last executing test programs: 4m9.573118681s ago: executing program 5 (id=38): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r1, &(0x7f00000001c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3", 0xc4}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000700)='1', 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002040)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd29, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) 4m7.927179088s ago: executing program 5 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 4m6.638564149s ago: executing program 5 (id=43): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100fefffffffedbdf258020"], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000600)={0x8, 0x41}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, 0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(0x0, 0x0, 0x68, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000340)={0x0, 0x1, 0x1d04, 0xfffffffe, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x1000, 0x0, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x394c, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/96) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4m2.971963343s ago: executing program 5 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 3m59.009278687s ago: executing program 5 (id=57): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r6 = dup(0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r4, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3m54.768568931s ago: executing program 5 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 3m39.18480768s ago: executing program 32 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 2m26.041459014s ago: executing program 3 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 2m22.301303079s ago: executing program 3 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 2m20.524181907s ago: executing program 3 (id=186): io_setup(0x2278, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xb00}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc840) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 2m18.721520558s ago: executing program 3 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r9, 0x5501) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r5, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2m16.567430996s ago: executing program 3 (id=191): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r4, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2m4.778529747s ago: executing program 3 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 1m48.704184462s ago: executing program 33 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 1m7.538529648s ago: executing program 4 (id=293): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r6 = dup(0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r4, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1m5.801613643s ago: executing program 4 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 57.091886122s ago: executing program 7 (id=305): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) close(0x3) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = dup(0xffffffffffffffff) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) 53.494840855s ago: executing program 4 (id=310): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x5}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000005c0)={0x2, r4, 'id1\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r1}, 0x18) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 51.186479024s ago: executing program 4 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 47.801672285s ago: executing program 4 (id=318): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) accept$alg(r5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 47.161789024s ago: executing program 7 (id=320): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r1, &(0x7f00000001c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3", 0xc4}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000700)='1', 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002040)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd29, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) 45.774797662s ago: executing program 4 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 44.482465403s ago: executing program 7 (id=325): io_setup(0x2278, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 43.092520077s ago: executing program 7 (id=329): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x5}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000005c0)={0x2, r4, 'id1\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r1}, 0x18) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) 39.732161437s ago: executing program 7 (id=333): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r6 = socket$alg(0x26, 0x5, 0x0) accept$alg(r6, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 37.730237977s ago: executing program 7 (id=335): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r5, 0x5501) close_range(r4, 0xffffffffffffffff, 0x0) 29.170609772s ago: executing program 34 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 21.416463855s ago: executing program 35 (id=335): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r5, 0x5501) close_range(r4, 0xffffffffffffffff, 0x0) 20.198464922s ago: executing program 0 (id=352): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r5 = dup(0xffffffffffffffff) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r3, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 18.397269304s ago: executing program 0 (id=353): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 14.849265249s ago: executing program 1 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 14.127982531s ago: executing program 1 (id=359): mount$bind(0x0, 0x0, 0x0, 0x101020, 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000440)=ANY=[@ANYBLOB="03021300000fff0019fd884c14936c2023a036a01f30035e2eb896b9cf4b07e624360bfc8984"], 0x22, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000030603000000000000000000050000020900020073797a310000000007000100"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040012}, 0x40000) r10 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEMERASE(r10, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) 13.592623814s ago: executing program 1 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 13.278808082s ago: executing program 0 (id=361): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r4, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 12.216906398s ago: executing program 2 (id=362): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r4, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 9.844153584s ago: executing program 2 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 9.651490167s ago: executing program 6 (id=364): setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xb00}}}}}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 8.883093612s ago: executing program 0 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 8.182361261s ago: executing program 6 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 8.169904063s ago: executing program 1 (id=367): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) close(0x3) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) 5.475827684s ago: executing program 6 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 5.466756608s ago: executing program 2 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 5.330704231s ago: executing program 1 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 3.129926696s ago: executing program 6 (id=370): mount$bind(0x0, 0x0, 0x0, 0x101020, 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000440)=ANY=[@ANYBLOB="03021300000fff0019fd884c14936c2023a036a01f30035e2eb896b9cf4b07e624360bfc8984"], 0x22, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000030603000000000000000000050000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040012}, 0x40000) r10 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEMERASE(r10, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) 3.125078476s ago: executing program 2 (id=371): setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xb00}}}}}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 2.729404287s ago: executing program 1 (id=372): keyctl$setperm(0x5, 0x0, 0x120c0603) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r4, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2.253892447s ago: executing program 6 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 2.058626637s ago: executing program 0 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 1.52793687s ago: executing program 2 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 1.05539059s ago: executing program 6 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 906.329778ms ago: executing program 0 (id=377): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) flock(0xffffffffffffffff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001900010027bd700000000000fc020000000000000000000000000000ac141418000000000000000000000000000100000000fffe0a0000001600"], 