad3acc536bed4be2b35ad99", 0x0, 0x0, {0x8, 0x7}, {0x3, 0x2}, 0x9, [0x7, 0x8a98, 0x7, 0x5, 0x6, 0x3, 0x10, 0x7fffffff, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x3ff, 0x8, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000980)={"2190620bbe63284f9af2567940412bb1", 0x0, r6, {0xf90, 0x4}, {0x95, 0x40}, 0x5, [0x5, 0x6, 0xe, 0x7, 0xc, 0xc, 0x1, 0x1, 0x2, 0x0, 0x5, 0x6, 0x3, 0xfff, 0x5, 0x445]}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/67) 4m7.615256444s ago: executing program 6 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000009c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000840)={@flat=@weak_handle={0x77682a85, 0x110b}, @fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f00000008c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) 4m6.247844529s ago: executing program 6 (id=1204): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000200000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_FLAGS={0x8}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x89}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4m4.498594634s ago: executing program 6 (id=1207): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) 4m0.873155855s ago: executing program 6 (id=1210): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x3a1801) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/229) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3c3b3163090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e80400000c5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27ffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f912ff01000021ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7bd50978b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd015ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3062479b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefdc01000094d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebc82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d3f458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f75a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a4780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af5617ea94c9493260fad0000f96f06817fb903729a7db6ff957697c9ede7885d94ffb00600e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x1807002, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) userfaultfd(0x801) 3m58.457712828s ago: executing program 6 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6874000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200800001000200000000000100020000000000100001000000000020"], 0x24, 0x3) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000001d80)={0x0, 0x2, 0x0, 0x8}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x9, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60000002, 0x0) close(r6) socket$inet(0x2, 0x4, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 3m56.219673126s ago: executing program 6 (id=1216): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x10, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r1, r2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f0000000780)=[{0x4010, 0x0, 0x0, 0x0}, {0x9, 0x200, 0x0, 0x0}], 0x2}) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)=@newtclass={0x50, 0x28, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x8}, {0xa, 0xffe0}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xe9, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x5}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000140)=0xe) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000040)=0xfffffffe, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') read$FUSE(r9, &(0x7f0000001400)={0x2020}, 0x2020) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r11 = mq_open(0x0, 0x42, 0x1f0, 0x0) fcntl$lock(r11, 0x25, 0x0) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x260, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m55.596250249s ago: executing program 5 (id=1217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYRESOCT, @ANYRES64=r8, @ANYBLOB="2d324617fa9cfd5b09e42193571f15169a4eb29d4276290ced9253982ab91f695bfb85e93c275c0fdb88330d66634dc0866b95f0b4ca0c95b667401ff105c2c270c77c321c89e1f571c89002000000fc2e1cb29abda3c0c9590121c1e26f66191ae982e40fd008404c484a1064da1a9285c9c185058cd5fe53a793658462d5ac8248daa1481195af207a18fb90eec71ae1ddfea2157a6f279cc592e064aefb76f0da7ed87b7219f57878d49ead", @ANYBLOB="d9b5dfa2db106c319d27f54f19503a97bb7779a9b0eca78ce4217a3ab2fddb633fcb0ed76c6eed07926e5f182d3621b52b516a022134be840b1e1c3803c1e403df31e8d52057a9a669fa0203559c42a9313463018881cadc0795e82d170f6b0b27c4bc12a025bf273b21cc2a75e042e673b3b15c54dcfb41a2e55ed1b4fddef2bb3b9a64dba39cf7b6", @ANYRES8=r0, @ANYBLOB="f14f750f3da55c15686576bf29a30c0d918df1d73dd09c62e0bbf349107576b16d831b3a23444bcdc5928333d15ae486990c3668d0a36f97027141bdeed244cc135b53e71a5b93ef7b849f653b66975963121d3a7cfba629de6a841e359ab2a18648e4bf58ca8fc615d70e5f07a5af77f2", @ANYRES8=r1], 0xb0}, 0x1, 0x0, 0x0, 0x4044000}, 0x8050) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000340)) r11 = dup(r10) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000000)={0x1, r11}) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m51.738101503s ago: executing program 5 (id=1219): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000240)=0x7f, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x7f) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000002000)="53464f5a05abbf5900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099e98558e1b79cd70010b52b9b9800"/4093, 0xffd, 0x4) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) 3m51.513181032s ago: executing program 5 (id=1221): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x58, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91705564e6f77c25"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) 3m44.982293399s ago: executing program 5 (id=1229): syz_open_dev$dri(0x0, 0x1f, 0x191601) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0x100000005, 0xf}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4b, &(0x7f0000000000)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400) shutdown(r1, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x5}, 0x4}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)="bc", 0x1, 0x4000014, &(0x7f0000000100)={0xa, 0x4e1f, 0x3, @mcast2, 0xfffffffe}, 0xfffffffffffffce5) sendmmsg$inet(r4, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)='{', 0x1}], 0x1}}], 0x1, 0x24008884) close(r4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r6) sendmsg$ETHTOOL_MSG_WOL_GET(r6, 0x0, 0x4000010) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r5, 0x0) 3m42.575105448s ago: executing program 3 (id=1232): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d01, &(0x7f0000000a00)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, &(0x7f0000000040)) 3m42.574009588s ago: executing program 5 (id=1242): creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_open_dev$video(0x0, 0x2, 0x101000) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x42a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) 3m40.858961092s ago: executing program 47 (id=1216): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x10, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r1, r2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f0000000780)=[{0x4010, 0x0, 0x0, 0x0}, {0x9, 0x200, 0x0, 0x0}], 0x2}) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)=@newtclass={0x50, 0x28, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x8}, {0xa, 0xffe0}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xe9, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x5}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000140)=0xe) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000040)=0xfffffffe, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') read$FUSE(r9, &(0x7f0000001400)={0x2020}, 0x2020) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r11 = mq_open(0x0, 0x42, 0x1f0, 0x0) fcntl$lock(r11, 0x25, 0x0) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x260, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m39.696818059s ago: executing program 5 (id=1234): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000001100)={0x2, 0x2, 0xb}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r4}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x5, 0x1}, 0x80, 0x0}, 0x240440d1) r9 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02864c3, &(0x7f0000000400)={0x0, 0xa, 0x0, 0x6}) ioctl(r7, 0x40104d02, &(0x7f0000000900)) 3m39.622104416s ago: executing program 3 (id=1236): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newqdisc={0x98, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x100}]}}]}, 0x98}}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x2001, 0x0, 0x2}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x212000, 0x100) unshare(0x40400) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x2d, 0x1001, r3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001498b95d10000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000900000000000000000a000000000000000000000080400000000000000000080000000000000000000100000000000044000500fc020000000000000000000000000000000004d36c00000002000000ff0100000000000000000000000000010735000001030900020000000100000004000000"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0x1, 0xffffffff, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@local, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x12100ca, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x3, 0x84) sendmsg$sock(r9, &(0x7f0000004180)={&(0x7f0000000200)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80, 0x0, 0x0, &(0x7f0000004140)=[@timestamping={{0x14, 0x1, 0x25, 0x40}}], 0x18}, 0x4000000) getsockopt$inet_int(r8, 0x0, 0x22, 0x0, &(0x7f0000000040)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2001, r2}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040fe1b1090d20"], 0x7) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) 3m38.160877567s ago: executing program 3 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 3m36.472491722s ago: executing program 3 (id=1238): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1500, @loopback}, 0x10) listen(r0, 0x5) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x1, 0x2, 0x40, "11010000001400000100b64c0000005c4b7c15000000000000000400", 0x3031334d}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000180)=0x81, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x1500, 0x0, 'rr\x00', 0x1f, 0x0, 0xfffffffd}, 0x2c) r4 = socket$inet(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007007f0000017f00000184"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f00000000c0)='\x87\xe9\xb0', 0x3) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfff, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x890) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800000000000000140000001100", @ANYRES64], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x1c, r10, 0x1, 0x0, 0x0, {{0x53}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 3m32.234511875s ago: executing program 3 (id=1244): creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_open_dev$video(0x0, 0x2, 0x101000) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x42a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) 3m29.899558383s ago: executing program 3 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 3m24.180986637s ago: executing program 48 (id=1234): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000001100)={0x2, 0x2, 0xb}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r4}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x5, 0x1}, 0x80, 0x0}, 0x240440d1) r9 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02864c3, &(0x7f0000000400)={0x0, 0xa, 0x0, 0x6}) ioctl(r7, 0x40104d02, &(0x7f0000000900)) 3m14.401208532s ago: executing program 49 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 12.566902611s ago: executing program 7 (id=1486): creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_open_dev$video(0x0, 0x2, 0x101000) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x42a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset(&(0x7f0000000c00)={0x19980330}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) 12.187543304s ago: executing program 9 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000600001170000010203040506070800000c00020006002000080000000c0003"], 0x68}}, 0x0) 11.457044085s ago: executing program 1 (id=1490): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x1f) 11.267870401s ago: executing program 1 (id=1491): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000002440)={0x0, 0x0, 0x1, 0x4}, 0x1) 11.164253243s ago: executing program 9 (id=1493): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000ac0)={0x27, 0x0, 0x1, 0x4}, 0x10) 10.800892142s ago: executing program 9 (id=1495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x43) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/105, 0x69}], 0x1, 0x42, 0x3) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x3000009, 0x0, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) shutdown(r2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2e, &(0x7f0000000680)=ANY=[@ANYBLOB="ffeaffffffffffffffffff884700000c00000f0f003304be319309bf86d6e6a836ef38e01063f4605758bb"], 0x0) syz_open_dev$media(&(0x7f0000000100), 0x5, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xaf, 0xb, "f3fffffeffffff38"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xa) 8.192390994s ago: executing program 1 (id=1499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) 7.80736792s ago: executing program 7 (id=1502): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x1, 0x70bd2d, 0x25dfdbf4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0xd7082272f25212d0}, 0x4000) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000140)=ANY=[], 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd, @loopback, @loopback}}}}}}, 0x0) recvmmsg(r5, &(0x7f0000002a00), 0x0, 0x10000, 0x0) 7.643746141s ago: executing program 9 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 7.471646649s ago: executing program 8 (id=1505): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x2, 0x9, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@flowinfo={{0x14, 0x29, 0x34, 0x8}}], 0x18}, 0x20000010) 6.054137361s ago: executing program 7 (id=1506): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, &(0x7f0000001080)) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(0x0, 0x8, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f0000000280)={r6, r7+10000000}) bind$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) mount$tmpfs(0x0, &(0x7f0000005dc0)='.\x00', 0x0, 0x1000000, &(0x7f0000005e40)) 6.053398611s ago: executing program 8 (id=1507): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x6d, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.037469591s ago: executing program 0 (id=1508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newsa={0xf0, 0x10, 0x1, 0x3, 0x0, {{@in6=@private1, @in6=@private2, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x0, 0xe0}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x20000000, 0x1, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0xb111}, 0x0, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x77c1816f4f559e4e) 4.762583801s ago: executing program 7 (id=1509): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x8, 0x2000000}}) 4.667540205s ago: executing program 8 (id=1510): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, &(0x7f0000001080)) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(0x0, 0x8, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f0000000280)={r6, r7+10000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) mount$tmpfs(0x0, &(0x7f0000005dc0)='.