0xb8}, 0x1, 0x0, 0x0, 0x20004060}, 0x0) connect$inet6(r1, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r3, 0x0) sync() r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) dup3(0xffffffffffffffff, r4, 0x0) timer_create(0x4, 0x0, &(0x7f0000000880)=0x0) clock_gettime(0x0, &(0x7f00000008c0)) timer_settime(r6, 0x0, 0x0, &(0x7f0000000940)) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) 0s ago: executing program 2 (id=379): mount$bind(0x0, 0x0, 0x0, 0x101020, 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000440)=ANY=[@ANYBLOB="03021300000fff0019fd884c14936c2023a036a01f30035e2eb896b9cf4b07e624360bfc8984"], 0x22, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000030603000000000000000000050000020900020073797a31000000000700010007"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(0x0, r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040012}, 0x40000) r10 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEMERASE(r10, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 83.351467][ T5604] cgroup: Unknown subsys name 'net' [ 83.446081][ T5604] cgroup: Unknown subsys name 'cpuset' [ 83.449995][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.042125][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.064494][ T1213] cfg80211: failed to load regulatory.db [ 87.734031][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.735907][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.736271][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.738588][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.739312][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.740011][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.741582][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.742458][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.747285][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.759081][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.759615][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.769262][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.771116][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.772670][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.773636][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.799366][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.809099][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.814871][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.816567][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.818297][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.819478][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.826762][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.827491][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.849935][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.858036][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.881372][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.883969][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.884661][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.887994][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.888742][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.822006][ T5618] Bluetooth: hci2: command tx timeout [ 89.822011][ T5621] Bluetooth: hci1: command tx timeout [ 89.902250][ T5618] Bluetooth: hci5: command tx timeout [ 89.902285][ T5621] Bluetooth: hci4: command tx timeout [ 89.902532][ T5621] Bluetooth: hci3: command tx timeout [ 89.912447][ T5618] Bluetooth: hci0: command tx timeout [ 90.389926][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.390444][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.390600][ T5628] bridge_slave_0: entered allmulticast mode [ 90.392983][ T5628] bridge_slave_0: entered promiscuous mode [ 90.477619][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.477738][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.477892][ T5628] bridge_slave_1: entered allmulticast mode [ 90.480292][ T5628] bridge_slave_1: entered promiscuous mode [ 90.621601][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.649562][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.649743][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.649885][ T5616] bridge_slave_0: entered allmulticast mode [ 90.652049][ T5616] bridge_slave_0: entered promiscuous mode [ 90.672288][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.672404][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.672792][ T5622] bridge_slave_0: entered allmulticast mode [ 90.674903][ T5622] bridge_slave_0: entered promiscuous mode [ 90.719682][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.734577][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.734682][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.734821][ T5616] bridge_slave_1: entered allmulticast mode [ 90.736719][ T5616] bridge_slave_1: entered promiscuous mode [ 90.738598][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.738708][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.738839][ T5622] bridge_slave_1: entered allmulticast mode [ 90.740436][ T5622] bridge_slave_1: entered promiscuous mode [ 90.885634][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.885851][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.886032][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.886182][ T5617] bridge_slave_0: entered allmulticast mode [ 90.888154][ T5617] bridge_slave_0: entered promiscuous mode [ 90.930507][ T5628] team0: Port device team_slave_0 added [ 90.942129][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.945083][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.945288][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.945457][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.945592][ T5617] bridge_slave_1: entered allmulticast mode [ 90.947598][ T5617] bridge_slave_1: entered promiscuous mode [ 90.984749][ T5628] team0: Port device team_slave_1 added [ 91.015855][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.043057][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.043260][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.043947][ T5626] bridge_slave_0: entered allmulticast mode [ 91.045890][ T5626] bridge_slave_0: entered promiscuous mode [ 91.064320][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.064341][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.064384][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.067757][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.067777][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.067820][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.154809][ T5622] team0: Port device team_slave_0 added [ 91.158086][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.158306][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.159472][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.159690][ T5626] bridge_slave_1: entered allmulticast mode [ 91.162433][ T5626] bridge_slave_1: entered promiscuous mode [ 91.182434][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.182550][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.182996][ T5615] bridge_slave_0: entered allmulticast mode [ 91.186918][ T5615] bridge_slave_0: entered promiscuous mode [ 91.192920][ T5616] team0: Port device team_slave_0 added [ 91.196513][ T5622] team0: Port device team_slave_1 added [ 91.201166][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.237034][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.237150][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.237299][ T5615] bridge_slave_1: entered allmulticast mode [ 91.240105][ T5615] bridge_slave_1: entered promiscuous mode [ 91.245631][ T5616] team0: Port device team_slave_1 added [ 91.298161][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.354506][ T5617] team0: Port device team_slave_0 added [ 91.357433][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.365698][ T5628] hsr_slave_0: entered promiscuous mode [ 91.367054][ T5628] hsr_slave_1: entered promiscuous mode [ 91.399723][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.399744][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.399789][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.401022][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.401043][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.401087][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.439084][ T5617] team0: Port device team_slave_1 added [ 91.478612][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.481004][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.481024][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.481068][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.498020][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.498041][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.498084][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.536105][ T5626] team0: Port device team_slave_0 added [ 91.540127][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.620605][ T5626] team0: Port device team_slave_1 added [ 91.650812][ T5615] team0: Port device team_slave_0 added [ 91.666080][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.666100][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.666140][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.728758][ T5615] team0: Port device team_slave_1 added [ 91.743309][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.743330][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.743394][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.750041][ T5616] hsr_slave_0: entered promiscuous mode [ 91.750974][ T5616] hsr_slave_1: entered promiscuous mode [ 91.751613][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 91.751738][ T5616] Cannot create hsr debugfs directory [ 91.788351][ T5622] hsr_slave_0: entered promiscuous mode [ 91.789646][ T5622] hsr_slave_1: entered promiscuous mode [ 91.790522][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 91.790547][ T5622] Cannot create hsr debugfs directory [ 91.849592][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.849613][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.849653][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.863798][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.863819][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.863862][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.885380][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.885402][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.885448][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.904291][ T5618] Bluetooth: hci2: command tx timeout [ 91.924103][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.924124][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.924167][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.930359][ T5618] Bluetooth: hci1: command tx timeout [ 91.984492][ T5618] Bluetooth: hci0: command tx timeout [ 91.984535][ T5618] Bluetooth: hci4: command tx timeout [ 91.984535][ T5621] Bluetooth: hci5: command tx timeout [ 91.997087][ T4932] Bluetooth: hci3: command tx timeout [ 92.150608][ T5617] hsr_slave_0: entered promiscuous mode [ 92.151499][ T5617] hsr_slave_1: entered promiscuous mode [ 92.153216][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 92.153244][ T5617] Cannot create hsr debugfs directory [ 92.287389][ T5626] hsr_slave_0: entered promiscuous mode [ 92.288248][ T5626] hsr_slave_1: entered promiscuous mode [ 92.288854][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 92.288881][ T5626] Cannot create hsr debugfs directory [ 92.326731][ T5615] hsr_slave_0: entered promiscuous mode [ 92.327858][ T5615] hsr_slave_1: entered promiscuous mode [ 92.328520][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 92.328546][ T5615] Cannot create hsr debugfs directory [ 92.862915][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.869964][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.871144][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.885552][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.917327][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.920929][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.945639][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.948630][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.008432][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.021421][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.031786][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.037533][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.058314][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.062995][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.064866][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.074369][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.167747][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.172915][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.175136][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.184411][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.211164][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.221513][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.224040][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.233408][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.337564][ T5617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.350541][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.366611][ T5617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.375302][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.376357][ T5617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.384627][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.385591][ T5617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.390273][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.525198][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.535951][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.544238][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.564709][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.568670][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.590391][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.591482][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.604857][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.635005][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.639281][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.687222][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.745263][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.748416][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.748540][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.794473][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.794578][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.804621][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.814989][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.816009][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.820608][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.850409][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.850799][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.870416][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.874875][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.874994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.899911][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.906562][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.944251][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.944340][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.982041][ T4932] Bluetooth: hci1: command tx timeout [ 93.982083][ T4932] Bluetooth: hci2: command tx timeout [ 94.008853][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.036832][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.062230][ T5618] Bluetooth: hci3: command tx timeout [ 94.062268][ T5618] Bluetooth: hci4: command tx timeout [ 94.062300][ T5618] Bluetooth: hci5: command tx timeout [ 94.062332][ T5618] Bluetooth: hci0: command tx timeout [ 94.095004][ T5622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.095038][ T5622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.152247][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.152372][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.204404][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.214838][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.214957][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.275983][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.276102][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.282995][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.283113][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.499185][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.626637][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.668808][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.668929][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.702320][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.766190][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.766312][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.789727][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.878292][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.878402][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.907287][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.907404][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.596978][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.829719][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.854881][ T5628] veth0_vlan: entered promiscuous mode [ 95.913443][ T5628] veth1_vlan: entered promiscuous mode [ 96.062314][ T4932] Bluetooth: hci2: command tx timeout [ 96.062354][ T4932] Bluetooth: hci1: command tx timeout [ 96.142245][ T5618] Bluetooth: hci0: command tx timeout [ 96.142285][ T5618] Bluetooth: hci5: command tx timeout [ 96.142317][ T5618] Bluetooth: hci4: command tx timeout [ 96.142348][ T5618] Bluetooth: hci3: command tx timeout [ 96.206601][ T5628] veth0_macvtap: entered promiscuous mode [ 96.218492][ T5622] veth0_vlan: entered promiscuous mode [ 96.238837][ T5628] veth1_macvtap: entered promiscuous mode [ 96.310733][ T5622] veth1_vlan: entered