\x00', 0x0, 0x1000000, &(0x7f0000005e40)) 4.624799375s ago: executing program 1 (id=1511): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') lseek(r0, 0x2, 0x0) 4.540590478s ago: executing program 0 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 4.215306112s ago: executing program 7 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x1, 0x70bd2d, 0x25dfdbf4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0xd7082272f25212d0}, 0x4000) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000140)=ANY=[], 0x8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x28, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd, @loopback, @loopback}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000002a00), 0x0, 0x10000, 0x0) 3.085705259s ago: executing program 1 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x43) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/105, 0x69}], 0x1, 0x42, 0x3) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x3000009, 0x0, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) shutdown(r2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2e, &(0x7f0000000680)=ANY=[@ANYBLOB="ffeaffffffffffffffffff884700000c00000f0f003304be319309bf86d6e6a836ef38e01063f4605758bb"], 0x0) syz_open_dev$media(&(0x7f0000000100), 0x5, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xaf, 0xb, "f3fffffeffffff38"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xa) 2.894368001s ago: executing program 0 (id=1515): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x28}, 0x34004894) 2.86611288s ago: executing program 7 (id=1516): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 2.747442842s ago: executing program 8 (id=1517): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x1, 0x70bd2d, 0x25dfdbf4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0xd7082272f25212d0}, 0x4000) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000140)=ANY=[], 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd, @loopback, @loopback}}}}}}, 0x0) recvmmsg(r5, &(0x7f0000002a00), 0x0, 0x10000, 0x0) 1.656340095s ago: executing program 0 (id=1518): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffffa, 0x0}) 503.646718ms ago: executing program 0 (id=1519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1b}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 502.143768ms ago: executing program 8 (id=1520): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @empty, 0x2}, 0x7d, &(0x7f0000000300)=[{&(0x7f00000021c0), 0x2}], 0x1}, 0x20000040) 452.073461ms ago: executing program 9 (id=1521): r0 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x207}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x700, 0x0) 239.888839ms ago: executing program 8 (id=1522): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x402, @empty, 0x10004}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}, 0x4080) 201.827789ms ago: executing program 9 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 37.414856ms ago: executing program 1 (id=1524): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000029c0)=ANY=[@ANYBLOB="04060342c9"], 0x6) 0s ago: executing program 0 (id=1525): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): 4.424279][T13934] ? __pfx___access_remote_vm+0x10/0x10 [ 1434.424306][T13934] ? rep_movs_alternative+0x4a/0xa0 [ 1434.424378][T13934] proc_pid_cmdline_read+0x46e/0x900 [ 1434.424398][T13934] ? __asan_memset+0x22/0x50 [ 1434.424438][T13934] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1434.424461][T13934] ? rw_verify_area+0x250/0x4d0 [ 1434.424488][T13934] vfs_readv+0x588/0x850 [ 1434.424517][T13934] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1434.424541][T13934] ? __pfx_vfs_readv+0x10/0x10 [ 1434.424582][T13934] ? __fget_files+0x2a/0x420 [ 1434.424606][T13934] ? __fget_files+0x3a8/0x420 [ 1434.424625][T13934] ? __fget_files+0x2a/0x420 [ 1434.424653][T13934] __x64_sys_preadv+0x19f/0x2c0 [ 1434.424685][T13934] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1434.424725][T13934] do_syscall_64+0x166/0x520 [ 1434.424748][T13934] ? trace_irq_disable+0x3b/0x140 [ 1434.424785][T13934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.424806][T13934] ? clear_bhb_loop+0x70/0xc0 [ 1434.424829][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.424849][T13934] RIP: 0033:0x7fc8d918e159 [ 1434.424871][T13934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.424890][T13934] RSP: 002b:00007fc8d73e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1434.424915][T13934] RAX: ffffffffffffffda RBX: 00007fc8d9415fa0 RCX: 00007fc8d918e159 [ 1434.424933][T13934] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003 [ 1434.424947][T13934] RBP: 00007fc8d9225024 R08: 0000000000006a76 R09: 0000000000000000 [ 1434.424963][T13934] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 1434.424979][T13934] R13: 00007fc8d9416038 R14: 00007fc8d9415fa0 R15: 00007ffcb023a1a8 [ 1434.425010][T13934] [ 1434.909268][T13553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.516106][ T5603] Bluetooth: hci0: command tx timeout [ 1437.055680][ T3397] hsr_slave_0: left promiscuous mode [ 1437.222613][ T3397] hsr_slave_1: left promiscuous mode [ 1437.232016][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.294282][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.491680][T13956] netlink: 'syz.9.1036': attribute type 63 has an invalid length. [ 1437.500939][T13956] netlink: 45349 bytes leftover after parsing attributes in process `syz.9.1036'. [ 1437.590267][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1036'. [ 1437.598801][ T5603] Bluetooth: hci0: command tx timeout [ 1439.883949][T13971] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1439.938193][T13971] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1443.938070][ T3397] team0 (unregistering): Port device team_slave_1 removed [ 1444.126483][ T3397] team0 (unregistering): Port device team_slave_0 removed [ 1444.767108][T13688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.767187][T13688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.767218][T13688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.850387][T13688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.860923][T13688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.860960][T13688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.150582][T13553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.659466][T13688] hsr_slave_0: entered promiscuous mode [ 1447.660942][T13688] hsr_slave_1: entered promiscuous mode [ 1447.661920][T13688] debugfs: 'hsr0' already exists in 'hsr' [ 1447.661947][T13688] Cannot create hsr debugfs directory [ 1448.313531][T13553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.362550][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.372756][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.402976][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.406646][T14002] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1448.406687][T14002] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1448.406754][T14002] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1448.414124][T14002] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1448.438446][T14002] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1448.585044][T13892] wlan0 speed is unknown, defaulting to 1000 [ 1448.603708][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.606773][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.609350][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.613808][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.821640][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.823744][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1448.825963][T14002] wlan0 speed is unknown, defaulting to 1000 [ 1451.607881][T14019] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1451.636779][T14019] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1453.817976][T13553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.517498][T14041] dummy0: entered promiscuous mode [ 1455.517726][T14041] dummy0: entered allmulticast mode [ 1457.260354][T14056] jffs2: notice: (14056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1458.476823][T11749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1458.591189][T14061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1458.605727][T11749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1458.619282][T11749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1458.653874][T11749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1458.666601][T11749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1461.213219][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1058'. [ 1461.560976][T11749] Bluetooth: hci6: command tx timeout [ 1463.215934][T14096] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1463.345176][T14101] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1061'. [ 1463.413350][T14100] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1463.416667][T14100] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1463.546335][T14097] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1463.620300][T11749] Bluetooth: hci6: command tx timeout [ 1464.212724][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1064'. [ 1465.874875][T11749] Bluetooth: hci6: command tx timeout [ 1466.059335][T13892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.075419][T13892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.075622][T13892] bridge_slave_0: entered allmulticast mode [ 1466.102564][T13892] bridge_slave_0: entered promiscuous mode [ 1466.125413][T13892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.132714][T13892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.133267][T13892] bridge_slave_1: entered allmulticast mode [ 1466.158367][T13892] bridge_slave_1: entered promiscuous mode [ 1466.561630][T13892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.580128][T13892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.680869][T14131] Bluetooth: MGMT ver 1.23 [ 1467.916743][T11749] Bluetooth: hci6: command tx timeout [ 1470.315977][T13892] team0: Port device team_slave_0 added [ 1470.349069][T13892] team0: Port device team_slave_1 added [ 1470.569847][T13892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.569960][T13892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.569985][T13892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.675048][ T5603] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1470.732974][ T3397] bridge_slave_1: left allmulticast mode [ 1470.742577][ T3397] bridge_slave_1: left promiscuous mode [ 1470.742881][ T3397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.927804][ T3397] bridge_slave_0: left allmulticast mode [ 1470.934045][ T3397] bridge_slave_0: left promiscuous mode [ 1470.934329][ T3397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.212835][ T3397] bridge_slave_1: left allmulticast mode [ 1471.212919][ T3397] bridge_slave_1: left promiscuous mode [ 1471.213597][ T3397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.259107][T14160] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1471.267753][T14160] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1471.373755][ T3397] bridge_slave_0: left allmulticast mode [ 1471.375341][ T3397] bridge_slave_0: left promiscuous mode [ 1471.375982][ T3397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.765921][ T3397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.843024][ T3397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.883886][ T3397] bond0 (unregistering): Released all slaves [ 1472.166010][ T3397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.243157][ T3397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.324669][ T3397] bond0 (unregistering): Released all slaves [ 1472.364585][T13892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.367638][T13892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1472.367669][T13892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.459938][T14064] wlan0 speed is unknown, defaulting to 1000 [ 1472.712658][T11749] Bluetooth: hci1: command 0x0406 tx timeout [ 1473.731660][T13892] hsr_slave_0: entered promiscuous mode [ 1473.780818][T14176] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1075'. [ 1473.781094][T14176] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 1473.883107][T13892] hsr_slave_1: entered promiscuous mode [ 1473.936451][T13892] debugfs: 'hsr0' already exists in 'hsr' [ 1473.936613][T13892] Cannot create hsr debugfs directory [ 1474.792737][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 1476.306933][ T3397] hsr_slave_0: left promiscuous mode [ 1476.524643][ T3397] hsr_slave_1: left promiscuous mode [ 1476.525952][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.607461][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.943021][ T3397] hsr_slave_0: left promiscuous mode [ 1478.367521][ T3397] hsr_slave_1: left promiscuous mode [ 1478.418665][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.596676][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.124527][T14224] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1479.134659][T14224] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1479.805690][T14239] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1479.819310][T14239] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1480.403452][ T3397] team0 (unregistering): Port device team_slave_1 removed [ 1480.453115][ T3397] team0 (unregistering): Port device team_slave_0 removed [ 1480.803330][ T3397] team0 (unregistering): Port device team_slave_1 removed [ 1480.854508][ T3397] team0 (unregistering): Port device team_slave_0 removed [ 1483.780797][T14257] Line length is too long: Should be less than 4094 [ 1485.604318][T14064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.611755][T14064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.631397][T14064] bridge_slave_0: entered allmulticast mode [ 1485.671026][T14064] bridge_slave_0: entered promiscuous mode [ 1485.764218][T14064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.764430][T14064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.764624][T14064] bridge_slave_1: entered allmulticast mode [ 1485.766985][T14064] bridge_slave_1: entered promiscuous mode [ 1487.945384][T14064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.416600][T14064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.527613][T14306] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1489.537698][T14306] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1489.748765][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1489.808503][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1489.829722][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1489.845205][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1489.852646][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1489.954393][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.021562][T14064] team0: Port device team_slave_0 added [ 1490.123509][T14064] team0: Port device team_slave_1 added [ 1490.318995][T14064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.327602][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.327638][T14064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.382181][T14064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.382249][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.382302][T14064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.937013][T14064] hsr_slave_0: entered promiscuous mode [ 1490.985049][T14064] hsr_slave_1: entered promiscuous mode [ 1492.162930][T11749] Bluetooth: hci4: command tx timeout [ 1494.233358][T11749] Bluetooth: hci4: command tx timeout [ 1494.843024][T14307] wlan0 speed is unknown, defaulting to 1000 [ 1496.312669][T11749] Bluetooth: hci4: command tx timeout [ 1497.771761][T14346] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1497.772056][T14346] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1498.629536][T14356] openvswitch: netlink: IP tunnel dst address not specified [ 1498.675812][T11749] Bluetooth: hci4: command tx timeout [ 1500.428005][T14371] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 1502.251563][T14371] udc dummy_udc.0: failed to start g1: -19 [ 1502.254305][T14371] UDC core: g1: couldn't find an available UDC or it's busy [ 1502.410575][T14376] udevd[14376]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1502.661320][T14380] netlink: 'syz.7.1100': attribute type 3 has an invalid length. [ 1503.313354][T14382] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1100'. [ 1503.371661][T14384] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1100'. [ 