promiscuous mode [ 96.377519][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.395421][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.437246][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.456342][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.545279][ T1141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.621488][ T5622] veth0_macvtap: entered promiscuous mode [ 96.645486][ T5622] veth1_macvtap: entered promiscuous mode [ 96.653598][ T3386] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.655205][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.721334][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.808854][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.864026][ T1265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.914724][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.914752][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.923232][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.052142][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052211][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052271][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052330][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.078285][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.091264][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.091290][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.240214][ T5615] veth0_vlan: entered promiscuous mode [ 97.300290][ T5628] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.316017][ T5615] veth1_vlan: entered promiscuous mode [ 97.435699][ T614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.435731][ T614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.493227][ T5626] veth0_vlan: entered promiscuous mode [ 97.528701][ T5616] veth0_vlan: entered promiscuous mode [ 97.545192][ T5616] veth1_vlan: entered promiscuous mode [ 97.579863][ T5616] veth0_macvtap: entered promiscuous mode [ 97.591617][ T5616] veth1_macvtap: entered promiscuous mode [ 97.614098][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.619115][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.760105][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.760802][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.761354][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.761379][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.761627][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.808827][ T5626] veth1_vlan: entered promiscuous mode [ 97.842715][ T1141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.558482][ T5617] veth0_vlan: entered promiscuous mode [ 98.810657][ T5617] veth1_vlan: entered promiscuous mode [ 98.825419][ T5615] veth0_macvtap: entered promiscuous mode [ 98.829416][ T5854] nvmet: adding nsid 1 to subsystem testsubsys [ 98.845924][ T5854] nvmet: failed to open block device /dev/nullb1: (-2) [ 98.883446][ T5615] veth1_macvtap: entered promiscuous mode [ 98.926917][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.926945][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.978026][ T614] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 99.010226][ T5854] nvme nvme0: creating 2 I/O queues. [ 99.038229][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.051200][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.180621][ T3386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.180652][ T3386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.233664][ T5854] nvme nvme0: new ctrl: "testsubsys" [ 99.263194][ T5626] veth0_macvtap: entered promiscuous mode [ 99.282916][ T5626] veth1_macvtap: entered promiscuous mode [ 100.034595][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.034685][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.034746][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.144172][ T3386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.144764][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.144791][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.227659][ T5617] veth0_macvtap: entered promiscuous mode [ 100.276110][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.284982][ T5617] veth1_macvtap: entered promiscuous mode [ 100.360756][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.360785][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.418940][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.447299][ T5867] nvmet: failed to open block device /dev/nullb1: (-2) [ 100.554036][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.571029][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.483210][ T1149] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 102.503912][ T5865] nvme nvme1: creating 2 I/O queues. [ 102.520880][ T5865] nvme nvme1: new ctrl: "testsubsys" [ 102.594502][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.595735][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.595817][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.595878][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.769177][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.769320][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.770096][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.770818][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.260210][ T5885] null_blk: nullb1: using native zone append [ 103.534266][ T5891] nvmet: failed to open block device /dev/nullb1: (-2) [ 103.536575][ T5891] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 103.598310][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.598339][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.715764][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.715790][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.774206][ T5885] null_blk: disk nullb1 created [ 103.837382][ T59] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 103.868751][ T5891] nvme nvme2: creating 2 I/O queues. [ 103.910930][ T5891] nvme nvme2: new ctrl: "testsubsys" [ 103.957192][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.957221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.985721][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'. [ 104.209512][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.214528][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.342458][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 112.515595][ T1141] nvme nvme1: rescanning namespaces. [ 112.515786][ T1265] nvme nvme2: rescanning namespaces. [ 112.540994][ T614] nvme nvme0: rescanning namespaces. [ 112.545020][ T5951] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 112.585608][ T5950] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 113.762561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 115.883417][ T5983] nvmet: Created nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 115.931044][ T5951] nvme nvme3: creating 2 I/O queues. [ 115.950593][ T5951] nvme nvme3: new ctrl: "testsubsys" [ 116.065115][ T5979] nvmet: Created nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 116.117138][ T5950] nvme nvme4: creating 2 I/O queues. [ 116.134257][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 116.135007][ T5993] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 116.174993][ T5950] nvme nvme4: new ctrl: "testsubsys" [ 117.365101][ T6007] netlink: 'syz.5.34': attribute type 1 has an invalid length. [ 118.124757][ T6015] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 119.435235][ T50] nvmet: Created nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 119.462139][ T6015] nvme nvme5: creating 2 I/O queues. [ 119.482910][ T6015] nvme nvme5: new ctrl: "testsubsys" [ 121.211159][ T6035] input: syz0 as /devices/virtual/input/input5 [ 122.511793][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.43'. [ 124.848773][ T6069] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 124.970169][ T5982] nvmet: Created nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 125.521305][ T6069] nvme nvme6: creating 2 I/O queues. [ 125.530626][ T6069] nvme nvme6: new ctrl: "testsubsys" [ 128.731240][ T6100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.53'. [ 131.761728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.706550][ T6102] input: syz0 as /devices/virtual/input/input6 [ 132.708486][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.708575][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.971706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 134.791754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.025854][ T6138] input: syz0 as /devices/virtual/input/input7 [ 138.021455][ T6137] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 138.848832][ T87] nvmet: Created nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 138.863705][ T6137] nvme nvme7: creating 2 I/O queues. [ 138.874172][ T6137] nvme nvme7: new ctrl: "testsubsys" [ 139.430607][ T6153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 140.915476][ T6160] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 141.716290][ T87] nvmet: Created nvm controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 141.788680][ T6160] nvme nvme8: creating 2 I/O queues. [ 141.808428][ T6160] nvme nvme8: new ctrl: "testsubsys" [ 145.906153][ T6194] overlayfs: failed to resolve './bus': -2 [ 146.600649][ T6193] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 146.764031][ T6201] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 146.838983][ T12] nvmet: Created nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 146.857102][ T6193] nvme nvme9: creating 2 I/O queues. [ 146.893342][ T6193] nvme nvme9: new ctrl: "testsubsys" [ 147.197357][ T614] nvmet: Created nvm controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 147.199498][ T6201] nvme nvme10: creating 2 I/O queues. [ 147.216101][ T6201] nvme nvme10: new ctrl: "testsubsys" [ 149.979721][ T6228] netlink: 'syz.4.83': attribute type 1 has an invalid length. [ 150.323527][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.325215][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.326684][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.327758][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.328555][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.630667][ T5618] Bluetooth: hci6: command tx timeout [ 154.451816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.746068][ T5618] Bluetooth: hci6: command tx timeout [ 154.985889][ T6252] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 155.203200][ T1149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.602181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 156.998367][ T5618] Bluetooth: hci6: command tx timeout [ 157.695585][ T13] nvmet: Created nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 157.737249][ T6252] nvme nvme11: creating 2 I/O queues. [ 157.749352][ T6252] nvme nvme11: new ctrl: "testsubsys" [ 158.387190][ T6270] input: syz0 as /devices/virtual/input/input9 [ 159.162322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 159.511480][ T5618] Bluetooth: hci6: command tx timeout [ 159.705817][ T1149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.936168][ T1149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.355140][ T1149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.079064][ T1149] bridge_slave_1: left allmulticast mode [ 164.079113][ T1149] bridge_slave_1: left promiscuous mode [ 164.080979][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.150667][ T1149] bridge_slave_0: left allmulticast mode [ 164.150703][ T1149] bridge_slave_0: left promiscuous mode [ 164.150929][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.648791][ T6318] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 165.902759][ T6316] input: syz0 as /devices/virtual/input/input10 [ 166.151592][ T5982] nvmet: Created nvm controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 166.162007][ T6318] nvme nvme12: creating 2 I/O queues. [ 166.174856][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 166.178203][ T6318] nvme nvme12: new ctrl: "testsubsys" [ 168.245309][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.173366][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.188538][ T1149] bond0 (unregistering): Released all slaves [ 171.964958][ T6378] input: syz0 as /devices/virtual/input/input11 [ 173.224251][ T6384] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 173.241275][ T1149] hsr_slave_0: left promiscuous mode [ 173.255246][ T1149] hsr_slave_1: left promiscuous mode [ 173.258126][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.258164][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.286388][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.286416][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.386736][ T1149] veth1_macvtap: left promiscuous mode [ 173.386803][ T1149] veth0_macvtap: left promiscuous mode [ 173.386932][ T1149] veth1_vlan: left promiscuous mode [ 173.387059][ T1149] veth0_vlan: left promiscuous mode [ 173.559615][ T5982] nvmet: Created nvm controller 14 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 173.566812][ T6384] nvme nvme13: creating 2 I/O queues. [ 173.719972][ T6384] nvme nvme13: new ctrl: "testsubsys" [ 175.170921][ T6405] input: syz0 as /devices/virtual/input/input12 [ 177.081758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 179.284106][ T6413] input: syz0 as /devices/virtual/input/input13 [ 179.641822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 180.051719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.777924][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 181.032391][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 181.426040][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.426176][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.426330][ T6235] bridge_slave_0: entered allmulticast mode [ 181.434202][ T6235] bridge_slave_0: entered promiscuous mode [ 181.637586][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 181.654482][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.654596][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.654762][ T6235] bridge_slave_1: entered allmulticast mode [ 181.657549][ T6235] bridge_slave_1: entered promiscuous mode [ 181.761100][ T6235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.810665][ T6235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.068876][ T6431] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 182.147144][ T6235] team0: Port device team_slave_0 added [ 182.223841][ T6235] team0: Port device team_slave_1 added [ 182.945133][ T5983] nvmet: Created nvm controller 15 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 182.980266][ T6431] nvme nvme14: creating 2 I/O queues. [ 183.016566][ T6431] nvme nvme14: new ctrl: "testsubsys" [ 183.121504][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.121530][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.121576][ T6235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.153527][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.153551][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.153595][ T6235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.510111][ T6446] input: syz0 as /devices/virtual/input/input14 [ 184.924725][ T6235] hsr_slave_0: entered promiscuous mode [ 184.925594][ T6235] hsr_slave_1: entered promiscuous mode [ 184.926209][ T6235] debugfs: 'hsr0' already exists in 'hsr' [ 184.926231][ T6235] Cannot create hsr debugfs directory [ 187.678181][ T6466] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 189.101427][ T5975] nvmet: Created nvm controller 16 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 189.146247][ T6466] nvme nvme15: creating 2 I/O queues. [ 189.218557][ T6466] nvme nvme15: new ctrl: "testsubsys" [ 189.280275][ T6480] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 189.414620][ T5979] nvmet: Created nvm controller 17 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 189.445209][ T6480] nvme nvme16: creating 2 I/O queues. [ 189.458008][ T6480] nvme nvme16: new ctrl: "testsubsys" [ 189.564002][ T6235] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.752991][ T6235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.789226][ T6235] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.387473][ T6235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.390696][ T6235] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.126977][ T6235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.297391][ T6235] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.360834][ T6235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.666994][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 191.728782][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.133'. [ 191.815895][ T6235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.728040][ T6235] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.776555][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.776700][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.584363][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.616147][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.000312][ T3377] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.000427][ T3377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.679768][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 197.711471][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.140'. [ 198.831688][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'. [ 198.946894][ T6235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.094527][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 201.027568][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'. [ 202.259361][ T6235] veth0_vlan: entered promiscuous mode [ 202.316333][ T6235] veth1_vlan: entered promiscuous mode [ 202.421070][ T6235] veth0_macvtap: entered promiscuous mode [ 202.440722][ T6235] veth1_macvtap: entered promiscuous mode [ 202.465833][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 202.761798][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.776790][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.601841][ T3377] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.602372][ T3377] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.606380][ T3377] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.611288][ T3377] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.108671][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 204.126755][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.126784][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.125161][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 206.127212][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.127233][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.972162][ T6692] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 210.172885][ T6689] input: syz0 as /devices/virtual/input/input15 [ 210.749786][ T5979] nvmet: Created nvm controller 18 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 210.781362][ T6692] nvme nvme17: creating 2 I/O queues. [ 211.104509][ T6687] Bluetooth: hci4: command 0x0406 tx timeout [ 211.104561][ T6687] Bluetooth: hci5: command 0x0406 tx timeout [ 211.182935][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 211.182987][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.497596][ T6687] Bluetooth: hci1: command 0x0406 tx timeout [ 212.438344][ T6692] nvme nvme17: new ctrl: "testsubsys" [ 213.526768][ T6719] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 214.866547][ T6729] overlayfs: failed to resolve './bus': -2 [ 216.054941][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.169'. [ 217.004114][ T1149] nvmet: Created nvm controller 19 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 217.047444][ T6739] nvme nvme18: creating 2 I/O queues. [ 217.165917][ T6739] nvme nvme18: new ctrl: "testsubsys" [ 220.187934][ T6755] input: syz0 as /devices/virtual/input/input16 [ 221.859819][ T6781] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 222.666124][ T6786] input: syz0 as /devices/virtual/input/input17 [ 225.974787][ T6801] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 226.302762][ T1141] nvmet: Created nvm controller 20 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 226.305484][ T6801] nvme nvme19: creating 2 I/O queues. [ 226.367367][ T6801] nvme nvme19: new ctrl: "testsubsys" [ 229.088397][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.188'. [ 229.993814][ T6833] input: syz0 as /devices/virtual/input/input18 [ 235.918039][ T6874] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 237.894672][ T12] nvmet: Created nvm controller 21 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 237.899505][ T6874] nvme nvme20: creating 2 I/O queues. [ 238.103902][ T6874] nvme nvme20: new ctrl: "testsubsys" [ 240.034319][ T5975] nvmet: Created nvm controller 22 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 240.083535][ T6898] nvme nvme21: creating 2 I/O queues. [ 240.090834][ T6898] nvme nvme21: new ctrl: "testsubsys" [ 240.583976][ T6900] input: syz0 as /devices/virtual/input/input19 [ 241.392565][ T6921] input: syz0 as /devices/virtual/input/input20 [ 242.705651][ C1] nvme nvme11: long keepalive RTT (2250 ms) [ 247.980420][ T6961] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 249.770524][ T6970] input: syz0 as /devices/virtual/input/input21 [ 251.776656][ T6979] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 252.745612][ T1141] nvmet: Created nvm controller 23 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 252.795289][ T6979] nvme nvme22: creating 2 I/O queues. [ 252.818567][ T6979] nvme nvme22: new ctrl: "testsubsys" [ 255.025641][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.025716][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.838105][ T7007] input: syz0 as /devices/virtual/input/input22 [ 259.249923][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 260.283646][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.287047][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.287731][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.289418][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.306538][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.418985][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.6.229'. [ 260.717045][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 262.381773][ T5621] Bluetooth: hci2: command tx timeout [ 264.461691][ T5621] Bluetooth: hci2: command tx timeout [ 265.132286][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.6.237'. [ 265.247025][ T87] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.279912][ T7080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 265.507883][ T87] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.697540][ T1265] nvmet: Created nvm controller 24 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 265.700831][ T7082] nvme nvme23: creating 2 I/O queues. [ 265.731358][ T7082] nvme nvme23: new ctrl: "testsubsys" [ 265.825605][ T87] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.039315][ T87] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.541908][ T5621] Bluetooth: hci2: command tx timeout [ 267.784096][ T1265] nvmet: Created nvm controller 25 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 268.089562][ T7107] nvme nvme24: creating 2 I/O queues. [ 268.134780][ T7107] nvme nvme24: new ctrl: "testsubsys" [ 269.235276][ T6685] Bluetooth: hci2: command tx timeout [ 269.335220][ T87] bridge_slave_1: left allmulticast mode [ 269.335404][ T87] bridge_slave_1: left promiscuous mode [ 269.388460][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.526178][ T87] bridge_slave_0: left allmulticast mode [ 269.526214][ T87] bridge_slave_0: left promiscuous mode [ 269.526494][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.744632][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.6.245'. [ 271.574366][ T7135] input: syz0 as /devices/virtual/input/input23 [ 272.019115][ T7142] netlink: 'syz.6.248': attribute type 1 has an invalid length. [ 272.930621][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.948108][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.950504][ T87] bond0 (unregistering): Released all slaves [ 273.184413][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.6.249'. [ 273.412159][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'. [ 273.559979][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 273.587350][ T5618] Bluetooth: hci6: command 0x0406 tx timeout [ 273.830336][ T87] hsr_slave_0: left promiscuous mode [ 273.839516][ T87] hsr_slave_1: left promiscuous mode [ 273.840477][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.840638][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.845584][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.845610][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.921321][ T87] veth1_macvtap: left promiscuous mode [ 273.921370][ T87] veth0_macvtap: left promiscuous mode [ 273.921676][ T87] veth1_vlan: left promiscuous mode [ 273.925185][ T87] veth0_vlan: left promiscuous mode [ 277.632206][ T87] team0 (unregistering): Port device team_slave_1 removed [ 277.688062][ T87] team0 (unregistering): Port device team_slave_0 removed [ 278.306387][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 279.844289][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.844459][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.844637][ T7029] bridge_slave_0: entered allmulticast mode [ 279.861139][ T7029] bridge_slave_0: entered promiscuous mode [ 279.887245][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.888896][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.889017][ T7029] bridge_slave_1: entered allmulticast mode [ 279.913531][ T7029] bridge_slave_1: entered promiscuous mode [ 280.121397][ T7029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.133147][ T7029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.321358][ T7029] team0: Port device team_slave_0 added [ 280.337610][ T7029] team0: Port device team_slave_1 added [ 280.533929][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.533955][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.534001][ T7029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.547470][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.547492][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.547536][ T7029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.318516][ T7029] hsr_slave_0: entered promiscuous mode [ 281.331378][ T7029] hsr_slave_1: entered promiscuous mode [ 281.332256][ T7029] debugfs: 'hsr0' already exists in 'hsr' [ 281.332282][ T7029] Cannot create hsr debugfs directory [ 283.310912][ T7239] input: syz0 as /devices/virtual/input/input24 [ 285.279380][ T7029] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 285.325723][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.338838][ T7029] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.369682][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 285.379189][ T7029] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 285.410731][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.415695][ T7029] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 285.443892][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.480318][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 288.367180][ T7029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.413992][ T5975] nvmet: Created nvm controller 26 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 