1505.975787][T14064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1506.149348][T14064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1506.455454][T14064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1506.485852][T14409] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1506.495196][T14409] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1506.829000][T11749] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1507.735366][T14064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1507.752255][T14064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1507.832738][T14064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1507.868091][T14424] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1507.876815][T14424] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1507.934937][T14064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1509.902866][T14064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1509.910209][T14436] : renamed from bond_slave_0 (while UP) [ 1514.832275][T14307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.833748][T14307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.834235][T14307] bridge_slave_0: entered allmulticast mode [ 1514.869303][T14307] bridge_slave_0: entered promiscuous mode [ 1514.898506][T14307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.899072][T14307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.899570][T14307] bridge_slave_1: entered allmulticast mode [ 1514.955539][T14307] bridge_slave_1: entered promiscuous mode [ 1515.189087][T14307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.228855][T14307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.496014][T14307] team0: Port device team_slave_0 added [ 1515.526628][T14307] team0: Port device team_slave_1 added [ 1515.756109][T14307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.756182][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.756214][T14307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.787760][T14307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.787819][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.787887][T14307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.006426][T14307] hsr_slave_0: entered promiscuous mode [ 1516.013624][T14307] hsr_slave_1: entered promiscuous mode [ 1516.020461][T14307] debugfs: 'hsr0' already exists in 'hsr' [ 1516.026351][T14307] Cannot create hsr debugfs directory [ 1516.102701][T14482] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1516.102837][T14482] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1516.508884][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1517.466288][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1517.479060][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1517.481517][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1517.488911][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1520.407104][T11749] Bluetooth: hci0: command tx timeout [ 1520.447237][T14506] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1520.447341][T14506] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1522.473016][T11749] Bluetooth: hci0: command tx timeout [ 1522.943573][T14525] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1522.943703][T14525] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1524.340294][T14533] fuse: Unknown parameter '' [ 1524.364230][ T3397] bridge_slave_1: left allmulticast mode [ 1524.364337][ T3397] bridge_slave_1: left promiscuous mode [ 1524.365131][ T3397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.545667][ T3397] bridge_slave_0: left allmulticast mode [ 1524.545770][ T3397] bridge_slave_0: left promiscuous mode [ 1524.548408][ T3397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.554044][T11749] Bluetooth: hci0: command tx timeout [ 1526.577789][ T3397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.633050][T11749] Bluetooth: hci0: command tx timeout [ 1526.964871][ T3397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.149849][ T3397] bond0 (unregistering): Released all slaves [ 1527.363201][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1528.426501][T14487] wlan0 speed is unknown, defaulting to 1000 [ 1529.105075][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1127'. [ 1529.157649][T14578] ip6gretap1: entered allmulticast mode [ 1529.159927][T14578] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1529.163657][T14578] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1529.163673][T14578] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.163711][T14578] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1529.697164][ T3397] hsr_slave_0: left promiscuous mode [ 1529.732776][ T3397] hsr_slave_1: left promiscuous mode [ 1529.743676][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.778047][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1532.722099][T14594] ./dev/nullb1: Can't open blockdev [ 1532.870846][T14588] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1532.872816][T14588] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1533.267615][T14597] fuse: Unknown parameter '' [ 1533.639166][ T3397] team0 (unregistering): Port device team_slave_1 removed [ 1533.744686][ T3397] team0 (unregistering): Port device team_slave_0 removed [ 1535.807648][ T5872] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1537.395443][ T5872] usb 10-1: Using ep0 maxpacket: 32 [ 1537.551960][ T5872] usb 10-1: device descriptor read/all, error -71 [ 1538.161121][T14619] netlink: 'syz.7.1135': attribute type 3 has an invalid length. [ 1538.483028][T14619] netlink: 'syz.7.1135': attribute type 21 has an invalid length. [ 1538.483468][T14619] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1135'. [ 1543.755473][T14652] fuse: Unknown parameter '' [ 1546.182252][T14487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.184779][T14487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.187182][T14487] bridge_slave_0: entered allmulticast mode [ 1546.206766][T14487] bridge_slave_0: entered promiscuous mode [ 1546.254344][T14487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.259751][T14487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.275720][T14487] bridge_slave_1: entered allmulticast mode [ 1546.300216][T14487] bridge_slave_1: entered promiscuous mode [ 1546.747306][T14691] netlink: 'syz.7.1146': attribute type 4 has an invalid length. [ 1546.927333][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1146'. [ 1548.937246][T14706] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1548.937369][T14706] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1550.164420][ T38] audit: type=1800 audit(1788292670.992:644): pid=14712 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1149" name="host_addr" dev="configfs" ino=45682 res=0 errno=0 [ 1550.584423][T14487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.821039][T14487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.114498][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.445522][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1552.233759][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1552.245560][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1552.361577][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1552.370862][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1554.651784][ T5603] Bluetooth: hci5: command tx timeout [ 1555.597583][T14487] team0: Port device team_slave_0 added [ 1555.636905][T14487] team0: Port device team_slave_1 added [ 1556.602404][T14755] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1155'. [ 1556.812958][T14755] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1556.816930][T14755] block (null): Could not allocate knbd recv work queue. [ 1556.825119][ T5603] Bluetooth: hci5: command tx timeout [ 1556.964880][T14755] nbd: failed to add new device [ 1559.291595][T11749] Bluetooth: hci5: command tx timeout [ 1559.348039][T14774] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1559.348305][T14774] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1560.253227][T14487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.253297][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.253328][T14487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.292154][T14487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.292201][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.292278][T14487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.727219][T11749] Bluetooth: hci5: command tx timeout [ 1566.731213][T14812] binder: 14804:14812 ioctl c0306201 0 returned -14 [ 1566.749423][T14812] binder: BINDER_SET_CONTEXT_MGR already set [ 1566.749473][T14812] binder: 14804:14812 ioctl 4018620d 200000000040 returned -16 [ 1567.774134][T14487] hsr_slave_0: entered promiscuous mode [ 1567.788626][T14487] hsr_slave_1: entered promiscuous mode [ 1567.791153][T14487] debugfs: 'hsr0' already exists in 'hsr' [ 1567.791223][T14487] Cannot create hsr debugfs directory [ 1568.035334][T14718] wlan0 speed is unknown, defaulting to 1000 [ 1571.383472][ T3397] bridge_slave_1: left allmulticast mode [ 1571.383567][ T3397] bridge_slave_1: left promiscuous mode [ 1571.384364][ T3397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.503453][ T3397] bridge_slave_0: left allmulticast mode [ 1571.503545][ T3397] bridge_slave_0: left promiscuous mode [ 1571.504347][ T3397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.213396][ T3397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.294875][ T3397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.354030][ T3397] bond0 (unregistering): Released all slaves [ 1572.932612][ T3397] hsr_slave_0: left promiscuous mode [ 1572.972597][ T3397] hsr_slave_1: left promiscuous mode [ 1572.975317][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.016581][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.393669][ T3397] team0 (unregistering): Port device team_slave_1 removed [ 1573.455272][ T3397] team0 (unregistering): Port device team_slave_0 removed [ 1573.847275][T14718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.847797][T14718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.848208][T14718] bridge_slave_0: entered allmulticast mode [ 1573.856408][T14718] bridge_slave_0: entered promiscuous mode [ 1573.873550][T14718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.873986][T14718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.874435][T14718] bridge_slave_1: entered allmulticast mode [ 1573.880769][T14718] bridge_slave_1: entered promiscuous mode [ 1574.036581][T14718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.111288][T14718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.467745][T14718] team0: Port device team_slave_0 added [ 1574.475540][T14718] team0: Port device team_slave_1 added [ 1574.509946][T14718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.510006][T14718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.510082][T14718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.539600][T14718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.539642][T14718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.539728][T14718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.770521][T14718] hsr_slave_0: entered promiscuous mode [ 1574.775890][T14718] hsr_slave_1: entered promiscuous mode [ 1576.549775][T11749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1576.647506][T11749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1576.656142][T11749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1576.669470][T11749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1576.676863][T11749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1577.312630][ T3397] bridge_slave_1: left allmulticast mode [ 1577.318400][ T3397] bridge_slave_1: left promiscuous mode [ 1577.318674][ T3397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.484096][ T3397] bridge_slave_0: left allmulticast mode [ 1577.484188][ T3397] bridge_slave_0: left promiscuous mode [ 1577.484825][ T3397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.917140][ T3397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.994381][ T3397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.053972][ T3397] bond0 (unregistering): Released all slaves [ 1578.121856][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1578.802687][ T3397] hsr_slave_0: left promiscuous mode [ 1578.842419][ T3397] hsr_slave_1: left promiscuous mode [ 1578.843516][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.873199][ T3397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.882467][ T5603] Bluetooth: hci4: command tx timeout [ 1579.445806][ T3397] team0 (unregistering): Port device team_slave_1 removed [ 1579.503361][ T3397] team0 (unregistering): Port device team_slave_0 removed [ 1579.698275][T14902] wlan0 speed is unknown, defaulting to 1000 [ 1579.723804][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1580.952526][ T5603] Bluetooth: hci4: command tx timeout [ 1580.990110][T14718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1581.110903][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1581.135293][T14718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1581.190137][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1581.268457][T14718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1581.338133][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1581.369914][T14718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1581.428071][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1581.464963][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1582.009911][T14902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.010449][T14902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.011036][T14902] bridge_slave_0: entered allmulticast mode [ 1582.028830][T14902] bridge_slave_0: entered promiscuous mode [ 1582.051822][T14902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.059017][T14902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.059588][T14902] bridge_slave_1: entered allmulticast mode [ 1582.076001][T14902] bridge_slave_1: entered promiscuous mode [ 1582.157004][T14902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.180167][T14902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.243620][T14902] team0: Port device team_slave_0 added [ 1582.259639][T14902] team0: Port device team_slave_1 added [ 1582.540694][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1582.613666][T14902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.613749][T14902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.613779][T14902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.651960][T14902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.652012][T14902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.652093][T14902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.919179][T14718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.020906][T14902] hsr_slave_0: entered promiscuous mode [ 1583.029376][T14902] hsr_slave_1: entered promiscuous mode [ 1583.032049][T14902] debugfs: 'hsr0' already exists in 'hsr' [ 1583.032121][T14902] Cannot create hsr debugfs directory [ 1583.032789][ T5603] Bluetooth: hci4: command tx timeout [ 1583.346909][T14718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.411603][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.412100][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.523883][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.524408][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.452690][T13543] bridge_slave_1: left allmulticast mode [ 1584.452778][T13543] bridge_slave_1: left promiscuous mode [ 1584.453060][T13543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.599308][T13543] bridge_slave_0: left allmulticast mode [ 1584.599427][T13543] bridge_slave_0: left promiscuous mode [ 1584.600176][T13543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.085060][T13543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.112530][ T5603] Bluetooth: hci4: command tx timeout [ 1585.163084][T13543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.235161][T13543] bond0 (unregistering): Released all slaves [ 1585.902673][T13543] hsr_slave_0: left promiscuous mode [ 1585.943500][T13543] hsr_slave_1: left promiscuous mode [ 1585.946069][T13543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.967660][T13543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.376020][T13543] team0 (unregistering): Port device team_slave_1 removed [ 1586.433088][T13543] team0 (unregistering): Port device team_slave_0 removed [ 1587.222038][T14718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1587.603897][T14718] veth0_vlan: entered promiscuous mode [ 1587.687519][T14718] veth1_vlan: entered promiscuous mode [ 1587.797773][T14718] veth0_macvtap: entered promiscuous mode [ 1587.814888][T14718] veth1_macvtap: entered promiscuous mode [ 1587.837994][T14718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.851251][T14718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.260393][ T7094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.265800][ T1015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.294516][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.507395][T11414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.947482][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.947502][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.104474][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.104542][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.031170][T15061] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1593.053181][T15061] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1594.570999][T15069] comedi comedi0: comedi_config --init_data is deprecated [ 1595.275533][T14902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1595.401147][T14902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1595.428177][T14902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1595.605894][T14902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1595.619399][T14902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1598.749636][T14902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1598.779399][T14902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1602.065054][T14902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1602.718443][T14902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.848760][T14902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.887589][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.888043][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.975630][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.983017][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.858526][T15140] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1181'. [ 1606.925444][T15153] size and base must be multiples of 4 kiB [ 1606.925479][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.6.1184 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.925513][T15153] Tainted: [L]=SOFTLOCKUP [ 1606.925521][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.925545][T15153] Call Trace: [ 1606.925554][T15153] [ 1606.925565][T15153] dump_stack_lvl+0xe8/0x150 [ 1606.925608][T15153] mtrr_add+0xd5/0x100 [ 1606.925645][T15153] mtrr_ioctl+0xca4/0x13c0 [ 1606.925677][T15153] ? smk_tskacc+0x2fb/0x370 [ 1606.925714][T15153] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1606.925745][T15153] ? smack_file_ioctl+0x265/0x370 [ 1606.925795][T15153] ? __fget_files+0x2a/0x420 [ 1606.925818][T15153] ? __fget_files+0x3a8/0x420 [ 1606.925838][T15153] ? __fget_files+0x2a/0x420 [ 1606.925858][T15153] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1606.925893][T15153] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 1606.925925][T15153] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1606.925955][T15153] __se_sys_ioctl+0xff/0x170 [ 1606.925986][T15153] do_syscall_64+0x166/0x520 [ 1606.926013][T15153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.926036][T15153] ? clear_bhb_loop+0x70/0xc0 [ 1606.926064][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.926088][T15153] RIP: 0033:0x7f16b41de159 [ 1606.926110][T15153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.926129][T15153] RSP: 002b:00007f16b23f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1606.926154][T15153] RAX: ffffffffffffffda RBX: 00007f16b4466180 RCX: 00007f16b41de159 [ 1606.926171][T15153] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1606.926186][T15153] RBP: 00007f16b4275024 R08: 0000000000000000 R09: 0000000000000000 [ 1606.926200][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1606.926214][T15153] R13: 00007f16b4466218 R14: 00007f16b4466180 R15: 00007ffe886f32e8 [ 1606.926250][T15153] [ 1606.936091][T15153] netlink: 'syz.6.1184': attribute type 4 has an invalid length. [ 1609.199601][T15166] fuse: Unknown parameter '' [ 1609.483977][T15171] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1609.526092][T15171] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1610.040894][T15183] netlink: 564 bytes leftover after parsing attributes in process `syz.7.1188'. [ 1610.403882][T14902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.134654][T14902] veth0_vlan: entered promiscuous mode [ 1611.174076][T14902] veth1_vlan: entered promiscuous mode [ 1611.243321][T14902] veth0_macvtap: entered promiscuous mode [ 1611.300996][T14902] veth1_macvtap: entered promiscuous mode [ 1611.331212][T14902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.350932][T14902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.538616][ T8444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.349460][ T38] audit: type=1800 audit(1788292733.192:645): pid=15209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1191" name="p_chmask" dev="configfs" ino=48977 res=0 errno=0 [ 1612.569216][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.152916][ T8444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.154973][ T3397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.597917][T15224] futex_wake_op: syz.7.1192 tries to shift op by 144; fix this program [ 1614.110000][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.117995][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.974933][T15235] overlayfs: missing 'lowerdir' [ 1616.544513][ T7092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.855343][ T8463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.863795][ T8463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.139101][T15246] sg_write: process 542 (syz.7.1195) changed security contexts after opening file descriptor, this is not allowed. [ 1620.408203][T15264] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1620.468133][T15264] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1624.078264][T15286] binder: 15281:15286 ioctl c0306201 200000000080 returned -14 [ 1624.100904][T15286] binder: BINDER_SET_CONTEXT_MGR already set [ 1624.100949][T15286] binder: 15281:15286 ioctl 4018620d 200000000040 returned -16 [ 1626.740720][T15305] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1626.749676][T15305] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1627.048189][T15307] size and base must be multiples of 4 kiB [ 1627.048235][T15307] CPU: 1 UID: 0 PID: 15307 Comm: syz.5.1206 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1627.048277][T15307] Tainted: [L]=SOFTLOCKUP [ 1627.048291][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1627.048306][T15307] Call Trace: [ 1627.048315][T15307] [ 1627.048332][T15307] dump_stack_lvl+0xe8/0x150 [ 1627.048376][T15307] mtrr_add+0xd5/0x100 [ 1627.048415][T15307] mtrr_ioctl+0xca4/0x13c0 [ 1627.048448][T15307] ? smk_tskacc+0x2fb/0x370 [ 1627.048485][T15307] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1627.048518][T15307] ? smack_file_ioctl+0x265/0x370 [ 1627.048566][T15307] ? __rcu_read_unlock+0x83/0xe0 [ 1627.048594][T15307] ? __fget_files+0x2a/0x420 [ 1627.048617][T15307] ? __fget_files+0x3a8/0x420 [ 1627.048639][T15307] ? __fget_files+0x2a/0x420 [ 1627.048660][T15307] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1627.048695][T15307] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 1627.048728][T15307] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1627.048758][T15307] __se_sys_ioctl+0xff/0x170 [ 1627.048789][T15307] do_syscall_64+0x166/0x520 [ 1627.048810][T15307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.048829][T15307] ? clear_bhb_loop+0x70/0xc0 [ 1627.048852][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.048870][T15307] RIP: 0033:0x7f9bb564e159 [ 1627.048886][T15307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.048902][T15307] RSP: 002b:00007f9bb3864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1627.048922][T15307] RAX: ffffffffffffffda RBX: 00007f9bb58d6180 RCX: 00007f9bb564e159 [ 1627.048935][T15307] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1627.048948][T15307] RBP: 00007f9bb56e5024 R08: 0000000000000000 R09: 0000000000000000 [ 1627.048959][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1627.048970][T15307] R13: 00007f9bb58d6218 R14: 00007f9bb58d6180 R15: 00007ffedec2eb48 [ 1627.048998][T15307] [ 1627.195244][T15307] netlink: 'syz.5.1206': attribute type 4 has an invalid length. [ 1628.533030][T15311] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1628.599770][T15312] 9p: Bad value for 'rfdno' [ 1630.441431][T15315] 9pnet_virtio: no channels available for device syz [ 1630.589492][ T154] IPVS: starting estimator thread 0... [ 1631.984558][T15319] IPVS: using max 9 ests per chain, 21600 per kthread [ 1632.356481][T15335] overlayfs: workdir and upperdir must reside under the same mount [ 1632.701484][T15333] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 1635.429580][T15340] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1637.395871][T15365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1639.678727][T15375] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1639.687456][T15375] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1642.151036][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1642.832770][ T1724] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1642.992440][ T1724] usb 10-1: Using ep0 maxpacket: 8 [ 1643.000280][ T1724] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1643.005564][ T1724] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1643.048866][ T1724] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.050653][ T1724] usb 10-1: Product: syz [ 1643.050673][ T1724] usb 10-1: Manufacturer: syz [ 1643.050689][ T1724] usb 10-1: SerialNumber: syz [ 1643.106176][ T1724] usb 10-1: config 0 descriptor?? [ 1643.293489][ T1724] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1643.460189][T15405] futex_wake_op: syz.7.1225 tries to shift op by 144; fix this program [ 1643.794366][ T1724] gspca_zc3xx: reg_w_i err -71 [ 1644.392551][ T1724] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1644.392701][ T1724] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1644.923334][ T1724] usb 10-1: USB disconnect, device number 4 [ 1645.845870][T15417] openvswitch: netlink: Message has 9744 unknown bytes. [ 1645.855431][T15417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1646.331082][T15418] could not allocate digest TFM handle sha3-256-generic [ 1647.388404][ T5247] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1648.148719][T15449] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1230'. [ 1650.712691][T15470] size and base must be multiples of 4 kiB [ 1650.712761][T15470] CPU: 1 UID: 0 PID: 15470 Comm: syz.3.1232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1650.712792][T15470] Tainted: [L]=SOFTLOCKUP [ 1650.712801][T15470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1650.712813][T15470] Call Trace: [ 1650.712822][T15470] [ 1650.712832][T15470] dump_stack_lvl+0xe8/0x150 [ 1650.712869][T15470] mtrr_add+0xd5/0x100 [ 1650.712903][T15470] mtrr_ioctl+0xca4/0x13c0 [ 1650.712933][T15470] ? smk_tskacc+0x2fb/0x370 [ 1650.712975][T15470] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1650.713004][T15470] ? smack_file_ioctl+0x265/0x370 [ 1650.713053][T15470] ? __fget_files+0x2a/0x420 [ 1650.713073][T15470] ? __fget_files+0x3a8/0x420 [ 1650.713092][T15470] ? __fget_files+0x2a/0x420 [ 1650.713112][T15470] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1650.713143][T15470] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 1650.713171][T15470] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1650.713200][T15470] __se_sys_ioctl+0xff/0x170 [ 1650.713223][T15470] do_syscall_64+0x166/0x520 [ 1650.713241][T15470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.713258][T15470] ? clear_bhb_loop+0x70/0xc0 [ 1650.713278][T15470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.713295][T15470] RIP: 0033:0x7f8fb2e2e159 [ 1650.713310][T15470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.713324][T15470] RSP: 002b:00007f8fb1044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.713342][T15470] RAX: ffffffffffffffda RBX: 00007f8fb30b6180 RCX: 00007f8fb2e2e159 [ 1650.713355][T15470] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1650.713366][T15470] RBP: 00007f8fb2ec5024 R08: 0000000000000000 R09: 0000000000000000 [ 1650.713376][T15470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1650.713386][T15470] R13: 00007f8fb30b6218 R14: 00007f8fb30b6180 R15: 00007ffde7cd89e8 [ 1650.713410][T15470] [ 1650.833155][T15470] netlink: 'syz.3.1232': attribute type 4 has an invalid length. [ 1651.941238][T15472] fuse: Unknown parameter '' [ 1652.424379][T15477] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1236'. [ 1653.025535][T11749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1653.112018][T11749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1653.143307][T11749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1653.243639][T11749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1653.257953][T11749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1655.522141][ T5603] Bluetooth: hci0: command tx timeout [ 1656.432583][T15502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1238'. [ 1656.442461][T15502] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 1656.470308][ T8444] IPVS: starting estimator thread 0... [ 1656.562465][T15507] IPVS: using max 9 ests per chain, 21600 per kthread [ 1658.452556][ T5603] Bluetooth: hci0: command tx timeout [ 1661.084359][ T5603] Bluetooth: hci0: command tx timeout [ 1663.113731][ T5603] Bluetooth: hci0: command tx timeout [ 1664.199386][T15480] wlan0 speed is unknown, defaulting to 1000 [ 1667.698497][T15567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1668.373317][T11749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1668.538984][T11749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1668.554007][T11749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1668.616526][T11749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1668.623485][T11749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1670.649933][ T3310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.712702][ T5603] Bluetooth: hci2: command tx timeout [ 1672.813874][ T5603] Bluetooth: hci2: command tx timeout [ 1674.043100][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.372077][ T5603] Bluetooth: hci2: command tx timeout [ 1676.296656][T14070] Bluetooth: hci5: command 0x0406 tx timeout [ 1676.707521][ T3310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.436586][T11749] Bluetooth: hci2: command tx timeout [ 1677.862404][ T6190] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1677.991977][ T3310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.082153][T14070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1678.191648][T14070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1678.210528][T14070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1678.225480][ T6190] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1678.227687][T14070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1678.231955][T14070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1678.392648][ T6190] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1678.392715][ T6190] usb 10-1: Product: syz [ 1678.392731][ T6190] usb 10-1: Manufacturer: syz [ 1678.392746][ T6190] usb 10-1: SerialNumber: syz [ 1679.193100][T15629] vivid-000: kernel_thread() failed [ 1679.399823][ T6190] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1679.469004][ T6190] vp7045: USB control message 'out' went wrong. [ 1679.486037][ T6190] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1679.486101][ T6190] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1679.549578][ T6190] usb 10-1: USB disconnect, device number 5 [ 1681.139174][T11749] Bluetooth: hci4: command tx timeout [ 1681.346771][ T3310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.963066][T15647] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1260'. [ 1682.421095][T15647] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1682.421203][T15647] block (null): Could not allocate knbd recv work queue. [ 1682.622612][T15647] nbd: failed to add new device [ 1683.116267][T15570] wlan0 speed is unknown, defaulting to 1000 [ 1683.192637][T11749] Bluetooth: hci4: command tx timeout [ 1685.282463][T11749] Bluetooth: hci4: command tx timeout [ 1687.352626][T11749] Bluetooth: hci4: command tx timeout [ 1690.171453][ T3310] bridge_slave_1: left allmulticast mode [ 1690.181108][ T3310] bridge_slave_1: left promiscuous mode [ 1690.181325][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.484939][ T3310] bridge_slave_0: left allmulticast mode [ 1692.611461][ T3310] bridge_slave_0: left promiscuous mode [ 1692.617428][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.931146][ T3310] pim6reg: left allmulticast mode [ 1694.084364][T11749] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 1694.327244][ T38] audit: type=1800 audit(1788292815.162:646): pid=15707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1271" name="UDC" dev="configfs" ino=49854 res=0 errno=0 [ 1696.474095][ T3310] bond0 (unregistering): (slave 30): Releasing backup interface [ 1696.558395][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1696.640115][ T3310] bond0 (unregistering): Released all slaves [ 1696.733012][T15623] wlan0 speed is unknown, defaulting to 1000 [ 1697.831382][T15480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.831557][T15480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.831752][T15480] bridge_slave_0: entered allmulticast mode [ 1697.834805][T15480] bridge_slave_0: entered promiscuous mode [ 1697.988109][T15480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.997028][T15480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.997223][T15480] bridge_slave_1: entered allmulticast mode [ 1697.999712][T15480] bridge_slave_1: entered promiscuous mode [ 1698.996445][T15734] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1702.047198][T15480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.095603][T15480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.146128][T15570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.146602][T15570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.146996][T15570] bridge_slave_0: entered allmulticast mode [ 1704.224789][T15570] bridge_slave_0: entered promiscuous mode [ 1704.264233][T15480] team0: Port device team_slave_0 added [ 1704.288972][T15570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.289285][T15570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.289718][T15570] bridge_slave_1: entered allmulticast mode [ 1704.302961][T15570] bridge_slave_1: entered promiscuous mode [ 1704.423280][T15480] team0: Port device team_slave_1 added [ 1705.782958][T15570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.542443][ T3310] hsr_slave_0: left promiscuous mode [ 1707.588035][ T3310] hsr_slave_1: left promiscuous mode [ 1707.590818][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.590875][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.637762][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1707.637841][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.826695][ T3310] veth1_macvtap: left promiscuous mode [ 1707.870935][ T3310] veth0_macvtap: left promiscuous mode [ 1707.872104][ T3310] veth1_vlan: left promiscuous mode [ 1707.874537][ T3310] veth0_vlan: left promiscuous mode [ 1711.042831][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 1711.082826][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 1711.263948][T15480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1711.264000][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.264080][T15480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1711.408542][T15570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.482869][T15480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1711.488434][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.488468][T15480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.658701][T15570] team0: Port device team_slave_0 added [ 1712.682731][T15570] team0: Port device team_slave_1 added [ 1712.749634][T15570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.756713][T15570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1712.756744][T15570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1712.759179][T15570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.759193][T15570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1712.759221][T15570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.927210][T15570] hsr_slave_0: entered promiscuous mode [ 1712.935135][T15570] hsr_slave_1: entered promiscuous mode [ 1712.936074][T15570] debugfs: 'hsr0' already exists in 'hsr' [ 1712.936098][T15570] Cannot create hsr debugfs directory [ 1713.380168][T15798] fuse: Unknown parameter '' [ 1713.634521][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1714.686798][T14070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1714.764058][T14070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1714.775166][T14070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1714.792636][T14070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1714.805458][T14070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1717.423041][T15833] fuse: Unknown parameter '' [ 1718.312422][T11749] Bluetooth: hci5: command tx timeout [ 1718.313623][T14070] Bluetooth: hci1: unexpected event for opcode 0x080c [ 1719.666020][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1719.797114][T15623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.804556][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.804782][T15623] bridge_slave_0: entered allmulticast mode [ 1719.807356][T15623] bridge_slave_0: entered promiscuous mode [ 1719.854086][ T3310] IPVS: stop unused estimator thread 0... [ 1720.392544][T11749] Bluetooth: hci5: command tx timeout [ 1721.969183][T15623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.490515][T11749] Bluetooth: hci5: command tx timeout [ 1722.524513][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.524719][T15623] bridge_slave_1: entered allmulticast mode [ 1722.527840][T15623] bridge_slave_1: entered promiscuous mode [ 1724.690357][T11749] Bluetooth: hci5: command tx timeout [ 1724.797580][T15623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1724.876478][T15623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1725.681199][T11749] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 1727.096687][T13913] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1727.387834][T13913] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1727.423356][T13913] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1727.438249][T13913] usb 10-1: Product: syz [ 1727.438272][T13913] usb 10-1: SerialNumber: syz [ 1727.462710][T13913] usb 10-1: config 0 descriptor?? [ 1727.519416][T13913] hso 10-1:0.0: Not our interface [ 1727.751837][T13913] usb 10-1: USB disconnect, device number 6 [ 1727.870594][T14070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1727.960025][T14070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1727.988078][T14070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1728.006684][T14070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1728.024761][T14070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1728.429663][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.072845][T11749] Bluetooth: hci0: command tx timeout [ 1730.592346][T15814] wlan0 speed is unknown, defaulting to 1000 [ 1730.868067][T11749] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 1732.252821][T11749] Bluetooth: hci0: command tx timeout [ 1733.018076][T15623] team0: Port device team_slave_0 added [ 1733.093672][T15623] team0: Port device team_slave_1 added [ 1734.520204][T11749] Bluetooth: hci0: command tx timeout [ 1734.874885][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.144006][T15623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.152351][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.152379][T15623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.212036][T15623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.212094][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.212193][T15623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.451839][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.572455][T15219] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1735.720409][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.731639][T15219] usb 10-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1735.743088][T15219] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.753370][T15219] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.780394][T15219] usb 10-1: config 0 descriptor?? [ 1735.903644][T15219] rndis_host 10-1:0.0: missing cdc header ether descriptor [ 1736.034097][T15623] hsr_slave_0: entered promiscuous mode [ 1736.038428][T15623] hsr_slave_1: entered promiscuous mode [ 1736.041251][T15623] debugfs: 'hsr0' already exists in 'hsr' [ 1736.041298][T15623] Cannot create hsr debugfs directory [ 1736.049040][T15890] wlan0 speed is unknown, defaulting to 1000 [ 1736.067803][T15219] usb 10-1: USB disconnect, device number 7 [ 1736.313081][T15935] fuse: Unknown parameter '' [ 1736.499739][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.552551][T11749] Bluetooth: hci0: command tx timeout [ 1739.030908][T14070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1739.121617][T14070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1739.135056][T14070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1739.164332][T14070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1739.170177][T14070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1739.932793][ T5728] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1740.137007][ T5728] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1740.138775][ T5728] usb 10-1: not running at top speed; connect to a high speed hub [ 1740.138878][ T5728] usb 10-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1740.159101][ T5728] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.159327][ T5728] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1740.221788][ T5728] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.221866][ T5728] usb 10-1: Product: syz [ 1740.221881][ T5728] usb 10-1: Manufacturer: syz [ 1740.221897][ T5728] usb 10-1: SerialNumber: syz [ 1740.681102][T15970] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1311'. [ 1740.884834][T15970] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1311'. [ 1741.352540][T11749] Bluetooth: hci2: command tx timeout [ 1742.711537][ T5728] snd-ua101 10-1:1.1: sample format descriptor not found [ 1742.810773][ T5728] snd-ua101 10-1:1.0: sample format descriptor not found [ 1743.432404][T11749] Bluetooth: hci2: command tx timeout [ 1743.610153][ T5728] usb 10-1: USB disconnect, device number 8 [ 1745.101246][T15991] futex_wake_op: syz.9.1316 tries to shift op by 144; fix this program [ 1745.976662][T11749] Bluetooth: hci2: command tx timeout [ 1746.612578][T15814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.612773][T15814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.612959][T15814] bridge_slave_0: entered allmulticast mode [ 1746.627741][T15814] bridge_slave_0: entered promiscuous mode [ 1746.744159][T15814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.751516][T15814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.752058][T15814] bridge_slave_1: entered allmulticast mode [ 1746.786030][T15814] bridge_slave_1: entered promiscuous mode [ 1746.885506][T15950] wlan0 speed is unknown, defaulting to 1000 [ 1747.742963][T15814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.817202][T15814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.040711][T16013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1748.072422][T11749] Bluetooth: hci2: command tx timeout [ 1748.776400][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.843894][ T5728] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1748.921689][T15814] team0: Port device team_slave_0 added [ 1749.003761][T15814] team0: Port device team_slave_1 added [ 1749.014920][ T5728] usb 10-1: Using ep0 maxpacket: 32 [ 1749.057259][ T5728] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1749.057410][ T5728] usb 10-1: New USB device found, idVendor=d6aa, idProduct=bee4, bcdDevice=74.55 [ 1749.084162][ T5728] usb 10-1: config 10 has an invalid interface number: 11 but max is 0 [ 1749.084243][ T5728] usb 10-1: config 10 has no interface number 0 [ 1749.084346][ T5728] usb 10-1: config 10 interface 11 has no altsetting 0 [ 1749.111490][ T5728] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.111570][ T5728] usb 10-1: Product: syz [ 1749.111589][ T5728] usb 10-1: Manufacturer: syz [ 1749.111662][ T5728] usb 10-1: SerialNumber: syz [ 1749.418626][T15814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.418731][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.418767][T15814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.623626][ T5728] usb 10-1: USB disconnect, device number 9 [ 1749.807342][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.881295][T15814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.881458][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.881572][T15814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.351689][T16054] l2tp_ppp: sess 2/0: no socket in recv [ 1750.364400][T16059] netlink: 260 bytes leftover after parsing attributes in process `syz.9.1322'. [ 1750.374198][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.441885][T15890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.442041][T15890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.443011][T15890] bridge_slave_0: entered allmulticast mode [ 1750.474568][T15890] bridge_slave_0: entered promiscuous mode [ 1750.518094][T15890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.518429][T15890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.518626][T15890] bridge_slave_1: entered allmulticast mode [ 1750.525257][T15890] bridge_slave_1: entered promiscuous mode [ 1750.809941][T15814] hsr_slave_0: entered promiscuous mode [ 1750.811208][T15814] hsr_slave_1: entered promiscuous mode [ 1750.812076][T15814] debugfs: 'hsr0' already exists in 'hsr' [ 1750.812100][T15814] Cannot create hsr debugfs directory [ 1750.893375][T15890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1750.933209][T15890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.740920][T16071] fuse: Unknown parameter '' [ 1753.038758][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.372557][T11749] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 1755.284067][T15890] team0: Port device team_slave_0 added [ 1755.343618][T15890] team0: Port device team_slave_1 added [ 1755.388007][T11749] Bluetooth: hci3: unexpected cc 0x200b length: 2 > 1 [ 1755.388165][T11749] Bluetooth: hci3: unexpected event for opcode 0x200b [ 1755.504089][T11749] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1755.606545][T15890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.614419][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.614452][T15890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.721940][T15890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.733830][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.733861][T15890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.883509][T16104] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1331'. [ 1756.460854][ T38] audit: type=1326 audit(1788292876.672:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1756.461530][T16103] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1331'. [ 1756.502693][ T38] audit: type=1326 audit(1788292876.682:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1756.502740][ T38] audit: type=1326 audit(1788292876.682:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc8d914e98e code=0x7ffc0000 [ 1756.502782][ T38] audit: type=1326 audit(1788292876.692:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1756.502824][ T38] audit: type=1326 audit(1788292876.692:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1756.502864][ T38] audit: type=1326 audit(1788292876.692:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1756.502905][ T38] audit: type=1326 audit(1788292876.692:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1756.502946][ T38] audit: type=1326 audit(1788292876.692:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1756.502988][ T38] audit: type=1326 audit(1788292876.702:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1756.503029][ T38] audit: type=1326 