288.447956][ T7286] nvme nvme25: creating 2 I/O queues. [ 288.552631][ T7286] nvme nvme25: new ctrl: "testsubsys" [ 288.561529][ T7029] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.616361][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.616479][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.663187][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.663309][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.889689][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.6.274'. [ 289.326595][ T3386] nvmet: Created nvm controller 27 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 289.351251][ T7307] nvme nvme26: creating 2 I/O queues. [ 289.382537][ T7307] nvme nvme26: new ctrl: "testsubsys" [ 289.624668][ T1291] nvmet: Created nvm controller 28 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 289.656954][ T7310] nvme nvme27: creating 2 I/O queues. [ 289.696248][ T7310] nvme nvme27: new ctrl: "testsubsys" [ 293.456510][ T7357] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 296.325542][ T5980] nvmet: Created nvm controller 29 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 296.335333][ T7029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.379460][ T7374] nvme nvme28: creating 2 I/O queues. [ 296.439106][ T7374] nvme nvme28: new ctrl: "testsubsys" [ 296.557199][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 298.729619][ T7412] input: syz0 as /devices/virtual/input/input25 [ 300.799982][ T7420] input: syz0 as /devices/virtual/input/input26 [ 302.211028][ T7029] veth0_vlan: entered promiscuous mode [ 302.260527][ T7029] veth1_vlan: entered promiscuous mode [ 302.840446][ T7029] veth0_macvtap: entered promiscuous mode [ 302.840740][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'. [ 302.885879][ T7029] veth1_macvtap: entered promiscuous mode [ 302.993765][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.058852][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.424223][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.426277][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.426698][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.439046][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.260191][ T3386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.260222][ T3386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.554010][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.554042][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.341109][ T7447] input: syz0 as /devices/virtual/input/input27 [ 306.984172][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 316.515434][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.515510][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.903746][ T1141] nvmet: Created nvm controller 30 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 319.908587][ T7533] nvme nvme29: creating 2 I/O queues. [ 319.961263][ T7533] nvme nvme29: new ctrl: "testsubsys" [ 327.757417][ T7589] input: syz0 as /devices/virtual/input/input28 [ 337.167307][ T7629] input: syz0 as /devices/virtual/input/input29 [ 340.925940][ T6685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.931509][ T6685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.939633][ T6685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.946010][ T6685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.946729][ T6685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.337766][ T1265] nvmet: Created nvm controller 31 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 341.373757][ T7648] nvme nvme30: creating 2 I/O queues. [ 341.403303][ T7648] nvme nvme30: new ctrl: "testsubsys" [ 344.080101][ T6685] Bluetooth: hci3: command tx timeout [ 344.707122][ T1149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.034016][ T7678] input: syz0 as /devices/virtual/input/input30 [ 346.195307][ T6685] Bluetooth: hci3: command tx timeout [ 346.673469][ T1149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.250547][ T1149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.661843][ T1149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.775557][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.777966][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.779544][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.780954][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.801353][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.184585][ T7705] input: syz0 as /devices/virtual/input/input31 [ 349.140706][ T5621] Bluetooth: hci3: command tx timeout [ 349.902427][ T5621] Bluetooth: hci1: command tx timeout [ 350.557933][ T7716] input: syz0 as /devices/virtual/input/input32 [ 351.181883][ T5621] Bluetooth: hci3: command tx timeout [ 351.721957][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 351.982637][ T5621] Bluetooth: hci1: command tx timeout [ 352.318146][ T1149] bridge_slave_1: left allmulticast mode [ 352.318183][ T1149] bridge_slave_1: left promiscuous mode [ 352.318425][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.366697][ T1149] bridge_slave_0: left allmulticast mode [ 352.366729][ T1149] bridge_slave_0: left promiscuous mode [ 352.366977][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.983346][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.003531][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.016742][ T1149] bond0 (unregistering): Released all slaves [ 353.938726][ T7753] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 353.966534][ T5975] nvmet: Created nvm controller 32 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 353.981441][ T7747] nvme nvme31: creating 2 I/O queues. [ 354.006209][ T7747] nvme nvme31: new ctrl: "testsubsys" [ 354.019732][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 354.062059][ T5621] Bluetooth: hci1: command tx timeout [ 355.453887][ T1149] hsr_slave_0: left promiscuous mode [ 355.460400][ T1149] hsr_slave_1: left promiscuous mode [ 355.464444][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.486414][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.511883][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.511910][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.559344][ T1149] veth1_macvtap: left promiscuous mode [ 355.559391][ T1149] veth0_macvtap: left promiscuous mode [ 355.559511][ T1149] veth1_vlan: left promiscuous mode [ 355.561193][ T1149] veth0_vlan: left promiscuous mode [ 356.391973][ T7782] input: syz0 as /devices/virtual/input/input33 [ 357.478412][ T5621] Bluetooth: hci1: command tx timeout [ 358.767283][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 358.830830][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 361.192806][ T7814] input: syz0 as /devices/virtual/input/input34 [ 363.772928][ T7844] overlayfs: failed to resolve './bus': -2 [ 364.710560][ T38] nvmet: Created nvm controller 33 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 364.739220][ T7837] nvme nvme32: creating 2 I/O queues. [ 364.768921][ T7837] nvme nvme32: new ctrl: "testsubsys" [ 364.868715][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.868835][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.868978][ T7649] bridge_slave_0: entered allmulticast mode [ 364.892776][ T7649] bridge_slave_0: entered promiscuous mode [ 364.920546][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.924785][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.924929][ T7649] bridge_slave_1: entered allmulticast mode [ 364.945320][ T7649] bridge_slave_1: entered promiscuous mode [ 365.126171][ T7861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.370'. [ 365.269876][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.288401][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.639816][ T1149] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.808720][ T7649] team0: Port device team_slave_0 added [ 366.095905][ T7649] team0: Port device team_slave_1 added [ 366.151637][ T7877] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 366.255334][ T1141] nvmet: Created nvm controller 34 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 366.261004][ T7877] nvme nvme33: creating 2 I/O queues. [ 366.296430][ T7877] nvme nvme33: new ctrl: "testsubsys" [ 366.447223][ T1149] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.517332][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.517356][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.517402][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.588957][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.588981][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.589032][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.655614][ T7889] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 366.861577][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.861720][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.861881][ T7699] bridge_slave_0: entered allmulticast mode [ 366.873777][ T7699] bridge_slave_0: entered promiscuous mode [ 366.947364][ T12] nvmet: Created nvm controller 35 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 366.959865][ T7889] nvme nvme34: creating 2 I/O queues. [ 