audit(1788292876.702:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.7.1331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d918e159 code=0x7ffc0000 [ 1757.781858][T11749] Bluetooth: hci3: command 0x0406 tx timeout [ 1758.182803][T14070] Bluetooth: Unexpected continuation frame (len 4) [ 1758.211629][T15890] hsr_slave_0: entered promiscuous mode [ 1758.222493][T15890] hsr_slave_1: entered promiscuous mode [ 1758.234998][T15890] debugfs: 'hsr0' already exists in 'hsr' [ 1758.235025][T15890] Cannot create hsr debugfs directory [ 1759.449573][T15950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.449690][T15950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.449887][T15950] bridge_slave_0: entered allmulticast mode [ 1759.487527][T15950] bridge_slave_0: entered promiscuous mode [ 1759.654975][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1759.662148][T15950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.675658][T15950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.675855][T15950] bridge_slave_1: entered allmulticast mode [ 1759.687616][T15950] bridge_slave_1: entered promiscuous mode [ 1759.944611][T16146] netlink: 'syz.9.1337': attribute type 2 has an invalid length. [ 1759.957942][T16146] : entered promiscuous mode [ 1759.964557][T16146] program syz.9.1337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1760.549071][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 1760.971270][T14070] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1762.822990][T15950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1762.858197][T15950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1762.992676][T16165] fuse: Unknown parameter '' [ 1763.036440][T14070] Bluetooth: hci1: command 0x0406 tx timeout [ 1763.412355][ T5728] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1763.512586][ T66] bridge_slave_1: left allmulticast mode [ 1763.512665][ T66] bridge_slave_1: left promiscuous mode [ 1763.513458][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.583124][ T5728] usb 10-1: not running at top speed; connect to a high speed hub [ 1763.593793][ T5728] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1763.595375][ T5728] usb 10-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1763.595440][ T5728] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.657450][ T66] bridge_slave_0: left allmulticast mode [ 1763.659590][ T66] bridge_slave_0: left promiscuous mode [ 1763.668830][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.758122][ T5728] uvcvideo 10-1:1.0: Found UVC 1.00 device (046d:0825) [ 1763.799436][ T5728] uvcvideo 10-1:1.0: No streaming interface found for terminal 32770. [ 1763.882794][ T5722] usb 10-1: USB disconnect, device number 10 [ 1764.012969][T11749] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1764.021122][ T66] bridge_slave_1: left allmulticast mode [ 1764.021155][ T66] bridge_slave_1: left promiscuous mode [ 1764.021386][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.023867][T11749] CPU: 1 UID: 0 PID: 11749 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1764.023896][T11749] Tainted: [L]=SOFTLOCKUP [ 1764.023904][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1764.023917][T11749] Workqueue: hci1 hci_rx_work [ 1764.024042][T11749] Call Trace: [ 1764.024050][T11749] [ 1764.024060][T11749] dump_stack_lvl+0xe8/0x150 [ 1764.024096][T11749] sysfs_create_dir_ns+0x271/0x2a0 [ 1764.024123][T11749] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1764.024151][T11749] ? rt_spin_unlock+0x165/0x200 [ 1764.024189][T11749] kobject_add_internal+0x62c/0xce0 [ 1764.024255][T11749] kobject_add+0x163/0x240 [ 1764.024276][T11749] ? rt_spin_unlock+0x159/0x200 [ 1764.024306][T11749] ? __pfx_kobject_add+0x10/0x10 [ 1764.024336][T11749] ? get_device_parent+0x370/0x3a0 [ 1764.024420][T11749] device_add+0x3fa/0xb80 [ 1764.024449][T11749] hci_conn_add_sysfs+0xd5/0x210 [ 1764.024526][T11749] le_conn_complete_evt+0xfe3/0x16d0 [ 1764.024590][T11749] ? le_conn_complete_evt+0x1b1/0x16d0 [ 1764.024613][T11749] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1764.024638][T11749] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1764.024680][T11749] ? rt_mutex_slowunlock+0x219/0x460 [ 1764.024711][T11749] ? skb_pull_data+0xf0/0x200 [ 1764.024810][T11749] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1764.024834][T11749] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1764.024859][T11749] hci_event_packet+0x67a/0xf10 [ 1764.024912][T11749] ? reacquire_held_locks+0x117/0x1a0 [ 1764.024960][T11749] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1764.024981][T11749] ? __pfx_hci_event_packet+0x10/0x10 [ 1764.025009][T11749] ? rt_spin_unlock+0x159/0x200 [ 1764.025041][T11749] ? hci_send_to_monitor+0xe2/0x590 [ 1764.025067][T11749] hci_rx_work+0x3ee/0x1020 [ 1764.025101][T11749] ? process_scheduled_works+0x97a/0x1630 [ 1764.025141][T11749] process_scheduled_works+0xc3d/0x1630 [ 1764.025194][T11749] ? __pfx_process_scheduled_works+0x10/0x10 [ 1764.025229][T11749] ? assign_work+0x3cf/0x5d0 [ 1764.025260][T11749] worker_thread+0xa47/0xfb0 [ 1764.025306][T11749] ? __kthread_parkme+0x71/0x1f0 [ 1764.025346][T11749] kthread+0x38b/0x470 [ 1764.025368][T11749] ? __pfx_worker_thread+0x10/0x10 [ 1764.025395][T11749] ? __pfx_kthread+0x10/0x10 [ 1764.025418][T11749] ret_from_fork+0x514/0xb70 [ 1764.025446][T11749] ? __pfx_ret_from_fork+0x10/0x10 [ 1764.025465][T11749] ? __switch_to+0xc89/0x1420 [ 1764.025495][T11749] ? __pfx_kthread+0x10/0x10 [ 1764.025515][T11749] ret_from_fork_asm+0x1a/0x30 [ 1764.025548][T11749] [ 1764.025604][T11749] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1764.025643][T11749] Bluetooth: hci1: failed to register connection device [ 1764.025849][T11749] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1764.453599][ T66] bridge_slave_0: left allmulticast mode [ 1764.453695][ T66] bridge_slave_0: left promiscuous mode [ 1764.454391][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.732822][ T66] bridge_slave_1: left allmulticast mode [ 1764.732904][ T66] bridge_slave_1: left promiscuous mode [ 1764.733482][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.854147][ T66] bridge_slave_0: left allmulticast mode [ 1764.854231][ T66] bridge_slave_0: left promiscuous mode [ 1764.854570][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.982419][ T5722] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1765.115923][T11749] Bluetooth: hci1: command 0x0406 tx timeout [ 1765.133174][ T5722] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1765.134539][ T5722] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.134562][ T5722] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1765.134608][ T5722] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x25, changing to 0x5 [ 1765.134635][ T5722] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1765.134671][ T5722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.253518][ T5722] ims_pcu 10-1:1.0: Control endpoint is not INTERRUPT IN [ 1765.253684][ T5722] ims_pcu 10-1:1.0: probe with driver ims_pcu failed with error -22 [ 1765.403487][ T5602] usb 10-1: USB disconnect, device number 11 [ 1765.673245][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1765.755264][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.814860][ T66] bond0 (unregistering): Released all slaves [ 1766.594005][T11749] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1766.892870][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1766.957577][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1766.995661][ T66] bond0 (unregistering): Released all slaves [ 1767.192318][T16185] Bluetooth: hci1: command 0x0406 tx timeout [ 1767.563204][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.642908][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.664343][ T66] bond0 (unregistering): Released all slaves [ 1767.977342][T15950] team0: Port device team_slave_0 added [ 1768.350441][T16191] fuse: Unknown parameter '' [ 1768.632479][T16185] Bluetooth: hci3: command 0x0406 tx timeout [ 1768.634637][T15950] team0: Port device team_slave_1 added [ 1768.925314][ T66] IPVS: stopping backup sync thread 15333 ... [ 1769.302497][T16185] Bluetooth: hci1: command 0x0406 tx timeout [ 1769.669689][T14070] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 1769.840478][T16213] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1769.840616][T16213] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1770.712413][T14070] Bluetooth: hci3: command 0x0406 tx timeout [ 1770.719819][T15950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.719834][T15950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.719858][T15950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1772.297032][T15950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1772.297066][T15950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.297088][T15950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1772.397742][T16227] fuse: Unknown parameter '' [ 1772.976023][T15950] hsr_slave_0: entered promiscuous mode [ 1772.977396][T15950] hsr_slave_1: entered promiscuous mode [ 1772.982111][T15950] debugfs: 'hsr0' already exists in 'hsr' [ 1772.982136][T15950] Cannot create hsr debugfs directory [ 1774.038766][T16239] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1774.038883][T16239] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1774.143673][T14070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1774.245587][T14070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1774.263522][T14070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1774.283734][T14070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1774.291165][T14070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1776.108457][T14070] Bluetooth: min 9 > max 0 [ 1776.370915][T16261] fuse: Unknown parameter '' [ 1776.552464][T14070] Bluetooth: hci4: command tx timeout [ 1777.823322][T16278] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1380'. [ 1778.448712][T14070] Bluetooth: hci1: command 0x0406 tx timeout [ 1778.635170][T14070] Bluetooth: hci4: command tx timeout [ 1778.819973][T16285] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1778.833434][T16285] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1779.135437][T12214] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1779.285688][T15406] udevd[15406]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1779.293353][T12214] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1779.294899][T12214] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1779.294927][T12214] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.294949][T12214] usb 10-1: config 0 has no interface number 0 [ 1779.294996][T12214] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1779.298792][T12214] usb 10-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 1779.298820][T12214] usb 10-1: Product: syz [ 1779.298837][T12214] usb 10-1: SerialNumber: syz [ 1779.394328][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1779.435372][T12214] usb 10-1: config 0 descriptor?? [ 1779.550930][T12214] usbhid 10-1:0.8: couldn't find an input interrupt endpoint [ 1779.796565][ T5872] usb 10-1: USB disconnect, device number 12 [ 1780.048592][T16307] futex_wake_op: syz.7.1385 tries to shift op by 144; fix this program [ 1780.410872][T16240] wlan0 speed is unknown, defaulting to 1000 [ 1780.469525][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.394944][T14070] Bluetooth: hci4: command tx timeout [ 1781.425584][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.584698][ T66] hsr_slave_0: left promiscuous mode [ 1781.622469][ T66] hsr_slave_1: left promiscuous mode [ 1781.625635][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.625700][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.645668][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.645741][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.802396][ T66] hsr_slave_0: left promiscuous mode [ 1781.824173][ T66] hsr_slave_1: left promiscuous mode [ 1781.825413][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.825438][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.864499][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.866052][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1782.954306][ T66] veth1_macvtap: left promiscuous mode [ 1782.954376][ T66] veth0_macvtap: left promiscuous mode [ 1782.954587][ T66] veth1_vlan: left promiscuous mode [ 1782.954753][ T66] veth0_vlan: left promiscuous mode [ 1783.457916][T14070] Bluetooth: hci4: command tx timeout [ 1783.544727][ T66] veth1_macvtap: left promiscuous mode [ 1783.544930][ T66] veth0_macvtap: left promiscuous mode [ 1783.545399][ T66] veth1_vlan: left promiscuous mode [ 1783.545780][ T66] veth0_vlan: left promiscuous mode [ 1783.910360][T16321] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1389'. [ 1784.425322][T16321] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1784.425423][T16321] block (null): Could not allocate knbd recv work queue. [ 1784.572554][T16321] nbd: failed to add new device [ 1785.094801][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1785.154110][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1785.997637][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1786.054745][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1787.563214][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 1787.563259][ T38] audit: type=1326 audit(1788292908.402:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1787.563349][ T38] audit: type=1326 audit(1788292908.402:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1788.112487][ T38] audit: type=1326 audit(1788292908.952:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac9793e98e code=0x7ffc0000 [ 1788.112738][ T38] audit: type=1326 audit(1788292908.952:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1788.112888][ T38] audit: type=1326 audit(1788292908.952:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1788.134810][ T38] audit: type=1326 audit(1788292908.962:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1788.135227][ T38] audit: type=1326 audit(1788292908.972:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1788.135940][ T38] audit: type=1326 audit(1788292908.972:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1788.140779][ T38] audit: type=1326 audit(1788292908.972:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1788.143349][ T38] audit: type=1326 audit(1788292908.982:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.9.1396" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9797e159 code=0x7ffc0000 [ 1788.160894][T16343] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1396'. [ 1788.517794][T16346] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1396'. [ 1789.739981][T11749] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1789.847562][T11749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1789.855178][T11749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1789.871193][T11749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1789.872823][T11749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1790.214582][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1790.263601][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1790.575363][T15890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1790.718838][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1790.932725][T14070] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 1791.214529][T16363] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1400'. [ 1791.633021][T16363] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1791.633114][T16363] block (null): Could not allocate knbd recv work queue. [ 1792.072380][T14070] Bluetooth: hci5: command tx timeout [ 1792.227557][T16363] nbd: failed to add new device [ 1794.218552][T15950] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.529250][T14070] Bluetooth: hci5: command tx timeout [ 1795.065739][T16387] fuse: Unknown parameter '' [ 1795.704510][T15950] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.842700][T16347] wlan0 speed is unknown, defaulting to 1000 [ 1796.876049][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.075196][T11749] Bluetooth: hci5: command tx timeout [ 1797.161309][ T5728] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1797.200756][T15950] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.322418][ T5728] usb 10-1: Using ep0 maxpacket: 8 [ 1797.328751][ T5728] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1797.328808][ T5728] usb 10-1: New USB device found, idVendor=0b05, idProduct=17bc, bcdDevice=2c.6e [ 1797.330364][ T5728] usb 10-1: config 9 has an invalid interface number: 138 but max is 0 [ 1797.330390][ T5728] usb 10-1: config 9 has no interface number 0 [ 1797.330423][ T5728] usb 10-1: config 9 interface 138 has no altsetting 0 [ 1797.336036][ T5728] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.336130][ T5728] usb 10-1: Product: syz [ 1797.336171][ T5728] usb 10-1: Manufacturer: 憫⸂䭷ே既贊觾䫪钹꿸噘〢쎄랧⑻ꏛ༥庭Ṳ䀔݋ꋞ橿﫸멅羘悮霒巒⸓辥窛觙⟯ㅬ킛躍䌦發㞧ꏤ拉﹩䃋ੲ㓕測褉冏⏕踦䷍ᴺ魟嘴ㆉꐓ쀦쿜쬢⯡ꑪ閮훎㳔㥬승뾔匝ﹻ㥇싻삊죃蹧결리ꆎn [ 1797.336263][ T5728] usb 10-1: SerialNumber: syz [ 1797.787911][T14070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1797.789459][ T5728] usb 10-1: USB disconnect, device number 13 [ 1797.898251][T14070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1797.921036][T14070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1797.936385][T14070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1797.951805][T14070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1798.819173][T15950] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.932443][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1417'. [ 1799.378309][T16422] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1799.378411][T16422] block (null): Could not allocate knbd recv work queue. [ 1799.479757][T16420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1799.563215][T11749] Bluetooth: hci5: command tx timeout [ 1799.604299][T16422] nbd: failed to add new device [ 1800.033532][ T5872] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1800.152352][T11749] Bluetooth: hci0: command tx timeout [ 1800.192398][ T5872] usb 10-1: Using ep0 maxpacket: 16 [ 1800.198721][ T5872] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1800.200481][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.200534][ T5872] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1800.200564][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.200592][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.257843][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.266053][ T5872] usb 10-1: Product: syz [ 1800.266072][ T5872] usb 10-1: Manufacturer: syz [ 1800.266089][ T5872] usb 10-1: SerialNumber: syz [ 1800.309981][ T5872] usb 10-1: config 0 descriptor?? [ 1800.820034][ T5872] appledisplay 10-1:0.0: Submitting URB failed [ 1800.891816][ T5872] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -5 [ 1800.996566][ T5872] usb 10-1: USB disconnect, device number 14 [ 1801.501202][T16403] wlan0 speed is unknown, defaulting to 1000 [ 1802.261482][T11749] Bluetooth: hci0: command tx timeout [ 1802.609718][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.609965][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.610149][T16240] bridge_slave_0: entered allmulticast mode [ 1802.613889][T16240] bridge_slave_0: entered promiscuous mode [ 1802.669933][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.671685][T16240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.671859][T16240] bridge_slave_1: entered allmulticast mode [ 1802.695117][T16240] bridge_slave_1: entered promiscuous mode [ 1803.767776][T16479] netlink: 'syz.7.1425': attribute type 25 has an invalid length. [ 1803.833710][T15219] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1803.926246][T16240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1803.942769][T16347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.942962][T16347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.943166][T16347] bridge_slave_0: entered allmulticast mode [ 1803.967621][T16347] bridge_slave_0: entered promiscuous mode [ 1803.995595][T16240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.003251][T15219] usb 10-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1804.005005][T15219] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.100216][T16347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.107484][T16347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.107723][T16347] bridge_slave_1: entered allmulticast mode [ 1804.155011][T16347] bridge_slave_1: entered promiscuous mode [ 1804.323432][T11749] Bluetooth: hci0: command tx timeout [ 1804.462733][T15219] dln2 10-1:1.0: USB write failed: -110 [ 1804.486433][ C1] dln2 10-1:1.0: size mismatch: handle 2101 cmd 10 echo dc00 size 14 actual 8 [ 1806.392997][T11749] Bluetooth: hci0: command tx timeout [ 1806.518918][T15219] dln2 10-1:1.0: failed to initialize hardware [ 1806.529637][T15219] dln2 10-1:1.0: probe with driver dln2 failed with error -110 [ 1806.629050][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 1806.646966][T15219] usb 10-1: USB disconnect, device number 15 [ 1807.176043][T16240] team0: Port device team_slave_0 added [ 1807.202473][T15219] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1807.215376][T16347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.234273][T16240] team0: Port device team_slave_1 added [ 1807.260218][T16347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.352349][T15219] usb 10-1: Using ep0 maxpacket: 8 [ 1807.353218][T15219] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1807.354616][T15219] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1807.354641][T15219] usb 10-1: config 0 has no interface number 0 [ 1807.354683][T15219] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1807.354706][T15219] usb 10-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1807.354743][T15219] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.364614][T15219] usb 10-1: config 0 descriptor?? [ 1807.373507][T15219] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 1807.582990][T16240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.583069][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.583097][T16240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.736757][ T8945] usb 10-1: USB disconnect, device number 16 [ 1807.783145][T16347] team0: Port device team_slave_0 added [ 1807.785731][T16240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.785767][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.785840][T16240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.948644][T16347] team0: Port device team_slave_1 added [ 1808.017006][T16347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1808.017827][T16347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1808.017896][T16347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1808.089232][T16347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1808.089309][T16347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1808.089385][T16347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1808.180972][T16240] hsr_slave_0: entered promiscuous mode [ 1808.190617][T16240] hsr_slave_1: entered promiscuous mode [ 1808.228677][ T66] IPVS: stop unused estimator thread 0... [ 1808.235317][ T66] IPVS: stop unused estimator thread 0... [ 1808.771262][T16347] hsr_slave_0: entered promiscuous mode [ 1808.817121][T16347] hsr_slave_1: entered promiscuous mode [ 1808.839259][T16347] debugfs: 'hsr0' already exists in 'hsr' [ 1808.845303][T16347] Cannot create hsr debugfs directory [ 1811.646369][T16403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.646579][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.646749][T16403] bridge_slave_0: entered allmulticast mode [ 1811.666171][T16403] bridge_slave_0: entered promiscuous mode [ 1811.729021][T16403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.729126][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.729271][T16403] bridge_slave_1: entered allmulticast mode [ 1811.753267][T16403] bridge_slave_1: entered promiscuous mode [ 1812.200363][T16403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1812.274649][T16403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1812.577097][T16403] team0: Port device team_slave_0 added [ 1812.634061][T16403] team0: Port device team_slave_1 added [ 1813.023734][T16403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.023804][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.023869][T16403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.221440][T16403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.230318][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.230373][T16403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1813.586794][T16403] hsr_slave_0: entered promiscuous mode [ 1813.589946][T16403] hsr_slave_1: entered promiscuous mode [ 1813.594456][T16403] debugfs: 'hsr0' already exists in 'hsr' [ 1813.594518][T16403] Cannot create hsr debugfs directory [ 1815.022564][ T66] bridge_slave_1: left allmulticast mode [ 1815.022645][ T66] bridge_slave_1: left promiscuous mode [ 1815.023328][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.165735][ T66] bridge_slave_0: left allmulticast mode [ 1815.165828][ T66] bridge_slave_0: left promiscuous mode [ 1815.166564][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.392504][ T66] bridge_slave_1: left allmulticast mode [ 1815.392597][ T66] bridge_slave_1: left promiscuous mode [ 1815.393292][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.496231][ T66] bridge_slave_0: left allmulticast mode [ 1815.496320][ T66] bridge_slave_0: left promiscuous mode [ 1815.496921][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.692713][ T66] bridge_slave_1: left allmulticast mode [ 1815.692807][ T66] bridge_slave_1: left promiscuous mode [ 1815.693038][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.834668][ T66] bridge_slave_0: left allmulticast mode [ 1815.840459][ T66] bridge_slave_0: left promiscuous mode [ 1815.840721][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.032465][ T66] bridge_slave_1: left allmulticast mode [ 1816.032544][ T66] bridge_slave_1: left promiscuous mode [ 1816.033150][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.133560][ T66] bridge_slave_0: left allmulticast mode [ 1816.133653][ T66] bridge_slave_0: left promiscuous mode [ 1816.134341][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.352586][ T66] bridge_slave_1: left allmulticast mode [ 1816.352669][ T66] bridge_slave_1: left promiscuous mode [ 1816.353240][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.453462][ T66] bridge_slave_0: left allmulticast mode [ 1816.453579][ T66] bridge_slave_0: left promiscuous mode [ 1816.454178][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.862984][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1816.962954][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1817.024296][ T66] bond0 (unregistering): Released all slaves [ 1817.254035][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1817.332936][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1817.413997][ T66] bond0 (unregistering): Released all slaves [ 1817.673238][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1817.756765][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1817.815776][ T66] bond0 (unregistering): Released all slaves [ 1818.082849][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1818.182904][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1818.244152][ T66] bond0 (unregistering): Released all slaves [ 1818.493863][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1818.573013][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1818.634654][ T66] bond0 (unregistering): Released all slaves [ 1820.743796][ T66] hsr_slave_0: left promiscuous mode [ 1820.782493][ T66] hsr_slave_1: left promiscuous mode [ 1820.785319][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1820.803090][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1820.972445][ T66] hsr_slave_0: left promiscuous mode [ 1820.992379][ T66] hsr_slave_1: left promiscuous mode [ 1820.994949][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.033564][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.172432][ T66] hsr_slave_0: left promiscuous mode [ 1821.203495][ T66] hsr_slave_1: left promiscuous mode [ 1821.207470][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.243048][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.342386][ T66] hsr_slave_0: left promiscuous mode [ 1821.362389][ T66] hsr_slave_1: left promiscuous mode [ 1821.365843][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.404994][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.542402][ T66] hsr_slave_0: left promiscuous mode [ 1821.562348][ T66] hsr_slave_1: left promiscuous mode [ 1821.565023][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.602886][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.995811][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1822.052872][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1822.453716][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1822.515848][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1823.089784][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1823.143026][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1823.484599][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1823.542975][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1823.976400][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1824.022839][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1825.044104][T16240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1825.067834][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1825.070418][T16240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1825.195819][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1825.207448][T16240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1825.288308][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1825.300770][T16240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1825.337354][T16240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1825.966637][T16347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1826.097289][T16347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1826.185707][T16347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1826.228536][T16347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1826.250457][T16347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1826.332981][T16347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1826.347340][T16347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1826.441448][T16347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1827.177776][T16403] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1827.266128][T16403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1827.279313][T16403] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1827.326113][T16403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1827.338703][T16403] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1827.416870][T16403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1827.425683][T16403] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1827.486761][T16403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1827.620325][T16240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.767724][T16240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.820414][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.829299][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.907881][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.909914][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1827.951667][ T5247] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1828.080638][T16347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.285393][T16347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.433944][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.442840][ T8463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.545904][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.554702][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.593858][T16403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.778018][T16403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.910660][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.910897][ T8463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.951183][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.951668][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.934215][T16240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1830.346892][T16240] veth0_vlan: entered promiscuous mode [ 1830.517984][T16240] veth1_vlan: entered promiscuous mode [ 1830.610952][T16240] veth0_macvtap: entered promiscuous mode [ 1830.694221][T16240] veth1_macvtap: entered promiscuous mode [ 1830.778312][T16347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1830.859303][T16240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.887662][T16240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.285735][T16403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1831.534133][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.561480][T16347] veth0_vlan: entered promiscuous mode [ 1831.692984][T16347] veth1_vlan: entered promiscuous mode [ 1832.019575][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.027554][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.272092][T16347] veth0_macvtap: entered promiscuous mode [ 1832.351419][T16347] veth1_macvtap: entered promiscuous mode [ 1832.368453][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.368516][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.489049][T16347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1832.550806][T16347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1832.612025][ T5247] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1833.009942][T13914] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1833.066585][T16403] veth0_vlan: entered promiscuous mode [ 1833.284133][T13914] usb 10-1: Using ep0 maxpacket: 8 [ 1833.294826][T13914] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1833.295905][T13914] usb 10-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice=32.07 [ 1833.297825][T13914] usb 10-1: config 4 has an invalid interface number: 202 but max is 0 [ 1833.297888][T13914] usb 10-1: config 4 has no interface number 0 [ 1833.297959][T13914] usb 10-1: config 4 interface 202 has no altsetting 0 [ 1833.358091][T13914] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.358165][T13914] usb 10-1: Product: syz [ 1833.358181][T13914] usb 10-1: Manufacturer: syz [ 1833.358195][T13914] usb 10-1: SerialNumber: syz [ 1833.673997][T16403] veth1_vlan: entered promiscuous mode [ 1833.821250][T13914] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:4.202/input/input24 [ 1834.238250][ T8463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1834.238312][ T8463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.509438][ T4937] bcm5974 10-1:4.202: could not read from device [ 1834.863707][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1834.871651][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.887544][T16403] veth0_macvtap: entered promiscuous mode [ 1834.928962][T16403] veth1_macvtap: entered promiscuous mode [ 1834.978848][ T4937] bcm5974 10-1:4.202: could not read from device [ 1835.063398][ T8445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.119449][T16403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.159240][T16403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.345587][T13914] usb 10-1: USB disconnect, device number 17 [ 1835.357380][ T8445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.376386][ T1227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.512943][ T4937] bcm5974 10-1:4.202: could not read from device [ 1835.569634][T16797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1836.008696][T16812] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1837.432822][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.434135][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.598489][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.598550][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.975132][T16852] futex_wake_op: syz.0.1437 tries to shift op by 144; fix this program [ 1842.092500][ T5827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.105067][ T7091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.105117][ T7091] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.105159][ T7091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.105198][ T7091] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.105245][ T7091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.387641][ T7091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.393118][ T7091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.515069][T16898] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1450'. [ 1848.368848][T16927] input: syz0 as /devices/virtual/input/input25 [ 1849.488003][T16933] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1849.491032][T16933] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1849.560533][T16938] fuse: Unknown parameter '' [ 1849.591849][T16772] udevd[16772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1851.204719][T16959] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1464'. [ 1852.990248][T16985] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1852.999056][T16985] Buffer I/O error on dev nullb1, logical block 1, lost async page write [ 1853.251542][T16772] udevd[16772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1856.718567][T17021] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1478'. [ 1857.627309][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 1857.627437][ T38] audit: type=1326 audit(1788292978.462:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1857.627598][ T38] audit: type=1326 audit(1788292978.462:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1857.640860][ T38] audit: type=1326 audit(1788292978.472:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1857.641028][ T38] audit: type=1326 audit(1788292978.472:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1857.644550][ T38] audit: type=1326 audit(1788292978.472:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1857.752168][ T38] audit: type=1326 audit(1788292978.562:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1858.141813][ T38] audit: type=1326 audit(1788292978.972:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1858.141983][ T38] audit: type=1326 audit(1788292978.972:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1858.324364][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.404012][ T38] audit: type=1326 audit(1788292979.222:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1858.404118][ T38] audit: type=1326 audit(1788292979.222:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17013 comm="syz.8.1477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ae98e159 code=0x7ffc0000 [ 1858.788682][T16835] udevd[16835]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1858.925510][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1488'. [ 1859.007699][T16803] udevd[16803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1859.185828][T17052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1483'. [ 1859.185953][T17052] nbd: device at index 64 is going down [ 1859.651563][T17055] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1489'. [ 1860.585143][T17072] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1494'. [ 1861.874582][T17088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1492'. [ 1861.874701][T17088] nbd: device at index 64 is going down [ 1863.612856][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1501'. [ 1863.647689][T16803] udevd[16803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1864.813144][T17113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1503'. [ 1865.720388][T17129] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1506'. [ 1865.720430][T17129] nbd: device at index 64 is going down [ 1867.348990][T17152] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1510'. [ 1867.349032][T17152] nbd: device at index 64 is going down [ 1871.503688][T11749] [ 1871.506084][T11749] ====================================================== [ 1871.513121][T11749] WARNING: possible circular locking dependency detected [ 1871.520201][T11749] syzkaller #0 Tainted: G L [ 1871.526203][T11749] ------------------------------------------------------ [ 1871.533253][T11749] kworker/u9:1/11749 is trying to acquire lock: [ 1871.539560][T11749] ffffffff8f779418 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x90/0x820 [ 1871.548950][T11749] [ 1871.548950][T11749] but task is already holding lock: [ 1871.556331][T11749] ffffffff8f754e18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x318/0xc80 [ 1871.566228][T11749] [ 1871.566228][T11749] which lock already depends on the new lock. [ 1871.566228][T11749] [ 1871.576645][T11749] [ 1871.576645][T11749] the existing dependency chain (in reverse order) is: [ 1871.585674][T11749] [ 1871.585674][T11749] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 1871.593498][T11749] mutex_lock_nested+0x5a/0x1d0 [ 1871.598909][T11749] hci_remote_features_evt+0x53d/0x950 [ 1871.604932][T11749] hci_event_packet+0x6cd/0xf10 [ 1871.610340][T11749] hci_rx_work+0x3ee/0x1020 [ 1871.615423][T11749] process_scheduled_works+0xc3d/0x1630 [ 1871.621526][T11749] worker_thread+0xa47/0xfb0 [ 1871.626667][T11749] kthread+0x38b/0x470 [ 1871.631288][T11749] ret_from_fork+0x514/0xb70 [ 1871.636450][T11749] ret_from_fork_asm+0x1a/0x30 [ 1871.641762][T11749] [ 1871.641762][T11749] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 1871.649099][T11749] mutex_lock_nested+0x5a/0x1d0 [ 1871.654514][T11749] l2cap_chan_connect+0xff/0xf60 [ 1871.659997][T11749] l2cap_sock_connect+0x5e4/0x7e0 [ 1871.665647][T11749] kernel_connect+0x141/0x1c0 [ 1871.670988][T11749] rfcomm_dlc_open+0x644/0x1080 [ 1871.676411][T11749] rfcomm_sock_connect+0x2ed/0x650 [ 1871.682084][T11749] __sys_connect+0x32d/0x470 [ 1871.687233][T11749] __x64_sys_connect+0x7a/0x90 [ 1871.692551][T11749] do_syscall_64+0x166/0x520 [ 1871.697697][T11749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.704137][T11749] [ 1871.704137][T11749] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 1871.711563][T11749] __lock_acquire+0x15ff/0x2e40 [ 1871.716977][T11749] lock_acquire+0x115/0x350 [ 1871.722038][T11749] mutex_lock_nested+0x5a/0x1d0 [ 1871.727448][T11749] rfcomm_security_cfm+0x90/0x820 [ 1871.733034][T11749] hci_auth_complete_evt+0x39f/0xc80 [ 1871.738870][T11749] hci_event_packet+0x6cd/0xf10 [ 1871.744286][T11749] hci_rx_work+0x3ee/0x1020 [ 1871.749349][T11749] process_scheduled_works+0xc3d/0x1630 [ 1871.755468][T11749] worker_thread+0xa47/0xfb0 [ 1871.760625][T11749] kthread+0x38b/0x470 [ 1871.765246][T11749] ret_from_fork+0x514/0xb70 [ 1871.770381][T11749] ret_from_fork_asm+0x1a/0x30 [ 1871.775697][T11749] [ 1871.775697][T11749] other info that might help us debug this: [ 1871.775697][T11749] [ 1871.785944][T11749] Chain exists of: [ 1871.785944][T11749] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 1871.785944][T11749] [ 1871.798541][T11749] Possible unsafe locking scenario: [ 1871.798541][T11749] [ 1871.806015][T11749] CPU0 CPU1 [ 1871.811394][T11749] ---- ---- [ 1871.816796][T11749] lock(hci_cb_list_lock); [ 1871.821326][T11749] lock(&hdev->lock); [ 1871.827935][T11749] lock(hci_cb_list_lock); [ 1871.834970][T11749] lock(rfcomm_mutex); [ 1871.839143][T11749] [ 1871.839143][T11749] *** DEADLOCK *** [ 1871.839143][T11749] [ 1871.847299][T11749] locks held by kworker/u9:1/11749: 4, last CPU#1: [ 1871.853821][T11749] #0: ffff888039c86938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1871.864832][T11749] #1: ffffc90004cafc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1871.876861][T11749] #2: ffff8880549940b0 (&hdev->lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x95/0xc80 [ 1871.886643][T11749] #3: ffffffff8f754e18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x318/0xc80 [ 1871.896931][T11749] [ 1871.896931][T11749] stack backtrace: [ 1871.902835][T11749] CPU: 1 UID: 0 PID: 11749 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1871.914496][T11749] Tainted: [L]=SOFTLOCKUP [ 1871.918836][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1871.928907][T11749] Workqueue: hci4 hci_rx_work [ 1871.933613][T11749] Call Trace: [ 1871.936907][T11749] [ 1871.939846][T11749] dump_stack_lvl+0xe8/0x150 [ 1871.944465][T11749] print_circular_bug+0x2e2/0x300 [ 1871.949518][T11749] check_noncircular+0x12f/0x150 [ 1871.954475][T11749] __lock_acquire+0x15ff/0x2e40 [ 1871.959344][T11749] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1871.965167][T11749] ? rt_mutex_slowunlock+0x219/0x460 [ 1871.970476][T11749] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1871.976127][T11749] lock_acquire+0x115/0x350 [ 1871.980644][T11749] ? rfcomm_security_cfm+0x90/0x820 [ 1871.985861][T11749] ? rfcomm_security_cfm+0x90/0x820 [ 1871.991079][T11749] ? rfcomm_security_cfm+0x90/0x820 [ 1871.996298][T11749] mutex_lock_nested+0x5a/0x1d0 [ 1872.001196][T11749] ? rfcomm_security_cfm+0x90/0x820 [ 1872.006416][T11749] ? __pfx_l2cap_security_cfm+0x10/0x10 [ 1872.011981][T11749] rfcomm_security_cfm+0x90/0x820 [ 1872.017025][T11749] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1872.022673][T11749] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1872.028501][T11749] ? mutex_lock_nested+0x152/0x1d0 [ 1872.033654][T11749] ? hci_auth_complete_evt+0x318/0xc80 [ 1872.039142][T11749] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1872.044799][T11749] hci_auth_complete_evt+0x39f/0xc80 [ 1872.050116][T11749] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 1872.055949][T11749] ? skb_pull_data+0xf0/0x200 [ 1872.060651][T11749] hci_event_packet+0x6cd/0xf10 [ 1872.065524][T11749] ? reacquire_held_locks+0x117/0x1a0 [ 1872.070921][T11749] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 1872.076751][T11749] ? __pfx_hci_event_packet+0x10/0x10 [ 1872.082145][T11749] ? rt_spin_unlock+0x159/0x200 [ 1872.087018][T11749] ? hci_send_to_monitor+0xe2/0x590 [ 1872.092234][T11749] hci_rx_work+0x3ee/0x1020 [ 1872.096760][T11749] ? process_scheduled_works+0x97a/0x1630 [ 1872.102499][T11749] process_scheduled_works+0xc3d/0x1630 [ 1872.108077][T11749] ? __pfx_process_scheduled_works+0x10/0x10 [ 1872.114078][T11749] ? assign_work+0x3cf/0x5d0 [ 1872.118688][T11749] worker_thread+0xa47/0xfb0 [ 1872.123300][T11749] ? __kthread_parkme+0x71/0x1f0 [ 1872.128260][T11749] kthread+0x38b/0x470 [ 1872.132342][T11749] ? __pfx_worker_thread+0x10/0x10 [ 1872.137476][T11749] ? __pfx_kthread+0x10/0x10 [ 1872.142095][T11749] ret_from_fork+0x514/0xb70 [ 1872.146705][T11749] ? __pfx_ret_from_fork+0x10/0x10 [ 1872.151848][T11749] ? __switch_to+0xc89/0x1420 [ 1872.156560][T11749] ? __pfx_kthread+0x10/0x10 [ 1872.161169][T11749] ret_from_fork_asm+0x1a/0x30 [ 1872.165955][T11749] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1873.838560][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.973754][ T5247] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1875.156477][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.454588][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.474405][ T5247] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1875.715002][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.762498][ T5247] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1876.163242][ T66] bridge_slave_1: left allmulticast mode [ 1876.163319][ T66] bridge_slave_1: left promiscuous mode [ 1876.163828][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.262868][ T66] bridge_slave_0: left allmulticast mode [ 1876.262940][ T66] bridge_slave_0: left promiscuous mode [ 1876.263444][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.852706][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.913638][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.954461][ T66] bond0 (unregistering): Released all slaves [ 1876.994324][ T5247] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1878.322343][ T66] hsr_slave_0: left promiscuous mode [ 1878.362301][ T66] hsr_slave_1: left promiscuous mode [ 1878.364164][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1878.364196][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1878.404589][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1878.404648][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1878.462685][ T66] veth1_macvtap: left promiscuous mode [ 1878.462801][ T66] veth0_macvtap: left promiscuous mode [ 1878.463046][ T66] veth1_vlan: left promiscuous mode [ 1878.463206][ T66] veth0_vlan: left promiscuous mode [ 1878.964196][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1879.002962][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1880.493863][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.763706][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.044837][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.324797][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0