366.979322][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.979410][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.979624][ T7699] bridge_slave_1: entered allmulticast mode [ 366.986430][ T7699] bridge_slave_1: entered promiscuous mode [ 366.989675][ T7889] nvme nvme34: new ctrl: "testsubsys" [ 367.068164][ T1149] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.071850][ T7896] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 367.144632][ T7649] hsr_slave_0: entered promiscuous mode [ 367.154328][ T7649] hsr_slave_1: entered promiscuous mode [ 367.159907][ T7649] debugfs: 'hsr0' already exists in 'hsr' [ 367.159934][ T7649] Cannot create hsr debugfs directory [ 367.760639][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 367.831137][ T1291] nvmet: Created nvm controller 36 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e6cabb4f-09f9-4882-a93e-96336a15c03e. [ 367.845498][ T7896] nvme nvme35: creating 2 I/O queues. [ 367.862812][ T7896] blk-mq: failed to allocate request map [ 367.869757][ T7896] ------------[ cut here ]------------ [ 367.869769][ T7896] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 367.869783][ T7896] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30, CPU#1: syz.6.376/7896 [ 367.901937][ T7896] Modules linked in: [ 367.905828][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.6.376 Not tainted syzkaller #0 PREEMPT(full) [ 367.915139][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 367.925319][ T7896] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 367.931241][ T7896] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 367.950989][ T7896] RSP: 0018:ffffc90003db79c8 EFLAGS: 00010202 [ 367.957799][ T7896] RAX: 0000000000000001 RBX: ffffe8ffffca2000 RCX: ffffc9001d7f2000 [ 367.966327][ T7896] RDX: ffffe8ffffca2180 RSI: ffffffff81f6e43f RDI: ffff88807c420000 [ 367.974346][ T7896] RBP: ffff88807eea9800 R08: 0000000000000005 R09: 00000000ffffffff [ 367.982877][ T7896] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c114310 [ 367.990979][ T7896] R13: 0000000000000000 R14: ffffffff8e6600b0 R15: ffff88802c114350 [ 367.998989][ T7896] FS: 00007fc12821d6c0(0000) GS:ffff888123c4b000(0000) knlGS:0000000000000000 [ 368.007964][ T7896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.014565][ T7896] CR2: 00007f2ff8ddcf88 CR3: 000000005fccf000 CR4: 0000000000350ef0 [ 368.022574][ T7896] Call Trace: [ 368.025837][ T7896] [ 368.028759][ T7896] blk_mq_alloc_tag_set+0xdd8/0x1330 [ 368.034131][ T7896] nvme_alloc_io_tag_set+0x3bc/0x750 [ 368.039427][ T7896] ? __pfx_nvme_alloc_io_tag_set+0x10/0x10 [ 368.045264][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.050898][ T7896] ? nvmet_sq_init+0x250/0x320 [ 368.055709][ T7896] ? __pfx_nvmet_sq_init+0x10/0x10 [ 368.061616][ T7896] ? __pfx_nvmf_connect_admin_queue+0x10/0x10 [ 368.068401][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.074140][ T7896] ? nvme_loop_init_io_queues+0x12a/0x190 [ 368.079920][ T7896] ? __pfx_nvme_loop_init_io_queues+0x10/0x10 [ 368.086546][ T7896] nvme_loop_create_ctrl+0x6bc/0xee0 [ 368.092274][ T7896] nvmf_dev_write+0x4ee/0xb60 [ 368.096967][ T7896] vfs_write+0x2aa/0x1050 [ 368.101317][ T7896] ? __pfx_nvmf_dev_write+0x10/0x10 [ 368.106714][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.112414][ T7896] ? lock_acquire+0x1d1/0x380 [ 368.117094][ T7896] ? __fget_files+0x34/0x3d0 [ 368.121715][ T7896] ? __pfx_vfs_write+0x10/0x10 [ 368.126492][ T7896] ? find_held_lock+0x2b/0x80 [ 368.131179][ T7896] ? __fget_files+0x215/0x3d0 [ 368.135904][ T7896] ? __fget_files+0x215/0x3d0 [ 368.140582][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.146328][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.152014][ T7896] ? __fget_files+0x21f/0x3d0 [ 368.156707][ T7896] ksys_write+0x12a/0x250 [ 368.161833][ T7896] ? __pfx_ksys_write+0x10/0x10 [ 368.166708][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.172830][ T7896] do_syscall_64+0x123/0x790 [ 368.177436][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.183379][ T7896] RIP: 0033:0x7fc12739e159 [ 368.187790][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.207448][ T7896] RSP: 002b:00007fc12821d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.215913][ T7896] RAX: ffffffffffffffda RBX: 00007fc127625fa0 RCX: 00007fc12739e159 [ 368.223915][ T7896] RDX: 000000000000001e RSI: 0000200000000900 RDI: 0000000000000004 [ 368.231928][ T7896] RBP: 00007fc12743506b R08: 0000000000000000 R09: 0000000000000000 [ 368.239893][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.247879][ T7896] R13: 00007fc127626038 R14: 00007fc127625fa0 R15: 00007ffe1926e958 [ 368.255908][ T7896] [ 368.258919][ T7896] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 368.266184][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.6.376 Not tainted syzkaller #0 PREEMPT(full) [ 368.275390][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 368.285435][ T7896] Call Trace: [ 368.288699][ T7896] [ 368.291621][ T7896] dump_stack_lvl+0x100/0x190 [ 368.296310][ T7896] vpanic+0x553/0x970 [ 368.300288][ T7896] ? __pfx_vpanic+0x10/0x10 [ 368.304797][ T7896] panic+0xd1/0xe0 [ 368.308513][ T7896] ? __pfx_panic+0x10/0x10 [ 368.312940][ T7896] check_panic_on_warn.cold+0x19/0x34 [ 368.318313][ T7896] ? cleanup_srcu_struct+0x6e4/0xb30 [ 368.323601][ T7896] __warn.cold+0x191/0x318 [ 368.328020][ T7896] __report_bug+0x30f/0x440 [ 368.332530][ T7896] ? cleanup_srcu_struct+0x6e4/0xb30 [ 368.337821][ T7896] ? __pfx___report_bug+0x10/0x10 [ 368.342848][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.348485][ T7896] ? debug_object_deactivate+0x2e4/0x3b0 [ 368.354147][ T7896] ? __pfx_debug_object_deactivate+0x10/0x10 [ 368.360143][ T7896] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.365531][ T7896] ? _raw_spin_lock_irqsave+0x52/0x60 [ 368.370932][ T7896] ? cleanup_srcu_struct+0x6e4/0xb30 [ 368.376222][ T7896] report_bug+0xb3/0x220 [ 368.380484][ T7896] ? cleanup_srcu_struct+0x6e4/0xb30 [ 368.385774][ T7896] handle_bug+0x16a/0x2a0 [ 368.390123][ T7896] exc_invalid_op+0x17/0x50 [ 368.394664][ T7896] asm_exc_invalid_op+0x1a/0x20 [ 368.399510][ T7896] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 368.405405][ T7896] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 368.425009][ T7896] RSP: 0018:ffffc90003db79c8 EFLAGS: 00010202 [ 368.431089][ T7896] RAX: 0000000000000001 RBX: ffffe8ffffca2000 RCX: ffffc9001d7f2000 [ 368.439069][ T7896] RDX: ffffe8ffffca2180 RSI: ffffffff81f6e43f RDI: ffff88807c420000 [ 368.447036][ T7896] RBP: ffff88807eea9800 R08: 0000000000000005 R09: 00000000ffffffff [ 368.454997][ T7896] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c114310 [ 368.462960][ T7896] R13: 0000000000000000 R14: ffffffff8e6600b0 R15: ffff88802c114350 [ 368.470946][ T7896] ? __timer_delete_sync+0x10f/0x1c0 [ 368.476250][ T7896] ? cleanup_srcu_struct+0x36f/0xb30 [ 368.481553][ T7896] blk_mq_alloc_tag_set+0xdd8/0x1330 [ 368.486860][ T7896] nvme_alloc_io_tag_set+0x3bc/0x750 [ 368.492153][ T7896] ? __pfx_nvme_alloc_io_tag_set+0x10/0x10 [ 368.497960][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.503596][ T7896] ? nvmet_sq_init+0x250/0x320 [ 368.508374][ T7896] ? __pfx_nvmet_sq_init+0x10/0x10 [ 368.513499][ T7896] ? __pfx_nvmf_connect_admin_queue+0x10/0x10 [ 368.519577][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.525214][ T7896] ? nvme_loop_init_io_queues+0x12a/0x190 [ 368.530947][ T7896] ? __pfx_nvme_loop_init_io_queues+0x10/0x10 [ 368.537037][ T7896] nvme_loop_create_ctrl+0x6bc/0xee0 [ 368.542343][ T7896] nvmf_dev_write+0x4ee/0xb60 [ 368.547029][ T7896] vfs_write+0x2aa/0x1050 [ 368.551376][ T7896] ? __pfx_nvmf_dev_write+0x10/0x10 [ 368.556568][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.562205][ T7896] ? lock_acquire+0x1d1/0x380 [ 368.566880][ T7896] ? __fget_files+0x34/0x3d0 [ 368.571472][ T7896] ? __pfx_vfs_write+0x10/0x10 [ 368.576257][ T7896] ? find_held_lock+0x2b/0x80 [ 368.580944][ T7896] ? __fget_files+0x215/0x3d0 [ 368.585622][ T7896] ? __fget_files+0x215/0x3d0 [ 368.590317][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.595956][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.601590][ T7896] ? __fget_files+0x21f/0x3d0 [ 368.606276][ T7896] ksys_write+0x12a/0x250 [ 368.610619][ T7896] ? __pfx_ksys_write+0x10/0x10 [ 368.615487][ T7896] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.621130][ T7896] do_syscall_64+0x123/0x790 [ 368.625730][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.631619][ T7896] RIP: 0033:0x7fc12739e159 [ 368.636048][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.655660][ T7896] RSP: 002b:00007fc12821d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.664070][ T7896] RAX: ffffffffffffffda RBX: 00007fc127625fa0 RCX: 00007fc12739e159 [ 368.672041][ T7896] RDX: 000000000000001e RSI: 0000200000000900 RDI: 0000000000000004 [ 368.680019][ T7896] RBP: 00007fc12743506b R08: 0000000000000000 R09: 0000000000000000 [ 368.687997][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.695960][ T7896] R13: 00007fc127626038 R14: 00007fc127625fa0 R15: 00007ffe1926e958 [ 368.703940][ T7896] [ 368.707216][ T7896] Kernel Offset: disabled [ 368.711530][ T7896] Rebooting in 86400 seconds..